Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
File: 42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa (raw, json)
Hash identifier: QcSL/iB6jmgPyAVuORbPU8BKRdJCOIKMUuGDaUaAtSg=
Subject key identifier: 7D:DF:D0:DC:3E:B9:A2:44:23:97:D3:70:C4:91:92:9B:2C:E6:A5:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AF16538C0A61846C47FBC7DF09C4DD7CB42C071
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
Signing time: Fri 07 Aug 2026 04:50:41 +0000
ROA not before: Fri 07 Aug 2026 04:50:41 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8090::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f1:65:38:c0:a6:18:46:c4:7f:bc:7d:f0:9c:4d:d7:cb:42:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:41 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d388a509bf2ca82c69b229a8464f1cd8b2646cb85ff1bf207e3f6559d25b3158, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:4a:d1:7b:12:b5:00:3a:dc:50:17:d0:36:
ea:99:d3:97:6a:fa:44:3b:aa:dc:5c:73:17:89:28:
4b:81:8d:17:f9:2b:0f:5b:10:fd:ce:7e:15:4c:a9:
ad:68:b6:37:e5:22:fd:95:a1:3b:ff:dc:21:71:74:
18:32:08:e5:ed:21:cc:84:68:63:31:fc:14:2a:1c:
d1:d0:c6:b1:44:02:05:7d:b9:f0:e1:50:e6:73:0a:
e8:07:9e:4c:ee:e3:dc:08:9d:81:67:ee:91:30:9d:
73:ef:86:1f:ba:b3:6a:a0:58:00:10:9e:c8:bc:23:
52:19:5f:ff:bc:78:f3:9b:e9:39:c8:0a:f2:4c:74:
b5:29:70:09:f1:6e:2f:47:d8:a3:c7:aa:a3:c9:8a:
d0:b9:10:1e:f7:a0:37:0c:b4:bd:f3:15:d8:d9:9d:
bf:dd:a1:d2:bb:ee:e4:a0:7e:b8:ca:57:e8:fc:3f:
70:94:99:a0:e3:75:33:0b:90:20:15:b9:c9:6d:9d:
6b:b0:5c:e4:cf:21:08:85:85:78:d3:2b:9c:4d:98:
93:51:4c:83:6c:cf:38:65:33:d6:7f:8d:56:29:20:
76:a4:7f:d0:cf:5e:09:1f:55:96:9b:5c:97:61:76:
2f:59:b4:5f:26:ed:f8:bb:dd:e4:d4:55:52:83:58:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:D0:DC:3E:B9:A2:44:23:97:D3:70:C4:91:92:9B:2C:E6:A5:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8090::/48
Signature Algorithm: sha256WithRSAEncryption
68:28:6f:c9:64:0b:0c:af:99:f3:53:a9:f6:66:8c:35:85:1c:
9b:05:49:c7:8e:f4:b1:dc:86:fb:05:03:0b:b6:93:ee:75:e1:
e7:40:52:53:17:45:4b:d0:40:ad:86:70:36:8b:c0:4b:58:72:
9b:17:ad:6b:5e:b1:99:0a:69:d8:2c:12:f9:1e:f5:57:d2:ce:
b6:47:47:0f:fb:4a:26:4c:c0:d5:db:28:b8:df:1e:e9:54:70:
7d:78:12:a1:73:55:b6:2a:fe:70:f9:86:c9:83:5b:86:41:f9:
f8:3a:c9:5b:bf:9c:cd:3e:98:1d:4e:23:10:a2:3e:1d:3d:a2:
3d:66:25:fa:eb:5a:1f:c8:c7:11:9b:bc:3e:eb:96:76:5a:61:
82:e4:dd:93:21:f8:d4:91:94:91:04:2a:dc:3b:f5:32:85:a2:
a8:c6:71:c3:76:4c:d8:37:c0:d5:e5:ab:eb:51:f9:c9:2e:24:
3c:77:1f:9d:3a:91:7c:ec:51:04:fa:bb:65:48:a1:7a:55:14:
19:4d:b9:ec:dc:9b:5e:be:47:ec:3b:ef:41:14:28:05:89:30:
66:62:8e:d2:24:b0:5c:51:37:e3:d6:9a:19:fc:f0:ce:6a:55:
13:82:43:d3:27:cc:ce:ed:1c:e3:13:ec:97:c8:5d:e6:e0:9d:
35:03:c0:0f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWvFlOMCmGEbEf7x98JxN18tCwHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwNDFaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGQzODhhNTA5YmYyY2E4MmM2OWIyMjlhODQ2NGYxY2Q4YjI2NDZjYjg1ZmYx
YmYyMDdlM2Y2NTU5ZDI1YjMxNTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKanStF7ErUAOtxQF9A26pnTl2r6RDuq3FxzF4koS4GNF/krD1sQ/c5+FUyp
rWi2N+Ui/ZWhO//cIXF0GDII5e0hzIRoYzH8FCoc0dDGsUQCBX258OFQ5nMK6Aee
TO7j3AidgWfukTCdc++GH7qzaqBYABCeyLwjUhlf/7x485vpOcgK8kx0tSlwCfFu
L0fYo8eqo8mK0LkQHvegNwy0vfMV2Nmdv92h0rvu5KB+uMpX6Pw/cJSZoON1MwuQ
IBW5yW2da7Bc5M8hCIWFeNMrnE2Yk1FMg2zPOGUz1n+NVikgdqR/0M9eCR9Vlptc
l2F2L1m0Xybt+Lvd5NRVUoNY+okCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR939Dc
PrmiRCOX03DEkZKbLOalbzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDJlZjdkODktYjliZi00NjBmLWI5MDYtNzQ0M2Q5NmY0YTZmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
kDANBgkqhkiG9w0BAQsFAAOCAQEAaChvyWQLDK+Z81Op9maMNYUcmwVJx470sdyG
+wUDC7aT7nXh50BSUxdFS9BArYZwNovAS1hymxeta16xmQpp2CwS+R71V9LOtkdH
D/tKJkzA1dsouN8e6VRwfXgSoXNVtir+cPmGyYNbhkH5+DrJW7+czT6YHU4jEKI+
HT2iPWYl+utaH8jHEZu8PuuWdlphguTdkyH41JGUkQQq3Dv1MoWiqMZxw3ZM2DfA
1eWr61H5yS4kPHcfnTqRfOxRBPq7ZUihelUUGU257NybXr5H7DvvQRQoBYkwZmKO
0iSwXFE349aaGfzwzmpVE4JD0yfMzu0c4xPsl8hd5uCdNQPADw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:04 2026 by rpki-client