Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
File: 6ee98048-5141-4b16-8b8c-269a397f53ce.roa (raw, json)
Hash identifier: HEFwskAtOR528vwxrCY4sKGSgoMDjzklLzwXNVnXtMM=
Subject key identifier: EA:29:08:8E:D7:95:A8:3F:0E:EE:BD:51:79:0E:9B:97:A9:06:13:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07E81AC55A08B8689F2DFB41B88C1BF1C30F1F8A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
Signing time: Fri 07 Aug 2026 05:10:43 +0000
ROA not before: Fri 07 Aug 2026 05:10:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e8:1a:c5:5a:08:b8:68:9f:2d:fb:41:b8:8c:1b:f1:c3:0f:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=8daa99fbe9c6b514d90abcf07c3c0258a5646e8ebd43cb47ceac81476dd54f01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:14:be:8b:5c:2e:0d:e8:fc:41:f9:0f:89:
78:c5:2f:9d:32:f1:ae:4d:34:62:9c:d4:ee:43:66:
de:fe:4c:14:0d:00:74:06:9e:39:06:26:d0:41:fd:
9c:97:d3:ec:37:f7:32:4f:ff:ae:b7:fe:9a:82:c6:
dd:ce:3c:a3:c4:a5:e9:ad:e7:ea:74:76:97:c7:31:
39:d7:64:b9:f0:ae:24:a3:46:53:30:47:d6:2f:f4:
ad:f4:ad:c4:08:dd:c3:37:5e:28:06:bf:5b:56:65:
7b:1c:3e:73:97:b3:f9:51:30:c1:a3:7c:2d:94:34:
03:b8:4c:59:33:7a:c3:df:05:e7:d5:6b:a8:03:e9:
bc:3f:20:3e:75:85:3e:e4:fb:77:9b:e2:bf:d3:22:
5d:9e:fd:a1:a4:b2:68:de:8c:5b:57:3f:cb:6d:0e:
a9:bc:52:5a:c2:a3:0a:ad:6d:bb:39:a8:d6:d4:06:
95:88:6e:a4:8c:6c:90:9c:29:32:e2:ca:a9:6e:0d:
02:ed:44:e3:0b:1b:d7:d8:fa:76:e5:d4:4c:06:6c:
fc:99:e4:d6:be:40:6f:41:d3:bd:ae:3b:28:59:1f:
07:fd:52:c9:e7:7a:89:d5:7d:10:78:8f:66:a5:b6:
fe:09:4f:b5:1a:88:52:f3:a3:1e:19:7e:9f:18:52:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:08:8E:D7:95:A8:3F:0E:EE:BD:51:79:0E:9B:97:A9:06:13:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee98048-5141-4b16-8b8c-269a397f53ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4080::/48
Signature Algorithm: sha256WithRSAEncryption
af:64:7b:d4:a9:ee:0c:d7:f3:2e:38:28:e3:97:17:ff:0d:25:
6a:00:c9:b9:00:ef:6d:c8:bc:e5:f5:e2:52:92:cc:af:7b:8a:
8a:f2:53:26:93:da:07:d6:e4:39:f5:d6:83:da:5e:f4:63:83:
c1:10:4f:61:a1:47:23:3b:0e:fc:0c:af:9b:92:fe:92:04:a8:
5c:71:d3:2e:ba:75:33:2e:45:f6:da:5c:e9:0a:3d:68:1a:bd:
c0:50:75:e2:d8:08:34:7e:3e:1e:b3:51:db:20:27:60:e3:42:
aa:4f:72:a2:57:19:04:e6:66:1a:ad:a0:95:c9:dd:06:46:43:
4c:e5:91:5a:45:b1:d2:3c:96:b9:e7:e6:93:8f:dc:4e:c0:6c:
dc:48:87:64:85:b6:db:40:5f:11:91:c9:32:5b:d8:85:06:43:
a2:1b:40:4a:d3:b7:80:a8:64:bd:ce:cf:90:e4:67:4b:a9:72:
0d:0e:41:83:ce:18:df:4f:e7:a3:26:31:f3:19:e4:87:c3:f3:
1a:96:ba:5a:1f:e5:74:19:41:ab:47:41:5f:a3:f4:cf:3c:48:
f4:81:2a:54:83:09:d9:68:4f:6c:81:ab:65:86:f2:08:87:bd:
b5:9a:d5:18:48:81:41:cb:11:5e:57:71:10:bf:90:96:24:5d:
56:7a:a5:0d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUB+gaxVoIuGifLftBuIwb8cMPH4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTEwNDNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDhkYWE5OWZiZTljNmI1MTRkOTBhYmNmMDdjM2MwMjU4YTU2NDZlOGViZDQz
Y2I0N2NlYWM4MTQ3NmRkNTRmMDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANoHFL6LXC4N6PxB+Q+JeMUvnTLxrk00YpzU7kNm3v5MFA0AdAaeOQYm0EH9
nJfT7Df3Mk//rrf+moLG3c48o8Sl6a3n6nR2l8cxOddkufCuJKNGUzBH1i/0rfSt
xAjdwzdeKAa/W1Zlexw+c5ez+VEwwaN8LZQ0A7hMWTN6w98F59VrqAPpvD8gPnWF
PuT7d5viv9MiXZ79oaSyaN6MW1c/y20OqbxSWsKjCq1tuzmo1tQGlYhupIxskJwp
MuLKqW4NAu1E4wsb19j6duXUTAZs/Jnk1r5Ab0HTva47KFkfB/1Syed6idV9EHiP
ZqW2/glPtRqIUvOjHhl+nxhSL/cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTqKQiO
15WoPw7uvVF5DpuXqQYTqTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmVlOTgwNDgtNTE0MS00YjE2LThiOGMtMjY5YTM5N2Y1M2NlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A
gDANBgkqhkiG9w0BAQsFAAOCAQEAr2R71KnuDNfzLjgo45cX/w0lagDJuQDvbci8
5fXiUpLMr3uKivJTJpPaB9bkOfXWg9pe9GODwRBPYaFHIzsO/Ayvm5L+kgSoXHHT
Lrp1My5F9tpc6Qo9aBq9wFB14tgINH4+HrNR2yAnYONCqk9yolcZBOZmGq2glcnd
BkZDTOWRWkWx0jyWuefmk4/cTsBs3EiHZIW220BfEZHJMlvYhQZDohtAStO3gKhk
vc7PkORnS6lyDQ5Bg84Y30/noyYx8xnkh8PzGpa6Wh/ldBlBq0dBX6P0zzxI9IEq
VIMJ2WhPbIGrZYbyCIe9tZrVGEiBQcsRXldxEL+QliRdVnqlDQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:38 2026 by rpki-client