Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74a8eb7e-161b-4b8d-b4a8-5d268d4dd647.roa
File: 74a8eb7e-161b-4b8d-b4a8-5d268d4dd647.roa (raw, json)
Hash identifier: 2KQCmmoiwDJUXVlCiXd1sTpF6wCgl5daQ8Pti/kImYs=
Subject key identifier: 30:BC:B9:72:5C:91:B9:25:03:7D:02:EE:A6:F4:76:5F:C6:02:12:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74038A6277CEAFA8FB94F28673074D107C4DA051
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74a8eb7e-161b-4b8d-b4a8-5d268d4dd647.roa
Signing time: Mon 10 Aug 2026 00:50:12 +0000
ROA not before: Mon 10 Aug 2026 00:50:12 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:8a:62:77:ce:af:a8:fb:94:f2:86:73:07:4d:10:7c:4d:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 00:50:12 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=2c6677df18a7b99d4c1ebbd4afaf23b72cdb93fa3ce20f2197763e83f876b952, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:47:e6:a3:5c:59:87:a2:ef:62:39:5f:b0:
83:fe:3b:3f:2f:84:16:19:21:bb:1d:1f:cd:18:9d:
55:b0:f2:63:e6:68:e1:40:64:a6:98:d0:69:b7:ee:
e2:53:a7:1b:1d:ee:3e:08:f6:43:8d:7d:d6:7f:b8:
48:e9:aa:fe:cc:94:0c:7f:53:b9:d3:bf:b1:48:1c:
78:ef:9f:63:c4:e3:0c:79:6e:a5:7b:c0:de:d0:5a:
f1:1c:09:9c:27:dd:0a:d7:6a:10:72:7d:60:ec:50:
56:13:c7:e1:6e:77:fd:da:41:5d:5c:db:7d:0d:aa:
02:30:bb:40:ba:d0:53:0a:c7:23:f6:42:df:4f:a5:
07:d9:13:d8:45:1e:e4:67:81:46:b3:a1:4d:23:a6:
53:b0:33:4a:ba:1d:64:8a:77:9d:79:be:a0:7a:d6:
fc:8c:82:96:35:4a:53:4f:b4:06:8d:d8:cf:97:81:
e4:c4:92:78:9c:ea:75:a8:ad:ac:66:e5:4d:4e:7c:
94:20:4f:39:ed:9c:44:15:22:b6:c7:95:6c:25:dd:
21:00:05:c3:e3:fc:95:2f:ea:72:da:33:60:cb:8a:
b7:f2:02:aa:da:c7:b2:3a:50:a5:65:a6:7a:f4:55:
c4:46:b4:e9:5a:08:09:bf:1f:0d:8b:13:60:b3:b8:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BC:B9:72:5C:91:B9:25:03:7D:02:EE:A6:F4:76:5F:C6:02:12:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74a8eb7e-161b-4b8d-b4a8-5d268d4dd647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:5000::/40
Signature Algorithm: sha256WithRSAEncryption
52:fb:78:c9:dd:2a:9f:52:38:37:02:e9:8f:fc:34:bf:67:d1:
24:30:e8:f7:a0:3d:6f:4f:a4:bc:2a:56:52:e4:9e:98:8c:bf:
3f:ad:b8:1e:56:80:56:93:e9:07:fa:49:50:d1:a5:8b:fe:ae:
0d:21:ae:53:6f:7a:79:94:95:81:27:76:3a:86:88:7e:b8:a4:
5d:a9:32:48:4d:d0:48:f9:4e:dc:c6:d8:09:69:3b:ae:2c:9d:
79:17:a7:3f:78:68:74:eb:6b:3d:16:03:c6:06:20:18:b7:9c:
10:5e:d7:15:cf:52:9d:d9:16:55:b4:1b:ae:88:c8:57:3a:96:
f7:76:33:6f:ab:38:2a:4e:16:b1:8f:c1:d7:a6:f9:ea:0d:61:
67:4a:0c:6a:3c:be:2c:43:dc:73:26:07:95:4f:75:da:63:99:
fa:76:18:e7:da:42:42:57:83:77:04:a7:84:12:ed:4e:01:5d:
4e:fd:9d:24:5f:0f:38:64:84:c8:1f:0c:9b:bc:3c:20:2c:a1:
7a:49:8c:d6:4d:14:10:15:75:1f:84:33:c9:90:5c:46:56:a2:
ed:79:06:78:b0:2c:c8:dd:2a:23:17:60:0a:07:82:93:c7:50:
6b:a9:eb:12:f2:b0:d3:47:6c:f0:d1:bd:2d:2f:26:56:08:fd:
5a:e6:c7:7e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdAOKYnfOr6j7lPKGcwdNEHxNoFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMDUwMTJaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDJjNjY3N2RmMThhN2I5OWQ0YzFlYmJkNGFmYWYyM2I3MmNkYjkzZmEzY2Uy
MGYyMTk3NzYzZTgzZjg3NmI5NTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKsgR+ajXFmHou9iOV+wg/47Py+EFhkhux0fzRidVbDyY+Zo4UBkppjQabfu
4lOnGx3uPgj2Q4191n+4SOmq/syUDH9TudO/sUgceO+fY8TjDHlupXvA3tBa8RwJ
nCfdCtdqEHJ9YOxQVhPH4W53/dpBXVzbfQ2qAjC7QLrQUwrHI/ZC30+lB9kT2EUe
5GeBRrOhTSOmU7AzSrodZIp3nXm+oHrW/IyCljVKU0+0Bo3Yz5eB5MSSeJzqdait
rGblTU58lCBPOe2cRBUitseVbCXdIQAFw+P8lS/qctozYMuKt/ICqtrHsjpQpWWm
evRVxEa06VoICb8fDYsTYLO4pHUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQwvLly
XJG5JQN9Au6m9HZfxgIS2zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzRhOGViN2UtMTYxYi00YjhkLWI0YTgtNWQyNjhkNGRkNjQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GhQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBS+3jJ3SqfUjg3AumP/DS/Z9EkMOj3oD1vT6S8
KlZS5J6YjL8/rbgeVoBWk+kH+klQ0aWL/q4NIa5Tb3p5lJWBJ3Y6hoh+uKRdqTJI
TdBI+U7cxtgJaTuuLJ15F6c/eGh062s9FgPGBiAYt5wQXtcVz1Kd2RZVtBuuiMhX
Opb3djNvqzgqThaxj8HXpvnqDWFnSgxqPL4sQ9xzJgeVT3XaY5n6dhjn2kJCV4N3
BKeEEu1OAV1O/Z0kXw84ZITIHwybvDwgLKF6SYzWTRQQFXUfhDPJkFxGVqLteQZ4
sCzI3SojF2AKB4KTx1BrqesS8rDTR2zw0b0tLyZWCP1a5sd+
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:17 2026 by rpki-client