Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
File: 98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa (raw, json)
Hash identifier: RUKSGy4qzMELd3EcNMPY1MLbD2o9ixgIxiTwACqm+H4=
Subject key identifier: 1E:1B:71:78:B6:4E:E2:8C:5A:89:A9:9D:99:08:9E:35:48:73:76:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3138F7A3D8A6143BD8750CE5E0032FF99BD30274
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
Signing time: Fri 07 Aug 2026 05:10:23 +0000
ROA not before: Fri 07 Aug 2026 05:10:23 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:38:f7:a3:d8:a6:14:3b:d8:75:0c:e5:e0:03:2f:f9:9b:d3:02:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:23 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=45b66acb19ccdd5d0ad29f5a7817a73f59aca97f35ba03da00469f0074046651, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:ff:ec:d1:b1:80:70:75:97:2e:8d:08:b6:
cf:a7:83:6e:8b:c3:9d:b7:7d:ea:7c:a5:03:1f:59:
44:20:01:6d:2e:77:ec:53:1a:89:5f:4f:19:0f:c4:
49:f5:a0:1e:e7:00:a3:2e:81:f7:95:12:6b:e9:88:
b9:c3:b2:fa:e7:d2:2e:19:37:10:76:c7:2d:2f:5e:
a1:f8:52:c3:74:8d:94:3f:28:0b:ca:28:10:09:2c:
8d:ed:6b:66:c6:d8:10:8f:3c:e5:ee:4a:1e:4d:9e:
8f:d3:88:23:41:c1:b2:dc:45:26:43:04:cd:c9:c6:
90:bf:8e:21:e2:87:23:9f:e8:ea:dc:9e:a8:6f:37:
8f:b4:5d:75:5b:da:9a:18:00:45:64:81:89:8f:66:
4f:7e:b5:fd:42:84:bf:db:c7:ab:5f:a4:6b:1d:20:
1e:f1:13:1e:b8:e2:93:05:6c:a2:e1:a2:19:79:c6:
00:96:b3:5e:80:b3:92:25:cd:28:e7:66:6a:81:d9:
80:7a:f7:8a:60:59:61:01:3a:9a:6a:7e:08:33:fc:
54:4e:59:88:59:8a:97:9e:ea:35:6a:a6:44:87:e6:
ef:51:80:88:56:27:fe:ae:01:bb:58:ae:2d:b7:ed:
04:2c:e2:fd:54:c0:59:d8:17:4f:17:95:0e:16:67:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1B:71:78:B6:4E:E2:8C:5A:89:A9:9D:99:08:9E:35:48:73:76:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/36
Signature Algorithm: sha256WithRSAEncryption
93:04:81:d3:b9:66:13:42:f0:0b:72:13:45:f1:8c:bb:c9:6e:
4b:a4:0d:31:76:f0:8e:d1:31:59:d6:17:6c:64:4b:5e:5f:49:
a4:0f:4a:29:3c:1f:f0:c3:0d:5e:be:d4:92:09:34:4c:30:18:
7d:97:5d:7b:4b:92:b7:a2:90:4f:51:cd:04:bd:1d:ad:df:06:
77:da:4b:0b:52:8e:e9:fa:d6:1e:2a:23:91:ee:d0:74:28:cf:
ef:7e:33:b8:29:40:9a:b4:6f:37:05:b6:91:c9:4e:89:dd:51:
11:52:34:37:02:b3:17:ee:e9:b2:75:f5:81:f5:21:25:d8:d0:
c2:47:f5:54:70:63:71:4a:52:35:9c:ca:f7:40:c7:88:e0:80:
11:d4:08:2d:5e:66:95:43:8b:1b:0d:41:37:9c:4a:10:1e:84:
77:af:71:4e:65:ec:46:a2:61:20:f2:ef:a7:fd:29:a1:69:99:
1f:8b:53:92:3c:0c:16:7c:f5:06:68:8b:b7:f0:f8:ca:4e:d0:
92:82:65:9e:55:37:5b:18:d3:a5:9e:fc:48:41:df:44:e7:1e:
12:9c:8e:b2:e8:9b:83:73:fc:76:04:ad:8d:cf:ec:42:48:15:
8f:0c:7d:4d:ab:b8:65:85:2e:dc:e3:56:53:c6:9a:7a:33:6c:
88:bb:7d:13
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMTj3o9imFDvYdQzl4AMv+ZvTAnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTEwMjNaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1YjY2YWNiMTljY2RkNWQwYWQyOWY1YTc4MTdhNzNmNTlhY2E5N2YzNWJh
MDNkYTAwNDY5ZjAwNzQwNDY2NTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKUD/+zRsYBwdZcujQi2z6eDbovDnbd96nylAx9ZRCABbS537FMaiV9PGQ/E
SfWgHucAoy6B95USa+mIucOy+ufSLhk3EHbHLS9eofhSw3SNlD8oC8ooEAksje1r
ZsbYEI885e5KHk2ej9OII0HBstxFJkMEzcnGkL+OIeKHI5/o6tyeqG83j7RddVva
mhgARWSBiY9mT361/UKEv9vHq1+kax0gHvETHrjikwVsouGiGXnGAJazXoCzkiXN
KOdmaoHZgHr3imBZYQE6mmp+CDP8VE5ZiFmKl57qNWqmRIfm71GAiFYn/q4Bu1iu
LbftBCzi/VTAWdgXTxeVDhZnH8MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQeG3F4
tk7ijFqJqZ2ZCJ41SHN2QjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OThjZjU1YzUtYmI0YS00NmE1LWE2NjctOTAxYjFhMmZmYjRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BUA
MA0GCSqGSIb3DQEBCwUAA4IBAQCTBIHTuWYTQvALchNF8Yy7yW5LpA0xdvCO0TFZ
1hdsZEteX0mkD0opPB/www1evtSSCTRMMBh9l117S5K3opBPUc0EvR2t3wZ32ksL
Uo7p+tYeKiOR7tB0KM/vfjO4KUCatG83BbaRyU6J3VERUjQ3ArMX7umydfWB9SEl
2NDCR/VUcGNxSlI1nMr3QMeI4IAR1AgtXmaVQ4sbDUE3nEoQHoR3r3FOZexGomEg
8u+n/SmhaZkfi1OSPAwWfPUGaIu38PjKTtCSgmWeVTdbGNOlnvxIQd9E5x4SnI6y
6JuDc/x2BK2Nz+xCSBWPDH1Nq7hlhS7c41ZTxpp6M2yIu30T
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:50 2026 by rpki-client