Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa
File: 7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa (raw, json)
Hash identifier: FJ4dBzUxqgYFX8Ywv8gU1clMrshWBSBs++u6kjsj5Qs=
Subject key identifier: 0D:5B:8A:B1:41:1E:D2:97:12:96:86:D1:CC:36:86:D0:E9:52:18:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 719A0D56B46679C1A9D930E52BB2C11BD7C49866
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa
Signing time: Tue 13 Oct 2026 00:08:58 +0000
ROA not before: Tue 13 Oct 2026 00:08:58 +0000
ROA not after: Mon 11 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9a:0d:56:b4:66:79:c1:a9:d9:30:e5:2b:b2:c1:1b:d7:c4:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 00:08:58 2026 GMT
Not After : Jan 11 23:59:59 2027 GMT
Subject: serialNumber=827c6c2227a79720d1fa1236fbaadfb52c951b69bc699cb66b5605284636c0c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:cc:e9:74:35:e6:f5:36:e8:9c:ed:2d:4e:
7f:63:44:83:f7:d4:bd:01:a2:a9:67:94:9d:d8:62:
de:48:5a:15:fd:e5:63:d0:e1:6b:cc:a2:20:8e:d0:
85:71:13:d3:ab:6c:5f:e2:10:32:fd:5b:5a:02:13:
bb:4b:f4:45:29:ac:1c:20:ea:fc:b3:bc:fa:93:e7:
e9:b0:2a:14:3e:15:9b:ac:f0:37:0c:ec:ad:b1:e1:
61:59:5f:d7:44:c7:32:5f:1a:a3:b5:96:36:dc:d3:
35:9e:b7:55:f8:2e:04:80:25:ae:df:3b:ef:c0:66:
ae:bb:b4:01:74:41:dc:7e:d3:f1:ea:a6:0f:fc:5f:
5d:ff:89:5a:14:3d:e8:09:46:40:96:ee:ca:c4:bb:
62:d3:27:22:aa:b0:65:0a:90:5a:66:39:3a:bb:64:
84:15:e1:5b:a4:fc:bb:5b:06:81:c9:0e:fd:af:c8:
92:ac:12:4b:5c:85:02:4a:6f:c8:2d:21:2b:f4:5b:
57:1c:b9:3b:97:40:2e:35:ca:fa:df:5e:a2:96:f1:
6a:52:be:12:81:89:1b:9c:3a:d9:57:3e:36:44:52:
76:d5:ed:c8:4c:16:bf:37:74:3d:71:99:57:fc:93:
ba:e4:bb:7d:3c:99:30:64:0c:06:f0:a7:a9:4d:b7:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:8A:B1:41:1E:D2:97:12:96:86:D1:CC:36:86:D0:E9:52:18:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f3452cc-a2fb-45ca-9617-8db45bd3c546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/42
Signature Algorithm: sha256WithRSAEncryption
63:1a:ea:f9:ad:4c:65:1c:e6:f4:a6:d2:5b:56:24:23:9b:5f:
7f:7d:55:0e:0a:27:e5:10:a1:09:b7:f5:4a:0c:6d:4d:8b:03:
27:83:05:ad:77:8f:3f:2b:17:6f:70:40:64:e4:b9:80:69:a0:
c1:10:18:ad:25:ed:8c:82:c0:54:be:54:6c:61:3f:a3:7f:00:
6f:86:5c:cf:22:74:56:d3:4c:16:5b:80:3c:44:76:ef:25:ed:
88:5c:09:0a:8d:52:05:ac:d8:00:34:f4:2b:31:ac:aa:22:cc:
b9:48:e7:55:d5:60:ce:60:54:4d:2d:3a:1f:19:41:52:1c:88:
df:db:08:e5:72:c8:9b:25:2e:f0:63:c0:ab:08:a5:2c:e8:15:
d1:71:d4:33:b2:a9:ae:07:d8:69:0d:5b:db:59:06:b3:ba:89:
c9:25:22:01:6f:d0:c9:a5:ef:b8:a3:8a:1e:e8:09:a3:c0:c8:
0c:cd:ba:f2:c8:2e:57:6e:1d:48:c2:5d:74:1a:3f:0f:cc:6a:
75:46:89:09:35:0e:2b:94:d0:ab:66:d9:50:d1:bb:22:37:49:
c7:a9:28:19:46:b2:c5:f8:0a:02:41:18:03:76:82:e9:35:64:
c9:34:bb:55:65:f7:dd:71:b0:8c:5c:8a:1c:9f:ce:0b:89:04:
61:fb:bd:75
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcZoNVrRmecGp2TDlK7LBG9fEmGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTMwMDA4NThaFw0yNzAxMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDgyN2M2YzIyMjdhNzk3MjBkMWZhMTIzNmZiYWFkZmI1MmM5NTFiNjliYzY5
OWNiNjZiNTYwNTI4NDYzNmMwYzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/qzOl0Neb1Nuic7S1Of2NEg/fUvQGiqWeUndhi3khaFf3lY9Dha8yiII7Q
hXET06tsX+IQMv1bWgITu0v0RSmsHCDq/LO8+pPn6bAqFD4Vm6zwNwzsrbHhYVlf
10THMl8ao7WWNtzTNZ63VfguBIAlrt8778Bmrru0AXRB3H7T8eqmD/xfXf+JWhQ9
6AlGQJbuysS7YtMnIqqwZQqQWmY5OrtkhBXhW6T8u1sGgckO/a/IkqwSS1yFAkpv
yC0hK/RbVxy5O5dALjXK+t9eopbxalK+EoGJG5w62Vc+NkRSdtXtyEwWvzd0PXGZ
V/yTuuS7fTyZMGQMBvCnqU23T6MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQNW4qx
QR7SlxKWhtHMNobQ6VIYYjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2YzNDUyY2MtYTJmYi00NWNhLTk2MTctOGRiNDViZDNjNTQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBioF0BsA
ADANBgkqhkiG9w0BAQsFAAOCAQEAYxrq+a1MZRzm9KbSW1YkI5tff31VDgon5RCh
Cbf1SgxtTYsDJ4MFrXePPysXb3BAZOS5gGmgwRAYrSXtjILAVL5UbGE/o38Ab4Zc
zyJ0VtNMFluAPER27yXtiFwJCo1SBazYADT0KzGsqiLMuUjnVdVgzmBUTS06HxlB
UhyI39sI5XLImyUu8GPAqwilLOgV0XHUM7KprgfYaQ1b21kGs7qJySUiAW/QyaXv
uKOKHugJo8DIDM268sguV24dSMJddBo/D8xqdUaJCTUOK5TQq2bZUNG7IjdJx6ko
GUayxfgKAkEYA3aC6TVkyTS7VWX33XGwjFyKHJ/OC4kEYfu9dQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:57 2026 by rpki-client