Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59843d55-6c9e-4bd5-90cf-30b00b226dce.roa
File: 59843d55-6c9e-4bd5-90cf-30b00b226dce.roa (raw, json)
Hash identifier: ZmJsS1MPiofRhzAbT9EVnbnTDKNRlTerOpnH8MVEmk0=
Subject key identifier: AF:DA:1D:EC:A7:DA:96:85:CF:4D:B0:96:D2:B1:30:0C:E5:9F:D3:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2EC42C1613EEF44CEE9CBC186C4ABA9A0D1D4362
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59843d55-6c9e-4bd5-90cf-30b00b226dce.roa
Signing time: Wed 09 Sep 2026 16:14:09 +0000
ROA not before: Wed 09 Sep 2026 16:14:09 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d037:d000::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c4:2c:16:13:ee:f4:4c:ee:9c:bc:18:6c:4a:ba:9a:0d:1d:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:09 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=9d8b4496b013769b17fcb265475b38b17814660764ea178a07e73d11809eb413, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:44:d3:06:6a:ce:af:27:b0:70:ea:38:75:
d5:81:b4:85:19:dd:dc:e1:8c:6b:6e:e6:48:6d:a1:
38:e9:17:8a:ce:7e:52:7c:c8:b4:ef:67:6b:64:dc:
ce:6a:dd:49:0d:0c:e5:04:38:e0:91:f5:33:69:69:
f4:02:c9:0a:5f:6f:de:ad:e9:b3:79:23:ec:40:52:
7e:c2:5a:33:f8:c2:b4:33:ab:35:9a:63:0b:62:ee:
91:fa:77:a8:ca:a7:74:d9:2b:bd:d4:b6:c5:0f:82:
b3:62:e7:73:36:df:fb:0f:7b:22:d1:73:22:da:4d:
e0:44:4a:ce:4a:ea:a4:1c:04:42:07:d0:31:d4:c6:
a7:e8:83:b1:a6:e8:e5:d1:6d:62:31:8f:63:17:9e:
83:b4:8d:fd:39:42:9f:28:2f:0a:96:01:55:09:6b:
fe:d2:bb:ce:54:75:38:85:ef:cd:b1:23:7d:4a:d9:
00:f6:13:80:dd:db:e0:2b:a8:5d:35:20:a1:70:9b:
17:f5:63:8a:68:1b:4b:98:d3:c8:b9:cb:ab:13:e9:
7b:a6:1d:8f:40:f3:ab:57:b0:00:27:43:91:5a:e5:
e4:92:d4:01:0b:51:3b:d5:90:83:a9:c5:75:5a:36:
d5:8c:37:2c:48:18:5e:db:14:d3:8d:87:61:4c:fd:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:1D:EC:A7:DA:96:85:CF:4D:B0:96:D2:B1:30:0C:E5:9F:D3:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/59843d55-6c9e-4bd5-90cf-30b00b226dce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d037:d000::/46
Signature Algorithm: sha256WithRSAEncryption
09:58:14:b3:cf:75:55:d7:82:b1:a5:4b:74:d1:ee:24:2d:2c:
f8:7b:cb:38:c4:0e:4e:7a:e5:c5:2c:6b:12:39:3e:51:16:5e:
44:e8:ce:fb:1e:76:8b:5d:2f:d7:26:8b:74:84:fd:41:cb:46:
31:a3:c1:56:86:35:55:be:41:b8:84:80:a1:33:30:12:ff:d3:
8d:56:1c:29:ac:0c:c8:47:ea:a3:3c:4b:27:57:49:b1:5c:52:
62:ca:3d:73:75:81:6f:87:a4:f4:af:d1:c4:93:30:97:ec:c5:
74:08:6c:bc:6c:9b:4e:0b:0b:f9:e8:83:e2:45:84:25:3f:79:
44:aa:e9:37:2e:86:5c:a3:0b:7d:ae:20:11:5d:b1:9b:0b:b3:
21:80:c0:18:73:e5:c6:8b:55:91:b9:66:bd:80:59:78:06:f0:
8e:2e:0a:5a:26:52:64:5a:f0:f1:bf:b2:87:cd:3a:37:f5:78:
18:1f:9e:15:d3:6c:32:fa:11:5c:12:9b:aa:34:43:4f:f4:39:
c5:6c:9a:cb:3a:28:37:56:5e:77:12:8a:15:a7:bc:dc:d0:49:
88:55:fc:d4:c1:23:65:bc:64:1a:76:ea:57:89:dd:12:59:00:
d1:29:fb:78:63:6f:44:25:c4:6c:26:6c:30:59:00:ab:56:3f:
b2:60:ef:6c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULsQsFhPu9EzunLwYbEq6mg0dQ2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE0MDlaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDlkOGI0NDk2YjAxMzc2OWIxN2ZjYjI2NTQ3NWIzOGIxNzgxNDY2MDc2NGVh
MTc4YTA3ZTczZDExODA5ZWI0MTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIMRNMGas6vJ7Bw6jh11YG0hRnd3OGMa27mSG2hOOkXis5+UnzItO9na2Tc
zmrdSQ0M5QQ44JH1M2lp9ALJCl9v3q3ps3kj7EBSfsJaM/jCtDOrNZpjC2Lukfp3
qMqndNkrvdS2xQ+Cs2Lnczbf+w97ItFzItpN4ERKzkrqpBwEQgfQMdTGp+iDsabo
5dFtYjGPYxeeg7SN/TlCnygvCpYBVQlr/tK7zlR1OIXvzbEjfUrZAPYTgN3b4Cuo
XTUgoXCbF/VjimgbS5jTyLnLqxPpe6Ydj0Dzq1ewACdDkVrl5JLUAQtRO9WQg6nF
dVo21Yw3LEgYXtsU042HYUz9J68CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSv2h3s
p9qWhc9NsJbSsTAM5Z/T7zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTk4NDNkNTUtNmM5ZS00YmQ1LTkwY2YtMzBiMDBiMjI2ZGNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DfQ
ADANBgkqhkiG9w0BAQsFAAOCAQEACVgUs891VdeCsaVLdNHuJC0s+HvLOMQOTnrl
xSxrEjk+URZeROjO+x52i10v1yaLdIT9QctGMaPBVoY1Vb5BuISAoTMwEv/TjVYc
KawMyEfqozxLJ1dJsVxSYso9c3WBb4ek9K/RxJMwl+zFdAhsvGybTgsL+eiD4kWE
JT95RKrpNy6GXKMLfa4gEV2xmwuzIYDAGHPlxotVkblmvYBZeAbwji4KWiZSZFrw
8b+yh806N/V4GB+eFdNsMvoRXBKbqjRDT/Q5xWyayzooN1ZedxKKFae83NBJiFX8
1MEjZbxkGnbqV4ndElkA0Sn7eGNvRCXEbCZsMFkAq1Y/smDvbA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:24 2026 by rpki-client