Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
File: 6a2f7401-8559-4633-8579-cca77d6fa971.roa (raw, json)
Hash identifier: Jp8gKTCNaOheiIH/n4GVA9mHcv5VH6FL2WzudOLWzK4=
Subject key identifier: B6:6C:3D:FF:36:01:FE:E9:0F:22:E0:74:3E:10:06:55:B9:50:19:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CB79DDC9500527654C0244A66A59227608043A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
Signing time: Fri 07 Aug 2026 04:30:13 +0000
ROA not before: Fri 07 Aug 2026 04:30:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b7:9d:dc:95:00:52:76:54:c0:24:4a:66:a5:92:27:60:80:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=0734868e0b14e9d686c93b2c7f684cfab1a979900ed6f3e561fa951b46d297e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:57:18:0d:5d:84:54:bc:95:65:32:69:05:
a0:6d:87:44:31:10:89:63:1a:9f:d2:2a:96:8a:c7:
e3:0d:6c:c4:cd:30:56:02:17:c6:41:7d:92:02:4e:
65:60:b0:22:70:a0:69:82:45:7e:87:e6:e3:2b:75:
81:32:2a:d4:37:7c:23:8c:b2:9a:9a:91:8b:58:3a:
97:6a:8f:99:91:1d:63:14:e6:0a:03:9c:1a:0e:d1:
53:dd:2c:ff:35:7b:10:ce:9b:48:bc:62:cf:44:e9:
42:7c:53:3f:24:ab:ed:87:d3:6a:3b:24:55:9f:a1:
7f:a4:16:b5:1d:0e:7f:2b:7c:ed:0d:3d:86:d1:9c:
6c:c0:08:75:d5:37:e5:56:b9:60:13:8d:9b:c1:44:
33:4d:c2:63:2b:4e:d2:52:43:c8:c1:32:a7:d1:dd:
39:f2:0d:03:d7:c6:13:de:29:8e:f9:75:a2:6f:86:
ca:4e:a5:7d:b2:68:35:36:87:11:49:98:f4:b9:ac:
2d:d6:6f:c2:3d:c8:43:cd:fb:c9:c2:dc:17:e1:e5:
08:a8:0f:86:0d:9c:1d:ff:2b:40:2e:05:aa:47:19:
f8:db:5d:0b:a3:58:fb:89:71:4f:fa:8b:7f:41:f9:
7e:a3:28:de:fd:9a:4c:33:f3:4c:c5:4a:0c:b9:40:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:3D:FF:36:01:FE:E9:0F:22:E0:74:3E:10:06:55:B9:50:19:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6a2f7401-8559-4633-8579-cca77d6fa971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/36
Signature Algorithm: sha256WithRSAEncryption
b7:d8:57:6f:d0:80:92:77:cc:a7:79:39:3b:40:f3:88:3c:75:
bb:d4:aa:a3:7e:6e:8d:e7:b3:6f:ff:e0:0c:90:10:c4:b2:e2:
ed:ec:1d:4d:d5:bc:a0:fa:6a:5d:18:bf:37:63:80:31:10:c9:
46:e4:f4:6b:17:3e:86:51:52:c9:fa:10:1f:09:cd:6b:fc:6b:
93:59:50:1c:c4:b7:7c:48:c1:84:48:78:22:61:30:c3:1f:72:
bb:ad:31:2a:c9:da:d0:fa:77:ca:0c:34:d1:35:27:26:65:fb:
3d:71:22:a8:ac:2f:8d:4e:fb:ad:98:b4:34:24:d1:9d:aa:74:
9e:29:be:cf:d1:85:e6:9a:d7:ff:d8:a0:c0:13:2f:1e:a8:87:
c1:85:97:c3:a8:8e:08:55:5d:4a:42:e3:59:e7:b0:12:b1:60:
fb:f0:61:f8:21:aa:ee:e6:3a:33:b6:70:f9:14:2e:d9:a7:f2:
d6:40:6a:30:de:0f:bd:78:f8:4f:39:f2:09:07:85:08:85:d8:
12:13:4b:47:85:e4:f9:e8:94:f9:dd:bf:8f:9f:ac:92:d4:7a:
ca:af:09:00:55:9b:01:fe:73:88:7f:1f:f8:b1:90:c6:39:04:
72:57:5a:ac:87:ca:9a:78:2b:cd:b6:d6:66:7d:5b:4f:d0:8a:
e4:0c:24:82
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHLed3JUAUnZUwCRKZqWSJ2CAQ6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMwMTNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDA3MzQ4NjhlMGIxNGU5ZDY4NmM5M2IyYzdmNjg0Y2ZhYjFhOTc5OTAwZWQ2
ZjNlNTYxZmE5NTFiNDZkMjk3ZTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnIVxgNXYRUvJVlMmkFoG2HRDEQiWMan9IqlorH4w1sxM0wVgIXxkF9kgJO
ZWCwInCgaYJFfofm4yt1gTIq1Dd8I4yympqRi1g6l2qPmZEdYxTmCgOcGg7RU90s
/zV7EM6bSLxiz0TpQnxTPySr7YfTajskVZ+hf6QWtR0Ofyt87Q09htGcbMAIddU3
5Va5YBONm8FEM03CYytO0lJDyMEyp9HdOfINA9fGE94pjvl1om+Gyk6lfbJoNTaH
EUmY9LmsLdZvwj3IQ837ycLcF+HlCKgPhg2cHf8rQC4FqkcZ+NtdC6NY+4lxT/qL
f0H5fqMo3v2aTDPzTMVKDLlAoRUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS2bD3/
NgH+6Q8i4HQ+EAZVuVAZQjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmEyZjc0MDEtODU1OS00NjMzLTg1NzktY2NhNzdkNmZhOTcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BoA
MA0GCSqGSIb3DQEBCwUAA4IBAQC32Fdv0ICSd8yneTk7QPOIPHW71Kqjfm6N57Nv
/+AMkBDEsuLt7B1N1byg+mpdGL83Y4AxEMlG5PRrFz6GUVLJ+hAfCc1r/GuTWVAc
xLd8SMGESHgiYTDDH3K7rTEqydrQ+nfKDDTRNScmZfs9cSKorC+NTvutmLQ0JNGd
qnSeKb7P0YXmmtf/2KDAEy8eqIfBhZfDqI4IVV1KQuNZ57ASsWD78GH4Iaru5joz
tnD5FC7Zp/LWQGow3g+9ePhPOfIJB4UIhdgSE0tHheT56JT53b+Pn6yS1HrKrwkA
VZsB/nOIfx/4sZDGOQRyV1qsh8qaeCvNttZmfVtP0IrkDCSC
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:39 2026 by rpki-client