Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
File: 8c99b00e-290a-4618-8076-435475c3020f.roa (raw, json)
Hash identifier: 1KSQJYi5TJRYsA/tRMoNFY6vuLD0AhptBBI1RqWoAGM=
Subject key identifier: 14:6A:2B:FA:F9:37:F5:1A:53:B2:79:E5:6F:D4:7C:4D:A8:E2:D9:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08B1A3EF1C6EAC1C3630EAB3CD893C7FFCCC5088
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
Signing time: Fri 07 Aug 2026 05:30:34 +0000
ROA not before: Fri 07 Aug 2026 05:30:34 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b1:a3:ef:1c:6e:ac:1c:36:30:ea:b3:cd:89:3c:7f:fc:cc:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:34 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f09d5689bd4d2d8fe6c45006a18ea931f5943973b9e4e627d60563eece68d396, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:08:40:0e:5c:dd:74:aa:db:fb:b7:9a:01:
96:92:72:66:b3:45:84:99:f2:47:f4:8a:9c:1c:d0:
77:34:c4:01:9d:8d:16:43:bd:4e:c4:df:11:7e:e9:
ff:c5:6f:e7:0e:c7:61:75:c7:29:32:3d:46:18:07:
d4:0b:8d:95:3d:35:45:01:10:9e:a4:bc:80:91:2c:
49:cd:fd:f8:77:a5:5a:7a:73:f1:d1:20:1e:f0:8c:
f1:65:55:9f:37:78:1e:19:90:25:4b:a5:d4:f6:b8:
a8:2f:03:6d:e5:f5:7f:22:63:0b:21:2e:4c:59:77:
7e:54:c5:52:79:90:ff:f8:0d:3a:03:31:ff:cd:54:
83:37:b1:5e:e3:60:b1:4e:ed:05:f3:29:3a:a2:ae:
0b:48:24:59:86:bb:72:bc:67:09:15:05:be:22:c5:
12:9c:f3:f8:97:2e:0b:15:91:42:eb:bf:4f:f6:fb:
fd:93:bd:78:9c:2f:4b:42:be:3c:6b:29:a5:50:28:
0f:71:f0:ef:19:10:25:c1:26:6b:4c:85:1a:3a:72:
a9:82:66:31:50:96:5c:c9:05:8b:c5:bf:a8:af:b1:
17:1c:a7:43:df:f4:1a:aa:c5:5c:58:a2:d0:69:bc:
fa:cf:95:a3:ff:f4:b1:fc:79:48:7e:2b:91:c1:df:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:2B:FA:F9:37:F5:1A:53:B2:79:E5:6F:D4:7C:4D:A8:E2:D9:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c99b00e-290a-4618-8076-435475c3020f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c080::/48
Signature Algorithm: sha256WithRSAEncryption
72:b9:0b:3c:46:2b:56:22:7c:8a:81:2e:1a:d4:1e:5c:43:26:
50:14:8a:b7:99:03:31:a9:7f:2a:6a:6c:7c:91:d8:c1:d0:68:
34:d3:af:bf:a0:e3:c1:0f:27:96:41:40:ce:52:f7:03:79:37:
83:47:87:07:19:43:91:ec:a8:a3:08:96:b3:80:0d:51:18:33:
69:9c:26:81:16:72:70:69:30:a8:7f:87:93:d1:db:b3:5c:4f:
2f:b3:1e:3a:c9:ba:de:1e:fe:90:a5:b6:13:1e:d1:da:98:58:
7d:f8:ac:fe:5b:be:cb:ce:73:4d:86:3e:47:ea:5b:cf:8a:b8:
1b:6b:e0:ee:72:4f:01:12:df:cd:dc:f1:e7:21:2b:26:33:a6:
04:a5:fd:63:91:c1:08:90:ca:0f:6e:00:01:94:67:04:03:da:
82:0e:2e:62:d9:ec:e0:82:67:d3:ee:16:98:a5:27:36:4d:9e:
3d:a3:51:f8:b3:81:91:17:27:a3:e6:fd:20:f9:a5:7a:94:3c:
0c:f2:02:29:57:ed:c2:96:45:43:21:fa:69:5a:11:b7:e9:8c:
20:2d:59:ab:3b:a6:87:cc:98:01:9f:4d:e1:5a:ff:36:95:70:
0d:e0:b6:97:07:8f:90:4d:13:b0:47:63:26:cd:b8:15:f0:f1:
d7:84:6c:86
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCLGj7xxurBw2MOqzzYk8f/zMUIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMzRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwOWQ1Njg5YmQ0ZDJkOGZlNmM0NTAwNmExOGVhOTMxZjU5NDM5NzNiOWU0
ZTYyN2Q2MDU2M2VlY2U2OGQzOTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdZCEAOXN10qtv7t5oBlpJyZrNFhJnyR/SKnBzQdzTEAZ2NFkO9TsTfEX7p
/8Vv5w7HYXXHKTI9RhgH1AuNlT01RQEQnqS8gJEsSc39+HelWnpz8dEgHvCM8WVV
nzd4HhmQJUul1Pa4qC8DbeX1fyJjCyEuTFl3flTFUnmQ//gNOgMx/81UgzexXuNg
sU7tBfMpOqKuC0gkWYa7crxnCRUFviLFEpzz+JcuCxWRQuu/T/b7/ZO9eJwvS0K+
PGsppVAoD3Hw7xkQJcEma0yFGjpyqYJmMVCWXMkFi8W/qK+xFxynQ9/0GqrFXFii
0Gm8+s+Vo//0sfx5SH4rkcHfXUUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQUaiv6
+Tf1GlOyeeVv1HxNqOLZrTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGM5OWIwMGUtMjkwYS00NjE4LTgwNzYtNDM1NDc1YzMwMjBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADA
gDANBgkqhkiG9w0BAQsFAAOCAQEAcrkLPEYrViJ8ioEuGtQeXEMmUBSKt5kDMal/
KmpsfJHYwdBoNNOvv6DjwQ8nlkFAzlL3A3k3g0eHBxlDkeyoowiWs4ANURgzaZwm
gRZycGkwqH+Hk9Hbs1xPL7MeOsm63h7+kKW2Ex7R2phYffis/lu+y85zTYY+R+pb
z4q4G2vg7nJPARLfzdzx5yErJjOmBKX9Y5HBCJDKD24AAZRnBAPagg4uYtns4IJn
0+4WmKUnNk2ePaNR+LOBkRcno+b9IPmlepQ8DPICKVftwpZFQyH6aVoRt+mMIC1Z
qzumh8yYAZ9N4Vr/NpVwDeC2lwePkE0TsEdjJs24FfDx14Rshg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:00 2026 by rpki-client