Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b2e0088-d64a-4b72-ab4f-8299ca986086.roa
File: 6b2e0088-d64a-4b72-ab4f-8299ca986086.roa (raw, json)
Hash identifier: Jnfk3vbrPdQFmM96pGRczH2KuiKEhsct0aDArL17Aos=
Subject key identifier: 00:61:B9:B8:E3:A8:A4:E4:A6:AC:8E:AA:C4:E5:A9:07:D8:E2:BF:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F599200D886000DED557CB930535D630675C907
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b2e0088-d64a-4b72-ab4f-8299ca986086.roa
Signing time: Thu 10 Sep 2026 02:30:13 +0000
ROA not before: Thu 10 Sep 2026 02:30:13 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:59:92:00:d8:86:00:0d:ed:55:7c:b9:30:53:5d:63:06:75:c9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:13 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=1f1aee1bd62eaefda189710dc3c60bb77d39035de01344ac0a0c3371eff530e1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:de:43:a0:2d:8d:d4:ec:73:e3:f2:2b:34:
3e:6d:7a:f0:1a:77:ca:f8:35:74:06:90:6c:0f:2c:
65:18:c5:d7:92:48:0e:3f:05:11:2e:2b:f8:91:f5:
68:8f:59:75:15:aa:9d:03:c5:4a:70:53:51:3c:29:
40:08:d4:d4:aa:a4:1c:b6:73:57:11:c0:9b:65:67:
ca:9d:50:73:7d:80:72:48:d0:2f:3d:79:47:50:99:
61:5b:41:06:f4:3a:0b:45:1e:52:d4:26:6e:48:fc:
94:b5:03:d2:2c:6c:d9:c7:2b:37:dc:62:20:96:33:
2f:ea:ad:20:cb:8b:84:b1:82:52:2f:21:84:17:6e:
fd:c3:3b:34:27:ff:99:92:1c:b8:7d:44:04:c5:18:
27:69:72:6c:71:5c:15:d8:20:f8:eb:29:6d:46:d0:
ce:ce:18:cd:1d:25:b2:61:0a:cb:d8:57:7a:31:0a:
6e:49:03:d2:92:48:59:bd:cc:19:d6:c2:33:36:90:
ab:4a:00:b3:fe:80:66:1f:16:5f:fd:41:f8:33:c1:
4c:48:3e:c9:19:6b:2d:62:d5:a4:f7:26:44:04:0b:
5a:d7:51:65:d6:74:9c:9b:0f:f8:51:15:aa:a7:1a:
6a:1f:4b:2c:2b:ee:20:42:97:1d:35:9a:63:8b:0b:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:B9:B8:E3:A8:A4:E4:A6:AC:8E:AA:C4:E5:A9:07:D8:E2:BF:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b2e0088-d64a-4b72-ab4f-8299ca986086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:a000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:51:c3:c2:ab:16:65:3f:64:f4:eb:1d:b5:59:8e:0a:6b:38:
26:a9:4c:dc:67:3a:53:76:f0:49:72:a0:f2:07:8f:e6:c1:07:
cd:24:1d:df:63:37:f4:1b:94:e6:d8:60:c3:62:62:8b:e2:33:
b8:e1:93:e7:16:83:90:a9:7a:9b:25:6c:25:d3:f5:e1:8d:13:
c6:a1:3d:de:60:70:9a:6b:ea:25:a4:c3:4a:ff:b9:9d:a4:a2:
97:f8:fc:3c:ef:c9:41:17:9b:70:40:f4:0d:ff:7a:69:c0:61:
76:60:08:63:43:46:13:dd:fd:7d:92:01:ea:b7:10:9c:f1:e0:
19:74:a1:26:34:e3:c1:34:93:48:ad:8a:12:a3:09:86:ff:eb:
b6:55:15:8d:6e:b8:05:bb:f8:02:8c:c2:44:10:82:31:d5:17:
8b:6b:0e:b6:4d:c0:dc:b9:0b:5f:4c:3f:bc:53:3b:a9:0b:d2:
58:50:34:a2:92:c8:23:61:96:5d:ec:0a:de:ee:ba:02:b9:a8:
fd:7d:5b:61:83:a0:70:bb:15:42:aa:1a:40:ed:68:94:02:78:
64:a2:7b:f7:d4:e6:26:87:b4:48:c8:9f:2f:c4:d7:72:34:a6:
8a:00:57:40:65:cd:a7:2a:07:fa:19:7e:6f:0f:c0:52:f1:fd:
f2:65:5a:fc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUP1mSANiGAA3tVXy5MFNdYwZ1yQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjMwMTNaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDFmMWFlZTFiZDYyZWFlZmRhMTg5NzEwZGMzYzYwYmI3N2QzOTAzNWRlMDEz
NDRhYzBhMGMzMzcxZWZmNTMwZTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM2u3kOgLY3U7HPj8is0Pm168Bp3yvg1dAaQbA8sZRjF15JIDj8FES4r+JH1
aI9ZdRWqnQPFSnBTUTwpQAjU1KqkHLZzVxHAm2Vnyp1Qc32AckjQLz15R1CZYVtB
BvQ6C0UeUtQmbkj8lLUD0ixs2ccrN9xiIJYzL+qtIMuLhLGCUi8hhBdu/cM7NCf/
mZIcuH1EBMUYJ2lybHFcFdgg+OspbUbQzs4YzR0lsmEKy9hXejEKbkkD0pJIWb3M
GdbCMzaQq0oAs/6AZh8WX/1B+DPBTEg+yRlrLWLVpPcmRAQLWtdRZdZ0nJsP+FEV
qqcaah9LLCvuIEKXHTWaY4sL6tsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQAYbm4
46ik5KasjqrE5akH2OK/WzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmIyZTAwODgtZDY0YS00YjcyLWFiNGYtODI5OWNhOTg2MDg2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gug
MA0GCSqGSIb3DQEBCwUAA4IBAQAvUcPCqxZlP2T06x21WY4KazgmqUzcZzpTdvBJ
cqDyB4/mwQfNJB3fYzf0G5Tm2GDDYmKL4jO44ZPnFoOQqXqbJWwl0/XhjRPGoT3e
YHCaa+olpMNK/7mdpKKX+Pw878lBF5twQPQN/3ppwGF2YAhjQ0YT3f19kgHqtxCc
8eAZdKEmNOPBNJNIrYoSowmG/+u2VRWNbrgFu/gCjMJEEIIx1ReLaw62TcDcuQtf
TD+8UzupC9JYUDSiksgjYZZd7Are7roCuaj9fVthg6BwuxVCqhpA7WiUAnhkonv3
1OYmh7RIyJ8vxNdyNKaKAFdAZc2nKgf6GX5vD8BS8f3yZVr8
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:39 2026 by rpki-client