Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa
File: 490b358b-f6aa-40cb-8469-31081e257eb7.roa (raw, json)
Hash identifier: MZ9hlsnxxU0fT/8ztUuVjuf1MmR9laY1BHVoIyHrNgE=
Subject key identifier: 6A:01:56:2B:90:4C:A9:F6:B4:70:50:00:C8:D8:C1:78:28:C0:AD:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E7D07D064940D050A3B0D48054BB5F540976133
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa
Signing time: Thu 10 Sep 2026 02:30:16 +0000
ROA not before: Thu 10 Sep 2026 02:30:16 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7d:07:d0:64:94:0d:05:0a:3b:0d:48:05:4b:b5:f5:40:97:61:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:16 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=2d0f0fec1dc3b8e5f0539a85a1680235da2a96c16fda63783aedb30fce6783b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:4c:cb:ed:af:6d:2d:a9:74:68:31:a8:aa:
32:8b:fe:d3:e2:40:cc:11:9d:2d:f2:ce:a3:d5:98:
e9:0c:65:49:ab:10:c5:47:35:4e:09:ee:c7:76:fc:
f2:fa:11:f0:db:9a:30:b4:01:fc:b3:97:7f:c8:c0:
8c:60:c6:37:1f:a6:7f:97:50:29:d1:e6:06:36:ad:
d4:5d:55:b5:5f:67:04:81:fe:39:7e:3f:5b:5d:55:
1c:1a:8e:cd:9c:c8:a1:f6:ba:5d:dd:77:32:5b:fe:
e1:f0:94:da:2b:76:e0:2a:29:9e:30:b1:ad:14:bc:
98:8e:be:ba:4a:41:a4:29:99:04:21:46:2b:4a:8d:
ba:4a:4b:57:a8:4c:f8:15:a4:01:f1:34:f1:e3:d6:
3e:a1:82:a4:c6:de:0c:d9:e7:44:dc:5c:58:17:10:
93:35:dd:a0:c0:34:f4:fe:73:9c:aa:2d:9c:f2:65:
a0:79:20:ab:af:fe:9b:d7:44:33:fd:c0:9b:3f:33:
12:7a:bc:56:5b:39:8e:75:eb:ac:69:13:5e:ab:1f:
1a:4c:90:7e:85:eb:eb:30:c3:d4:6c:df:57:a8:f1:
44:19:0b:a3:42:10:0f:8c:e9:a6:98:08:76:eb:70:
d9:dd:7f:83:b7:dd:d7:cd:52:a8:fe:d3:3e:08:9e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:56:2B:90:4C:A9:F6:B4:70:50:00:C8:D8:C1:78:28:C0:AD:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:8020::/48
Signature Algorithm: sha256WithRSAEncryption
5e:0b:b9:30:03:b8:4a:6f:94:38:1a:4c:54:66:a2:2a:c9:f4:
2e:25:d3:6a:c1:d3:81:31:29:6e:bd:2e:6f:f1:2b:77:15:a2:
4d:4d:7d:d0:05:48:7e:b3:66:4c:e4:9d:9d:9a:fa:48:17:a3:
32:de:33:d0:49:00:98:d7:d7:5c:f8:8b:a1:01:2c:30:16:24:
0d:35:56:01:d7:94:23:6b:f8:c0:6c:3d:7a:67:41:6f:3a:ac:
80:0e:5b:ac:b8:42:6b:3b:23:79:d0:ed:cb:88:bb:9c:1e:db:
bd:9e:be:1a:4c:d6:a9:b7:77:fe:71:2e:6d:51:2d:e4:ca:8a:
6f:fe:f8:85:67:c3:d2:68:fc:94:b0:88:a7:9d:84:84:70:ae:
a0:e6:6b:fe:25:e6:04:2e:44:7b:af:6b:4d:1f:88:f7:15:76:
f7:76:1f:df:81:0a:6d:26:46:be:69:ac:dc:96:9a:cc:90:c1:
fe:c8:9b:39:d2:92:11:e6:76:87:f9:17:8f:b4:93:e4:ae:9b:
49:5e:98:7f:e3:3b:e9:f9:2f:f8:cd:5b:2a:42:27:72:43:a4:
4c:df:b6:24:6f:bd:6c:6c:7a:62:4b:ef:cf:67:d9:a9:e1:92:
24:c8:ab:d9:75:13:55:00:54:e1:fe:69:13:af:d7:f5:37:79:
f7:46:9c:f3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHn0H0GSUDQUKOw1IBUu19UCXYTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjMwMTZaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDJkMGYwZmVjMWRjM2I4ZTVmMDUzOWE4NWExNjgwMjM1ZGEyYTk2YzE2ZmRh
NjM3ODNhZWRiMzBmY2U2NzgzYjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK23TMvtr20tqXRoMaiqMov+0+JAzBGdLfLOo9WY6QxlSasQxUc1Tgnux3b8
8voR8NuaMLQB/LOXf8jAjGDGNx+mf5dQKdHmBjat1F1VtV9nBIH+OX4/W11VHBqO
zZzIofa6Xd13Mlv+4fCU2it24CopnjCxrRS8mI6+ukpBpCmZBCFGK0qNukpLV6hM
+BWkAfE08ePWPqGCpMbeDNnnRNxcWBcQkzXdoMA09P5znKotnPJloHkgq6/+m9dE
M/3Amz8zEnq8Vls5jnXrrGkTXqsfGkyQfoXr6zDD1GzfV6jxRBkLo0IQD4zpppgI
dutw2d1/g7fd181SqP7TPgieogcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRqAVYr
kEyp9rRwUADI2MF4KMCtBjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDkwYjM1OGItZjZhYS00MGNiLTg0NjktMzEwODFlMjU3ZWI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuA
IDANBgkqhkiG9w0BAQsFAAOCAQEAXgu5MAO4Sm+UOBpMVGaiKsn0LiXTasHTgTEp
br0ub/ErdxWiTU190AVIfrNmTOSdnZr6SBejMt4z0EkAmNfXXPiLoQEsMBYkDTVW
AdeUI2v4wGw9emdBbzqsgA5brLhCazsjedDty4i7nB7bvZ6+GkzWqbd3/nEubVEt
5MqKb/74hWfD0mj8lLCIp52EhHCuoOZr/iXmBC5Ee69rTR+I9xV293Yf34EKbSZG
vmms3JaazJDB/sibOdKSEeZ2h/kXj7ST5K6bSV6Yf+M76fkv+M1bKkInckOkTN+2
JG+9bGx6Ykvvz2fZqeGSJMir2XUTVQBU4f5pE6/X9Td590ac8w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:25 2026 by rpki-client