Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
File: 915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa (raw, json)
Hash identifier: Svx2eZK9liGnGF3BLnH7Fthh9NQMM9DQYVC9KtDmKfs=
Subject key identifier: F0:9D:0B:50:1D:73:BF:E5:B8:F4:2D:48:83:51:A4:6C:58:74:D1:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 621AD122E306272B05D3BB57AF602FC6BEBCE8FE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
Signing time: Fri 07 Aug 2026 05:30:18 +0000
ROA not before: Fri 07 Aug 2026 05:30:18 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1a:d1:22:e3:06:27:2b:05:d3:bb:57:af:60:2f:c6:be:bc:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:18 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=6b2ad5d194603143f4c87c991c772fc4a934346c3aae652e0c62d131cec6b79b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:d0:42:06:04:bf:a3:2b:6d:8a:6c:e9:1f:
66:aa:99:d0:d9:6e:67:c4:75:9b:65:19:6d:95:99:
ad:11:c3:be:6a:ce:64:53:82:7e:4c:b5:d3:08:03:
10:96:a7:a4:27:c5:d6:4f:6a:d2:56:52:5f:32:51:
dd:9e:54:87:59:03:01:67:1d:84:d1:bd:ba:d1:42:
43:5b:90:cc:f5:31:a0:11:ba:eb:0f:b2:c0:3c:0f:
a9:d2:d9:34:ab:c6:01:4b:91:6c:23:30:1e:4f:2d:
16:a2:5e:42:2e:fc:d6:d2:29:f1:14:2e:1b:c4:72:
fa:d4:0d:5a:5f:fe:35:1d:ae:0d:7b:63:45:cf:ed:
5f:1c:ed:09:8f:ee:09:44:d6:96:91:8f:48:ad:22:
d9:8c:e0:fd:59:85:ef:fe:2c:6c:ea:c3:54:fc:1f:
9d:72:ff:50:e6:08:a1:5f:e3:5b:80:58:94:97:b9:
70:04:03:0d:74:79:00:33:d5:77:71:99:c6:ea:57:
c0:bc:19:aa:4f:c0:bc:79:8e:f2:c1:bb:df:27:a3:
ea:93:8c:2c:bc:07:ce:0f:4b:ed:23:39:4c:7c:90:
38:8b:a5:26:3e:6a:4f:52:c8:35:b3:c2:6a:57:af:
b1:5e:f4:b4:30:f6:0b:51:4a:00:a2:44:23:96:17:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:0B:50:1D:73:BF:E5:B8:F4:2D:48:83:51:A4:6C:58:74:D1:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:19:bb:b6:fb:f8:ba:2d:db:a3:34:c3:65:80:b9:a8:ac:80:
ed:2d:19:a3:06:64:cc:2f:5d:cc:6d:69:9c:10:b6:cc:23:db:
27:fe:fb:d3:dd:3d:ea:bf:00:06:5e:79:92:81:86:a8:ab:94:
6c:50:2d:aa:07:cd:36:00:31:35:be:28:01:93:07:3d:2d:57:
49:36:3b:6d:bb:5a:74:ad:7c:f2:07:a4:a7:89:b6:52:f8:d4:
db:ff:84:8c:97:ea:50:8b:71:9e:9d:c2:49:a1:6b:3b:ed:4b:
99:cf:c0:ee:a8:f3:c1:84:2c:53:33:d1:d8:18:69:c1:aa:48:
40:a1:c1:b3:ef:a8:19:e2:c4:ca:7a:d0:89:68:66:19:9f:fa:
f7:5a:ef:3d:9c:1d:3e:a1:73:84:2e:99:6f:a1:e4:de:9a:2c:
0c:bb:fc:f9:91:e4:cd:51:47:01:f3:aa:1c:c2:9b:d8:20:9f:
d7:ee:84:85:fd:f0:9e:30:90:a3:15:1a:0c:ea:fe:fd:e9:fb:
e1:bd:92:6e:aa:12:61:ad:44:1d:55:d7:c9:a7:87:17:8d:5f:
9e:6f:47:72:69:c4:77:cb:43:4f:86:e5:7e:56:59:7e:a0:a8:
2a:29:c9:31:97:8e:1b:15:1d:45:c3:09:f4:e8:49:76:e1:8d:
0f:45:94:8a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYhrRIuMGJysF07tXr2Avxr686P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMThaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiMmFkNWQxOTQ2MDMxNDNmNGM4N2M5OTFjNzcyZmM0YTkzNDM0NmMzYWFl
NjUyZTBjNjJkMTMxY2VjNmI3OWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJRh0EIGBL+jK22KbOkfZqqZ0NluZ8R1m2UZbZWZrRHDvmrOZFOCfky10wgD
EJanpCfF1k9q0lZSXzJR3Z5Uh1kDAWcdhNG9utFCQ1uQzPUxoBG66w+ywDwPqdLZ
NKvGAUuRbCMwHk8tFqJeQi781tIp8RQuG8Ry+tQNWl/+NR2uDXtjRc/tXxztCY/u
CUTWlpGPSK0i2Yzg/VmF7/4sbOrDVPwfnXL/UOYIoV/jW4BYlJe5cAQDDXR5ADPV
d3GZxupXwLwZqk/AvHmO8sG73yej6pOMLLwHzg9L7SM5THyQOIulJj5qT1LINbPC
alevsV70tDD2C1FKAKJEI5YXj8sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTwnQtQ
HXO/5bj0LUiDUaRsWHTRujAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTE1Y2NlZjYtYjA2Zi00ZTExLWJlOWEtOGI5YTIyOWZmNTJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BCA
MA0GCSqGSIb3DQEBCwUAA4IBAQCOGbu2+/i6LdujNMNlgLmorIDtLRmjBmTML13M
bWmcELbMI9sn/vvT3T3qvwAGXnmSgYaoq5RsUC2qB802ADE1vigBkwc9LVdJNjtt
u1p0rXzyB6SnibZS+NTb/4SMl+pQi3GencJJoWs77UuZz8DuqPPBhCxTM9HYGGnB
qkhAocGz76gZ4sTKetCJaGYZn/r3Wu89nB0+oXOELplvoeTemiwMu/z5keTNUUcB
86ocwpvYIJ/X7oSF/fCeMJCjFRoM6v796fvhvZJuqhJhrUQdVdfJp4cXjV+eb0dy
acR3y0NPhuV+Vll+oKgqKckxl44bFR1Fwwn06El24Y0PRZSK
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:34 2026 by rpki-client