Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
File: 73ae3aed-406c-4215-aaab-cbe4f0a30441.roa (raw, json)
Hash identifier: GFevsAVxgTPI89jHgVmgGrhFT/N9h3/A/McyRzhZr5Y=
Subject key identifier: 61:95:B0:4F:1A:9C:A6:29:F7:4F:6F:46:F6:9E:43:A5:99:3F:E8:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D9D49618BAB5B06AD8A12956B8F9555B4D3108D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
Signing time: Sun 13 Sep 2026 00:00:07 +0000
ROA not before: Sun 13 Sep 2026 00:00:07 +0000
ROA not after: Sat 12 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9d:49:61:8b:ab:5b:06:ad:8a:12:95:6b:8f:95:55:b4:d3:10:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 13 00:00:07 2026 GMT
Not After : Dec 12 23:59:59 2026 GMT
Subject: serialNumber=14bdb721892f031df8e78d0a9dfa2eb39458cadf05acbd74e6daea4bc7df3866, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:55:e1:1f:d4:e3:b7:37:5b:e6:84:30:2f:
29:de:49:e4:88:1f:e6:b0:a5:f3:ae:88:8c:45:aa:
25:ac:41:74:a8:55:23:2c:8e:99:24:38:9b:23:1f:
81:c6:e1:b4:37:2b:82:2f:c7:d3:52:7d:c9:1c:1c:
b8:2a:b1:51:cb:53:ea:ed:57:72:d9:c2:d6:25:54:
18:a9:9a:d3:5a:06:34:ce:b0:b6:71:84:82:58:14:
37:e8:70:89:9a:d7:e7:1b:3c:9b:85:71:ca:27:76:
d0:54:88:77:8b:38:fb:2e:14:42:d1:2d:69:e2:38:
6b:1e:84:87:94:61:51:ff:91:84:da:ac:1c:d4:22:
7b:5a:5f:15:73:ac:e0:03:f5:65:f5:21:1f:28:38:
3e:02:a1:d4:3e:27:4b:78:b3:04:d2:b7:31:a4:f3:
23:08:40:f6:a9:21:9a:0a:dc:14:69:ce:72:45:2e:
05:72:7b:d3:20:65:a4:cc:b5:e4:58:37:c3:36:fc:
15:9b:88:ee:0f:0d:45:ba:32:35:1b:3c:e1:53:46:
ed:89:90:bf:00:e0:7e:1a:46:4e:80:8a:8b:14:c8:
2d:19:e9:93:9d:ce:8a:e4:13:2b:93:9a:14:2a:df:
73:c8:3b:69:92:7a:3e:1e:57:0a:78:c8:da:00:00:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:B0:4F:1A:9C:A6:29:F7:4F:6F:46:F6:9E:43:A5:99:3F:E8:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73ae3aed-406c-4215-aaab-cbe4f0a30441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:1000::/36
Signature Algorithm: sha256WithRSAEncryption
33:71:92:fd:89:04:bf:3d:a0:a3:9c:2e:81:7b:fe:ac:87:78:
ed:d0:ee:97:63:47:05:c0:55:5b:05:62:7a:d9:a8:1b:5c:0b:
5f:41:ff:26:89:e1:39:95:95:75:9a:51:75:f2:13:bc:54:ad:
c5:e6:a9:b4:40:7d:94:f7:45:9c:96:78:74:47:ee:1c:a4:41:
e0:12:eb:1c:83:b6:c2:31:9c:a6:af:ba:a1:70:c9:8e:e2:5a:
ae:be:94:c8:52:aa:fb:30:b7:79:00:d1:89:ad:03:12:d3:f9:
7d:52:8a:58:7e:15:13:57:db:f4:e5:75:bf:fb:1e:22:7a:78:
97:0a:f5:8c:cf:26:0f:80:e2:bb:e0:f5:bd:40:ab:d4:88:be:
72:a3:bb:c1:3a:cb:47:72:4d:b5:58:ee:4a:65:c5:82:86:00:
cc:4f:19:d7:01:cd:88:1a:5b:34:b0:28:ce:3c:c7:cf:b7:05:
69:80:43:6b:80:d1:22:2b:42:16:66:a7:11:64:93:17:2b:65:
9d:71:c2:eb:4b:87:7f:5a:d3:e2:1a:83:1b:61:2f:0a:c8:6a:
dd:df:5d:2c:2b:c0:a0:51:47:b9:ea:8f:27:14:22:08:49:d8:
bb:a2:be:14:af:e4:f2:7b:6d:5c:df:11:a9:be:c8:74:b5:14:
57:d3:b4:e3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbZ1JYYurWwatihKVa4+VVbTTEI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTMwMDAwMDdaFw0yNjEyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0YmRiNzIxODkyZjAzMWRmOGU3OGQwYTlkZmEyZWIzOTQ1OGNhZGYwNWFj
YmQ3NGU2ZGFlYTRiYzdkZjM4NjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALB/VeEf1OO3N1vmhDAvKd5J5Igf5rCl866IjEWqJaxBdKhVIyyOmSQ4myMf
gcbhtDcrgi/H01J9yRwcuCqxUctT6u1XctnC1iVUGKma01oGNM6wtnGEglgUN+hw
iZrX5xs8m4Vxyid20FSId4s4+y4UQtEtaeI4ax6Eh5RhUf+RhNqsHNQie1pfFXOs
4AP1ZfUhHyg4PgKh1D4nS3izBNK3MaTzIwhA9qkhmgrcFGnOckUuBXJ70yBlpMy1
5Fg3wzb8FZuI7g8NRboyNRs84VNG7YmQvwDgfhpGToCKixTILRnpk53OiuQTK5Oa
FCrfc8g7aZJ6Ph5XCnjI2gAAik8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRhlbBP
GpymKfdPb0b2nkOlmT/ouzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzNhZTNhZWQtNDA2Yy00MjE1LWFhYWItY2JlNGYwYTMwNDQxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BwQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAzcZL9iQS/PaCjnC6Be/6sh3jt0O6XY0cFwFVb
BWJ62agbXAtfQf8mieE5lZV1mlF18hO8VK3F5qm0QH2U90Wclnh0R+4cpEHgEusc
g7bCMZymr7qhcMmO4lquvpTIUqr7MLd5ANGJrQMS0/l9UopYfhUTV9v05XW/+x4i
eniXCvWMzyYPgOK74PW9QKvUiL5yo7vBOstHck21WO5KZcWChgDMTxnXAc2IGls0
sCjOPMfPtwVpgENrgNEiK0IWZqcRZJMXK2WdccLrS4d/WtPiGoMbYS8KyGrd310s
K8CgUUe56o8nFCIISdi7or4Ur+Tye21c3xGpvsh0tRRX07Tj
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:48 2026 by rpki-client