Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/629bc819-2628-4e56-be9d-dd2d0390e9de.roa
File: 629bc819-2628-4e56-be9d-dd2d0390e9de.roa (raw, json)
Hash identifier: C2nvYZ3e8s0SWzRbouOXRCEkuUmWb8327Gb5u0pYJzE=
Subject key identifier: B0:29:0A:74:B9:BD:F5:61:FA:BF:97:F6:F6:96:AE:8D:2F:C2:03:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3893402DB9A6158DB95E78BB33C687F4784FF8D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/629bc819-2628-4e56-be9d-dd2d0390e9de.roa
Signing time: Wed 19 Aug 2026 01:00:23 +0000
ROA not before: Wed 19 Aug 2026 01:00:23 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:93:40:2d:b9:a6:15:8d:b9:5e:78:bb:33:c6:87:f4:78:4f:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 01:00:23 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=8bbba8cb62985d1b3858ad23383aacc097758be3e0212956c51ca18c084ccf58, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:c2:dc:2e:eb:f1:a1:e3:a0:a5:1d:9c:00:
dc:53:95:0e:9f:49:01:72:f1:fc:15:d2:7b:f7:84:
2f:18:ef:88:41:1a:7d:7b:6a:2a:d4:bc:13:9b:ad:
9f:b5:13:a9:49:db:99:5f:a4:92:50:4b:f4:80:62:
30:71:7a:bf:9e:26:ef:b7:f2:37:bf:61:68:29:03:
e3:12:16:82:0c:c1:21:28:92:0e:89:0b:4c:53:73:
91:d7:35:0d:a1:8a:a4:27:66:cf:88:44:8b:37:a2:
f2:f1:c8:9b:a4:f9:36:6d:2f:a8:5c:85:e2:8a:a8:
31:94:11:8b:4f:8d:08:cd:c6:39:aa:cd:b2:03:d3:
04:44:01:e0:cc:ca:96:75:91:93:7f:4c:c2:7c:5b:
2c:03:b2:7c:4f:db:80:6b:ab:85:3d:20:df:a8:2c:
ae:2c:2a:dd:35:a7:09:dd:8c:94:e6:60:78:a4:8c:
5a:33:26:05:44:41:ad:c5:d1:98:b0:2b:09:30:6c:
ff:67:9d:80:79:d0:13:13:74:60:5d:a7:31:7b:61:
dd:6b:64:92:a8:c3:c7:e6:11:2c:b1:21:0b:68:ce:
fb:1b:9a:dd:2e:2c:e0:b3:a8:4b:c3:fa:3b:36:19:
b5:05:24:de:2d:89:3f:42:e8:fc:48:92:b5:00:56:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:0A:74:B9:BD:F5:61:FA:BF:97:F6:F6:96:AE:8D:2F:C2:03:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/629bc819-2628-4e56-be9d-dd2d0390e9de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4020::/48
Signature Algorithm: sha256WithRSAEncryption
b6:59:4d:41:e9:f1:dd:aa:1b:bd:12:57:98:d6:a8:0e:cd:e2:
df:c2:46:3c:f6:97:52:03:49:48:8e:11:27:5f:03:fe:7d:a3:
48:68:de:d6:12:b5:ec:d2:8b:a4:65:28:e7:e3:a0:32:06:8a:
80:bf:19:b1:f4:3f:8d:0b:09:2c:94:65:70:47:6d:e9:6b:27:
d7:77:d9:65:7d:07:54:2f:bb:50:27:31:d4:66:12:c8:c3:27:
ac:12:44:12:36:8e:19:5f:da:59:d0:d9:40:5f:d3:2e:bf:f2:
ae:4a:2b:55:66:73:2f:9b:10:e7:65:e6:b1:47:60:e3:94:6e:
4d:7f:91:71:7f:f3:02:59:31:ed:91:04:13:4c:ec:e8:8b:ce:
44:b6:ec:fb:9a:cf:d8:1d:ff:cb:31:93:d1:09:55:6a:4b:a2:
0d:41:b2:b6:2e:04:71:c6:f5:c4:ac:66:6a:f7:bd:6b:44:19:
cc:46:d1:f7:cb:b0:1d:8b:60:a5:b4:f5:51:3f:5f:5b:f8:14:
cd:c8:29:ca:fd:1e:eb:f8:de:72:1c:97:5b:df:28:99:b4:c9:
ee:be:33:83:57:af:38:22:15:a0:c1:7b:9d:b0:1c:b3:14:d3:
65:9f:1b:79:f1:8f:7f:52:9c:6e:8c:31:11:86:17:2d:c3:7b:
56:29:c5:34
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOJNALbmmFY25Xni7M8aH9HhP+NYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMTAwMjNaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDhiYmJhOGNiNjI5ODVkMWIzODU4YWQyMzM4M2FhY2MwOTc3NThiZTNlMDIx
Mjk1NmM1MWNhMThjMDg0Y2NmNTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKPvwtwu6/Gh46ClHZwA3FOVDp9JAXLx/BXSe/eELxjviEEafXtqKtS8E5ut
n7UTqUnbmV+kklBL9IBiMHF6v54m77fyN79haCkD4xIWggzBISiSDokLTFNzkdc1
DaGKpCdmz4hEizei8vHIm6T5Nm0vqFyF4oqoMZQRi0+NCM3GOarNsgPTBEQB4MzK
lnWRk39MwnxbLAOyfE/bgGurhT0g36gsriwq3TWnCd2MlOZgeKSMWjMmBURBrcXR
mLArCTBs/2edgHnQExN0YF2nMXth3WtkkqjDx+YRLLEhC2jO+xua3S4s4LOoS8P6
OzYZtQUk3i2JP0Lo/EiStQBWllkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSwKQp0
ub31Yfq/l/b2lq6NL8IDATAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjI5YmM4MTktMjYyOC00ZTU2LWJlOWQtZGQyZDAzOTBlOWRlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H1A
IDANBgkqhkiG9w0BAQsFAAOCAQEAtllNQenx3aobvRJXmNaoDs3i38JGPPaXUgNJ
SI4RJ18D/n2jSGje1hK17NKLpGUo5+OgMgaKgL8ZsfQ/jQsJLJRlcEdt6Wsn13fZ
ZX0HVC+7UCcx1GYSyMMnrBJEEjaOGV/aWdDZQF/TLr/yrkorVWZzL5sQ52XmsUdg
45RuTX+RcX/zAlkx7ZEEE0zs6IvORLbs+5rP2B3/yzGT0QlVakuiDUGyti4Eccb1
xKxmave9a0QZzEbR98uwHYtgpbT1UT9fW/gUzcgpyv0e6/jechyXW98ombTJ7r4z
g1evOCIVoMF7nbAcsxTTZZ8befGPf1KcbowxEYYXLcN7VinFNA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:45 2026 by rpki-client