Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6be7c167-dd68-4786-bdf1-30c4190ee7f9.roa
File: 6be7c167-dd68-4786-bdf1-30c4190ee7f9.roa (raw, json)
Hash identifier: TSyO/mhDD8KGiTmY/Q+aAJTuMhIrAvkiklseBtwxd8M=
Subject key identifier: 46:95:71:8E:BF:98:DA:95:FF:4F:4B:FF:63:E3:2A:A3:0F:82:4A:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28298BE10429B117E1FE45D163291EF471835B8A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6be7c167-dd68-4786-bdf1-30c4190ee7f9.roa
Signing time: Wed 09 Sep 2026 16:16:33 +0000
ROA not before: Wed 09 Sep 2026 16:16:33 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:29:8b:e1:04:29:b1:17:e1:fe:45:d1:63:29:1e:f4:71:83:5b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:16:33 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=2506f5803d3dc92fb77b598f4e815d5e8e216c8afa85f21c6c5dbf60419b0c11, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:58:8f:29:97:07:b6:48:4d:5d:66:63:20:
62:ce:85:b9:c4:d1:9d:d8:9e:8c:33:5b:d7:2a:14:
51:79:f9:cd:44:90:63:e3:1a:aa:98:0a:bc:12:26:
d5:1c:06:e5:f0:d0:99:1a:58:52:25:84:b7:1a:86:
c7:c1:c4:1f:26:f2:c1:3d:c6:38:a0:34:f3:e7:44:
3b:df:f2:d4:ae:4c:bd:8f:75:28:cf:fb:e1:21:59:
0a:a7:ef:80:53:df:72:fa:c8:a4:7b:b1:64:13:59:
38:40:09:b1:61:85:1c:a2:89:24:47:90:6c:02:b5:
ad:01:82:a2:6f:3c:14:c8:96:23:1e:46:fa:fd:1d:
4f:1c:e6:9e:ee:76:5d:34:29:b2:08:82:16:6d:aa:
cf:9f:56:9c:b4:88:9b:61:74:88:d9:46:70:cc:8a:
ac:d7:6c:6a:f2:14:bd:61:9e:6c:62:f1:af:29:9b:
16:fe:11:7c:20:c0:08:aa:3d:31:67:08:8c:37:f7:
72:eb:ac:c2:e6:0b:83:cb:aa:b6:02:cd:21:e6:cb:
91:80:04:ef:09:9e:62:15:45:e8:08:47:f7:46:ca:
6f:aa:29:95:50:e3:e8:8b:96:1e:e5:d7:12:3b:ea:
c1:b3:79:a2:5a:fa:d3:ec:44:89:07:9f:62:f4:e4:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:71:8E:BF:98:DA:95:FF:4F:4B:FF:63:E3:2A:A3:0F:82:4A:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6be7c167-dd68-4786-bdf1-30c4190ee7f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8800::/40
Signature Algorithm: sha256WithRSAEncryption
6d:ca:7a:9e:ba:43:86:69:76:82:d8:d5:4d:94:2b:b7:b5:be:
20:a8:c8:3d:b0:fc:b4:f5:b9:66:f2:84:dd:81:e1:82:07:6c:
8b:af:c7:be:7d:5a:fc:3e:15:64:9d:09:3c:48:77:43:ee:88:
74:6e:e7:79:77:34:73:0e:b7:12:98:bf:60:07:27:d8:51:0e:
fd:16:27:5b:fd:a3:bf:14:ca:e1:76:75:8c:81:0c:23:e9:3b:
fb:74:78:0c:29:49:b2:86:7b:5e:4c:1f:a9:56:24:08:59:40:
a7:ad:6d:c5:ad:e3:11:a5:28:50:e3:fa:ab:40:98:ce:40:11:
cc:2d:87:62:e9:0c:ad:a7:f2:8a:fa:f1:2b:f9:31:97:7d:81:
f5:10:84:f7:d9:0b:c0:0f:63:6b:4d:46:dc:fb:b9:86:25:3e:
20:0e:50:d7:9f:71:70:95:76:0a:e2:3a:3e:23:89:81:20:d3:
59:d8:6b:3b:03:49:1d:dd:8d:eb:bd:80:e3:8a:b1:6b:12:81:
0d:41:e3:19:d7:ca:21:59:7d:6e:a8:ea:d9:b3:a6:a5:d2:62:
4e:d1:c6:14:28:ba:7f:36:c0:a0:34:92:b3:5b:3d:d6:4c:77:
eb:64:2d:24:c4:2a:11:25:c7:a5:69:42:16:6b:48:2e:c0:78:
88:8b:d9:f2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKCmL4QQpsRfh/kXRYyke9HGDW4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE2MzNaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDI1MDZmNTgwM2QzZGM5MmZiNzdiNTk4ZjRlODE1ZDVlOGUyMTZjOGFmYTg1
ZjIxYzZjNWRiZjYwNDE5YjBjMTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3yWI8plwe2SE1dZmMgYs6FucTRndiejDNb1yoUUXn5zUSQY+MaqpgKvBIm
1RwG5fDQmRpYUiWEtxqGx8HEHybywT3GOKA08+dEO9/y1K5MvY91KM/74SFZCqfv
gFPfcvrIpHuxZBNZOEAJsWGFHKKJJEeQbAK1rQGCom88FMiWIx5G+v0dTxzmnu52
XTQpsgiCFm2qz59WnLSIm2F0iNlGcMyKrNdsavIUvWGebGLxrymbFv4RfCDACKo9
MWcIjDf3cuuswuYLg8uqtgLNIebLkYAE7wmeYhVF6AhH90bKb6oplVDj6IuWHuXX
EjvqwbN5olr60+xEiQefYvTkBj8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRGlXGO
v5jalf9PS/9j4yqjD4JKjTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmJlN2MxNjctZGQ2OC00Nzg2LWJkZjEtMzBjNDE5MGVlN2Y5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HKI
MA0GCSqGSIb3DQEBCwUAA4IBAQBtynqeukOGaXaC2NVNlCu3tb4gqMg9sPy09blm
8oTdgeGCB2yLr8e+fVr8PhVknQk8SHdD7oh0bud5dzRzDrcSmL9gByfYUQ79Fidb
/aO/FMrhdnWMgQwj6Tv7dHgMKUmyhnteTB+pViQIWUCnrW3FreMRpShQ4/qrQJjO
QBHMLYdi6Qytp/KK+vEr+TGXfYH1EIT32QvAD2NrTUbc+7mGJT4gDlDXn3FwlXYK
4jo+I4mBINNZ2Gs7A0kd3Y3rvYDjirFrEoENQeMZ18ohWX1uqOrZs6al0mJO0cYU
KLp/NsCgNJKzWz3WTHfrZC0kxCoRJcelaUIWa0guwHiIi9ny
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:23 2026 by rpki-client