Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa
File: 5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa (raw, json)
Hash identifier: W7xJJ5pbNXslM3n4ltm92GtiNuAcFVHGtmkNlHz1xI4=
Subject key identifier: 14:EE:C6:5E:FB:3F:70:8A:82:4D:9D:60:B0:88:7D:04:2A:AC:82:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59A0AE17005FCFFC74B12AF75FA779B3FC17E885
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa
Signing time: Wed 19 Aug 2026 01:01:01 +0000
ROA not before: Wed 19 Aug 2026 01:01:01 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a0:ae:17:00:5f:cf:fc:74:b1:2a:f7:5f:a7:79:b3:fc:17:e8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:01:01 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=3af235f04ea50bc82c86d5faff39e6ad0beb0acabe8efd0dd47d16bdc21f08f5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:99:ce:13:86:1c:50:bb:d6:9d:fc:7a:d7:
e5:1c:c1:f9:fb:67:71:0a:9a:39:0b:32:91:02:ad:
07:85:23:d2:f9:03:ac:73:af:3b:48:f7:c5:53:75:
38:5b:3f:ef:e4:27:fc:35:12:72:39:f9:32:a9:1d:
ce:33:52:af:62:c0:89:fe:44:09:45:66:3e:da:b8:
cc:f9:34:b2:a0:98:bc:af:e0:be:61:cd:53:af:1b:
4d:db:60:cb:04:c1:fb:1e:d2:dd:28:c0:da:f0:57:
c2:a2:a4:d2:6b:5a:c5:1b:17:dc:15:74:5b:97:9b:
55:27:5a:89:f5:8e:13:53:d1:25:ca:7b:fe:09:a5:
ad:8a:21:1f:f8:7e:6a:d7:16:3a:33:de:36:08:c4:
81:82:73:bf:07:28:5a:fc:8b:da:3b:5b:bf:d0:1c:
a0:e7:30:84:89:e9:fb:e5:ba:74:ac:64:39:a6:97:
d3:1a:e0:34:77:34:5e:36:27:76:e9:bf:6e:88:c9:
eb:90:40:b5:3d:0f:89:21:7d:6b:f0:94:d6:61:3f:
e7:a6:61:7e:0c:19:93:78:9f:a8:63:86:46:8f:b6:
3b:89:21:db:88:f0:4d:14:da:35:aa:1e:26:e5:49:
d2:00:8d:34:6c:b9:4f:ca:ca:ab:e3:6d:3c:86:5f:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EE:C6:5E:FB:3F:70:8A:82:4D:9D:60:B0:88:7D:04:2A:AC:82:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b24421e-edaf-49c6-9098-ab3ad0bd7a76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:32:c9:1a:08:aa:63:3a:5e:59:40:e9:de:58:e3:de:e7:58:
92:8e:52:da:30:42:10:bf:40:cc:3c:c1:1e:ec:f9:45:53:d0:
d6:cc:bb:cc:a5:2c:74:a5:4f:0e:98:25:8c:f3:f0:27:34:73:
88:cc:17:7a:6c:14:fa:00:f0:7d:6d:51:d1:51:50:ef:11:bb:
07:61:32:2e:43:16:5a:6a:bb:44:e5:71:a7:ae:02:b0:48:eb:
29:35:97:03:2b:c0:a5:fc:0b:d3:0c:8d:4a:a2:0a:ca:9f:e5:
9a:0b:bc:b4:6b:9d:06:19:9c:7a:8d:56:1f:13:05:57:6e:3d:
24:43:5e:64:d7:84:0a:67:ad:fb:e5:bc:97:cc:df:e8:e0:b9:
58:2e:3c:fb:d3:59:11:e0:46:8c:a8:c2:b7:85:63:9c:42:b4:
2a:4f:14:9c:51:f3:d9:b3:59:49:f8:bf:46:06:0c:a7:b5:3e:
dd:83:f1:4a:9b:ef:4c:7c:0c:c8:3f:d8:e3:71:d8:6a:ba:15:
46:86:9c:f5:28:b2:07:24:7d:39:21:23:c9:84:18:0c:f6:7c:
88:04:2d:94:f8:a2:23:66:b0:87:44:29:53:8b:6a:08:99:2a:
62:97:4d:32:92:f7:fe:4a:5e:da:4a:89:61:03:03:a9:12:fe:
af:b1:eb:fb
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWaCuFwBfz/x0sSr3X6d5s/wX6IUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAxMDFaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDNhZjIzNWYwNGVhNTBiYzgyYzg2ZDVmYWZmMzllNmFkMGJlYjBhY2FiZThl
ZmQwZGQ0N2QxNmJkYzIxZjA4ZjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOddmc4ThhxQu9ad/HrX5RzB+ftncQqaOQsykQKtB4Uj0vkDrHOvO0j3xVN1
OFs/7+Qn/DUScjn5MqkdzjNSr2LAif5ECUVmPtq4zPk0sqCYvK/gvmHNU68bTdtg
ywTB+x7S3SjA2vBXwqKk0mtaxRsX3BV0W5ebVSdaifWOE1PRJcp7/gmlrYohH/h+
atcWOjPeNgjEgYJzvwcoWvyL2jtbv9AcoOcwhInp++W6dKxkOaaX0xrgNHc0XjYn
dum/bojJ65BAtT0PiSF9a/CU1mE/56ZhfgwZk3ifqGOGRo+2O4kh24jwTRTaNaoe
JuVJ0gCNNGy5T8rKq+NtPIZfqycCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQU7sZe
+z9wioJNnWCwiH0EKqyCpjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWIyNDQyMWUtZWRhZi00OWM2LTkwOTgtYWIzYWQwYmQ3YTc2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fog
wDANBgkqhkiG9w0BAQsFAAOCAQEAqTLJGgiqYzpeWUDp3ljj3udYko5S2jBCEL9A
zDzBHuz5RVPQ1sy7zKUsdKVPDpgljPPwJzRziMwXemwU+gDwfW1R0VFQ7xG7B2Ey
LkMWWmq7ROVxp64CsEjrKTWXAyvApfwL0wyNSqIKyp/lmgu8tGudBhmceo1WHxMF
V249JENeZNeECmet++W8l8zf6OC5WC48+9NZEeBGjKjCt4VjnEK0Kk8UnFHz2bNZ
Sfi/RgYMp7U+3YPxSpvvTHwMyD/Y43HYaroVRoac9SiyByR9OSEjyYQYDPZ8iAQt
lPiiI2awh0QpU4tqCJkqYpdNMpL3/kpe2kqJYQMDqRL+r7Hr+w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:11 2026 by rpki-client