Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6af28a08-4ca8-42b3-b693-0c0785677d0b.roa
File: 6af28a08-4ca8-42b3-b693-0c0785677d0b.roa (raw, json)
Hash identifier: H9rb2NJ1J2tJOYT/N85hwYOw9RMjm1l2c0sgOH0FtSw=
Subject key identifier: A0:1C:53:49:E6:EF:B1:C8:79:5B:73:5B:E5:3D:88:23:7F:EC:1F:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FC0453A4BEC2F479EC572D7C07D1091BBC10C7A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6af28a08-4ca8-42b3-b693-0c0785677d0b.roa
Signing time: Mon 10 Aug 2026 00:50:33 +0000
ROA not before: Mon 10 Aug 2026 00:50:33 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c0:45:3a:4b:ec:2f:47:9e:c5:72:d7:c0:7d:10:91:bb:c1:0c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:33 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=1b6c6bd54ebdc3149e130ff2973a575bb5253acb57d7c88e4042e8bf4edba0d9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:68:48:e5:f9:eb:cc:e0:d9:8c:1c:9e:a9:
98:b5:85:8f:02:8a:4b:c5:ca:7a:80:75:e9:15:87:
fc:8b:c6:69:c9:17:38:62:02:05:4a:83:eb:65:ac:
04:66:a3:31:bd:79:fe:d5:cf:39:61:97:6f:40:98:
89:32:f4:ab:2a:16:52:4c:54:74:7e:b6:ae:20:24:
48:c8:25:ba:fd:8b:0c:55:df:a2:0c:26:3e:d3:ac:
75:2c:b3:a3:b1:2c:8d:9c:61:ce:04:fe:d4:05:17:
38:7e:40:70:ac:55:8c:cb:cf:99:f6:ad:b1:16:db:
7f:61:5c:ef:bf:f9:ac:8c:af:e3:80:2d:06:96:7c:
b9:93:9a:7e:16:90:ee:27:4d:21:b1:4f:33:b6:49:
18:75:df:2e:f3:37:eb:10:36:eb:bd:dd:24:68:63:
2e:28:54:b6:e5:c7:51:0b:7c:06:b3:72:03:df:4c:
1d:32:52:7c:5f:f9:36:54:a0:da:d1:c2:18:48:ca:
dd:88:19:89:4b:97:9c:12:04:49:38:d7:a2:88:05:
ba:84:2e:5a:db:17:b5:4a:e3:97:64:f3:5e:13:7d:
57:e5:64:ea:dc:4d:2f:f7:95:db:ef:8f:af:9b:8b:
c4:2b:18:07:7e:cd:9c:05:76:51:21:ea:54:1c:72:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:53:49:E6:EF:B1:C8:79:5B:73:5B:E5:3D:88:23:7F:EC:1F:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6af28a08-4ca8-42b3-b693-0c0785677d0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5000::/40
Signature Algorithm: sha256WithRSAEncryption
aa:89:d4:f8:11:ad:7a:62:e7:8f:63:17:7b:be:df:40:2e:2e:
c7:91:10:0d:e9:e8:db:aa:6b:f7:6c:7b:33:fb:28:f4:3b:50:
e2:39:12:bd:a8:34:ab:5a:a8:22:c0:36:a7:77:e0:45:22:d1:
4a:b3:ae:c9:ac:96:bb:ea:ef:da:59:c5:6d:17:dd:80:10:c3:
94:20:df:40:6a:32:55:0b:59:38:8c:41:10:81:ce:8c:14:a8:
7c:6e:88:96:2b:b9:0e:e4:fe:9d:de:db:7e:23:df:55:79:11:
02:48:f8:1f:ad:7d:e9:ee:cc:98:88:41:db:f5:2a:3e:82:fa:
75:89:93:27:51:33:2b:1a:92:f9:a2:54:c7:76:43:66:fe:f5:
5c:80:c9:6c:76:cd:51:dd:d6:52:a9:3c:98:52:e3:3e:2a:00:
0b:0c:d0:3f:00:e2:9a:f6:6a:7a:64:6e:d1:53:cb:9b:df:9c:
11:87:40:02:21:2e:95:63:59:3d:b3:4b:ff:4f:4d:76:c3:dd:
28:70:eb:df:4a:0a:62:92:e7:78:6a:c4:0a:95:e8:c5:df:af:
95:57:44:64:f9:ef:6e:50:63:8c:4e:d7:4b:b4:72:46:0a:1f:
a4:b7:43:bb:61:40:14:e4:04:eb:d0:17:73:68:3a:16:ba:9f:
55:19:7a:2b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUH8BFOkvsL0eexXLXwH0QkbvBDHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMDUwMzNaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDFiNmM2YmQ1NGViZGMzMTQ5ZTEzMGZmMjk3M2E1NzViYjUyNTNhY2I1N2Q3
Yzg4ZTQwNDJlOGJmNGVkYmEwZDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMsGaEjl+evM4NmMHJ6pmLWFjwKKS8XKeoB16RWH/IvGackXOGICBUqD62Ws
BGajMb15/tXPOWGXb0CYiTL0qyoWUkxUdH62riAkSMgluv2LDFXfogwmPtOsdSyz
o7EsjZxhzgT+1AUXOH5AcKxVjMvPmfatsRbbf2Fc77/5rIyv44AtBpZ8uZOafhaQ
7idNIbFPM7ZJGHXfLvM36xA2673dJGhjLihUtuXHUQt8BrNyA99MHTJSfF/5NlSg
2tHCGEjK3YgZiUuXnBIESTjXoogFuoQuWtsXtUrjl2TzXhN9V+Vk6txNL/eV2++P
r5uLxCsYB37NnAV2USHqVBxyEa0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSgHFNJ
5u+xyHlbc1vlPYgjf+wf6DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmFmMjhhMDgtNGNhOC00MmIzLWI2OTMtMGMwNzg1Njc3ZDBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCqidT4Ea16YuePYxd7vt9ALi7HkRAN6ejbqmv3
bHsz+yj0O1DiORK9qDSrWqgiwDand+BFItFKs67JrJa76u/aWcVtF92AEMOUIN9A
ajJVC1k4jEEQgc6MFKh8boiWK7kO5P6d3tt+I99VeRECSPgfrX3p7syYiEHb9So+
gvp1iZMnUTMrGpL5olTHdkNm/vVcgMlsds1R3dZSqTyYUuM+KgALDNA/AOKa9mp6
ZG7RU8ub35wRh0ACIS6VY1k9s0v/T012w90ocOvfSgpikud4asQKlejF36+VV0Rk
+e9uUGOMTtdLtHJGCh+kt0O7YUAU5ATr0BdzaDoWup9VGXor
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:46 2026 by rpki-client