Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/868cbba8-4804-4fbd-b9b8-7e9402c44956.roa
File: 868cbba8-4804-4fbd-b9b8-7e9402c44956.roa (raw, json)
Hash identifier: plgJxrcmU74OUq3yHIHaE2q9FiaeUSmOcpESPHg6TIA=
Subject key identifier: 9A:C7:3A:96:5F:9F:A2:B7:3C:03:D8:2E:67:9E:5C:1A:FD:55:75:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DAE728D5B4220E59C39E485581E8304DFB585B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/868cbba8-4804-4fbd-b9b8-7e9402c44956.roa
Signing time: Fri 07 Aug 2026 05:00:47 +0000
ROA not before: Fri 07 Aug 2026 05:00:47 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ae:72:8d:5b:42:20:e5:9c:39:e4:85:58:1e:83:04:df:b5:85:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:47 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b34588afebb0d999398b69e881578fb5a97a4560915d424eaee77bffd032661d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:a2:77:ca:ff:30:c1:c4:48:55:0e:c1:1f:
00:fe:d3:f0:a0:66:83:36:08:b3:4d:f4:a6:33:52:
06:83:1a:8a:fd:af:71:8e:67:a8:80:8f:e1:d2:53:
2c:98:19:2e:8d:aa:75:e1:e2:77:c6:93:cb:5c:68:
a7:c0:4b:c0:78:81:d4:e3:e4:2f:aa:7b:78:35:e6:
f0:39:d9:ca:53:39:d5:7a:be:3d:87:bf:8a:22:51:
69:77:89:d1:53:ec:8d:65:45:03:30:86:ed:d3:66:
99:d6:10:b1:a3:88:2c:34:f8:ed:9d:de:f0:aa:09:
9c:5c:46:11:25:20:f8:8c:08:f2:03:5b:c7:67:c8:
29:b8:62:fe:59:6d:51:db:fa:50:ce:f7:44:fc:e3:
75:08:f6:1e:58:82:a2:03:34:0e:59:ee:c3:79:d5:
55:6c:2d:56:ee:40:ac:bb:a2:4a:cd:de:14:3e:7e:
48:74:f2:17:0f:ed:77:59:b4:0a:9f:d1:af:84:0a:
67:26:2a:88:33:97:cd:dd:a2:34:29:e6:b9:60:a7:
b5:83:33:86:ab:72:fb:bc:35:99:ec:48:a9:69:02:
77:19:bc:a0:1a:14:43:d6:8e:41:0a:c4:75:d7:45:
60:bf:ba:89:ba:93:bf:72:c7:93:c8:07:82:03:11:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:3A:96:5F:9F:A2:B7:3C:03:D8:2E:67:9E:5C:1A:FD:55:75:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/868cbba8-4804-4fbd-b9b8-7e9402c44956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:50:91:6e:8f:38:10:cf:ad:8f:66:5a:dd:ef:43:7a:dc:1b:
df:04:0b:75:01:58:66:b6:dc:76:07:56:95:48:a7:0d:3b:bb:
07:17:ca:88:6d:b6:4d:4a:8d:f8:5a:2f:1d:07:11:f6:7c:6b:
77:f3:5d:01:c0:70:6d:21:dd:49:a6:e5:50:e7:19:11:f4:86:
15:93:51:51:9e:81:59:82:0f:94:30:75:e2:ab:82:1d:5c:3b:
c3:e5:60:c2:32:f0:55:2a:af:c7:1a:64:b1:ce:91:a7:74:20:
7a:48:af:f4:8c:73:7b:77:0e:34:7b:c1:ad:e9:22:b3:fc:47:
66:ce:e4:30:a6:9c:1d:7d:81:28:9f:03:0f:08:f2:cd:b1:95:
c1:fb:ea:68:42:95:d5:91:9b:da:13:95:e2:48:cf:dd:24:fe:
72:29:dc:a3:76:14:38:47:3f:a3:86:61:ce:d1:57:a4:d7:a4:
d7:b1:1f:b7:9c:f0:a3:03:24:14:75:b1:29:37:ad:8f:cc:9a:
47:c0:4e:bf:cd:6b:c1:77:29:08:f2:af:5a:99:d3:d7:08:3d:
00:62:50:b4:a0:a2:12:a6:ec:f1:6b:7a:f3:6a:d2:95:b1:f3:
46:a0:b7:3c:cd:7e:a5:47:03:39:9b:35:a4:3d:44:0f:9d:b8:
36:97:b7:bf
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUba5yjVtCIOWcOeSFWB6DBN+1hbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTAwNDdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGIzNDU4OGFmZWJiMGQ5OTkzOThiNjllODgxNTc4ZmI1YTk3YTQ1NjA5MTVk
NDI0ZWFlZTc3YmZmZDAzMjY2MWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOjonfK/zDBxEhVDsEfAP7T8KBmgzYIs030pjNSBoMaiv2vcY5nqICP4dJT
LJgZLo2qdeHid8aTy1xop8BLwHiB1OPkL6p7eDXm8DnZylM51Xq+PYe/iiJRaXeJ
0VPsjWVFAzCG7dNmmdYQsaOILDT47Z3e8KoJnFxGESUg+IwI8gNbx2fIKbhi/llt
Udv6UM73RPzjdQj2HliCogM0Dlnuw3nVVWwtVu5ArLuiSs3eFD5+SHTyFw/td1m0
Cp/Rr4QKZyYqiDOXzd2iNCnmuWCntYMzhqty+7w1mexIqWkCdxm8oBoUQ9aOQQrE
dddFYL+6ibqTv3LHk8gHggMRFCMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSaxzqW
X5+itzwD2C5nnlwa/VV1ADAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODY4Y2JiYTgtNDgwNC00ZmJkLWI5YjgtN2U5NDAyYzQ0OTU2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBMUJFujzgQz62PZlrd70N63BvfBAt1AVhmttx2
B1aVSKcNO7sHF8qIbbZNSo34Wi8dBxH2fGt3810BwHBtId1JpuVQ5xkR9IYVk1FR
noFZgg+UMHXiq4IdXDvD5WDCMvBVKq/HGmSxzpGndCB6SK/0jHN7dw40e8Gt6SKz
/EdmzuQwppwdfYEonwMPCPLNsZXB++poQpXVkZvaE5XiSM/dJP5yKdyjdhQ4Rz+j
hmHO0Vek16TXsR+3nPCjAyQUdbEpN62PzJpHwE6/zWvBdykI8q9amdPXCD0AYlC0
oKISpuzxa3rzatKVsfNGoLc8zX6lRwM5mzWkPUQPnbg2l7e/
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:33 2026 by rpki-client