Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
File: 9963ca7c-f411-4aae-ac61-2c650f8269e0.roa (raw, json)
Hash identifier: 6XP3kbna2ycsfjEon1CK9tOFfn++MJkNF/Xfu9LH5H0=
Subject key identifier: 06:FC:94:49:4B:25:70:F4:0A:B4:97:A2:3F:A2:E2:6D:49:43:51:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47EA9B9002CB21E85B1FFFE01C439ED44639F597
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
Signing time: Fri 07 Aug 2026 04:40:06 +0000
ROA not before: Fri 07 Aug 2026 04:40:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ea:9b:90:02:cb:21:e8:5b:1f:ff:e0:1c:43:9e:d4:46:39:f5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:40:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=979943f51a0653203f6e3d09932cfa465505b45f3ed0c80cfc4d7709f5ac0c3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:60:6a:86:e7:4e:06:68:05:a0:09:a4:57:
e5:5c:71:61:7d:58:85:27:c3:59:03:ee:4c:30:0b:
93:41:f1:04:0a:40:d9:a5:f7:0c:80:3e:c6:aa:53:
84:cb:d3:12:9d:eb:c2:b6:c7:c0:40:f8:2a:cd:68:
48:f4:1e:ce:34:ca:bf:c6:23:d9:3c:19:6e:70:a2:
83:e9:c3:68:36:46:b8:3c:d5:a9:f7:5a:50:8c:20:
46:88:40:d7:e2:af:24:3b:2b:9b:ef:c8:e6:d6:74:
96:60:47:16:3c:fe:13:b5:10:94:b7:0d:01:1c:79:
bb:f9:1d:5d:c6:45:8c:51:d5:99:af:72:26:5b:a3:
a4:c7:a0:c7:4f:f7:86:76:04:41:1f:5c:d8:1d:ad:
c8:f3:28:e7:89:5a:c5:9b:73:be:40:a6:4c:68:13:
4e:2c:d7:ea:37:03:58:88:97:25:dc:fe:7a:db:c6:
ce:40:72:55:9a:f7:c9:7c:da:52:b1:3c:38:a9:5b:
4c:4d:c0:65:5b:5c:a4:0b:55:9a:1b:5a:fb:80:78:
41:59:e7:19:67:5f:07:a0:c9:6e:f6:c6:e3:c0:69:
d9:b8:ce:62:2c:c3:8a:3a:b7:76:c1:b6:7e:0a:35:
91:4a:b8:48:a5:1f:31:a5:c8:7c:40:00:6f:29:c0:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:94:49:4B:25:70:F4:0A:B4:97:A2:3F:A2:E2:6D:49:43:51:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:400::/38
Signature Algorithm: sha256WithRSAEncryption
64:0e:db:91:90:19:03:41:c7:c5:5d:d1:d6:f8:35:34:4c:29:
5d:cb:d7:60:80:ad:e6:c4:e7:18:37:26:83:c3:48:0c:1e:c3:
ec:9e:07:f7:ab:45:79:a8:89:6b:6c:25:30:c5:42:7c:f2:81:
5a:11:63:b5:f6:7d:32:e3:36:64:dc:2b:9c:75:4d:56:3f:d8:
7e:82:e6:c4:a5:1e:59:71:47:f4:f7:bd:e3:9b:93:c2:4e:ad:
6f:ce:68:f2:02:3c:d0:7a:15:21:56:3a:bd:c8:6e:a0:36:80:
f3:1c:6c:dd:f5:6a:8b:40:e5:16:44:a4:aa:98:e6:2e:1a:a1:
56:40:95:13:c6:c0:3f:cf:6e:b7:43:b4:e1:d5:41:08:35:e0:
45:d8:71:83:b5:dc:f7:56:c1:6a:4b:4c:53:ad:89:5b:99:46:
2b:9e:9b:96:91:d7:15:f9:64:ae:71:1f:ab:78:2d:93:15:e3:
c0:e3:34:28:e8:89:e5:24:75:f2:bc:7f:40:03:02:6d:2a:b9:
22:9f:46:a8:c0:ed:ac:10:bc:02:77:1e:7d:c5:af:b9:e1:cf:
42:3c:f5:16:35:5a:f2:d8:78:b7:af:90:c6:b8:ba:c0:e0:57:
d2:ba:e4:b6:d7:41:3b:e4:5b:38:b9:f4:ca:0a:94:8e:4b:d9:
45:43:fc:4e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUR+qbkALLIehbH//gHEOe1EY59ZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDQwMDZaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk3OTk0M2Y1MWEwNjUzMjAzZjZlM2QwOTkzMmNmYTQ2NTUwNWI0NWYzZWQw
YzgwY2ZjNGQ3NzA5ZjVhYzBjM2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7EYGqG504GaAWgCaRX5VxxYX1YhSfDWQPuTDALk0HxBApA2aX3DIA+xqpT
hMvTEp3rwrbHwED4Ks1oSPQezjTKv8Yj2TwZbnCig+nDaDZGuDzVqfdaUIwgRohA
1+KvJDsrm+/I5tZ0lmBHFjz+E7UQlLcNARx5u/kdXcZFjFHVma9yJlujpMegx0/3
hnYEQR9c2B2tyPMo54laxZtzvkCmTGgTTizX6jcDWIiXJdz+etvGzkByVZr3yXza
UrE8OKlbTE3AZVtcpAtVmhta+4B4QVnnGWdfB6DJbvbG48Bp2bjOYizDijq3dsG2
fgo1kUq4SKUfMaXIfEAAbynADoECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQG/JRJ
SyVw9Aq0l6I/ouJtSUNRLzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTk2M2NhN2MtZjQxMS00YWFlLWFjNjEtMmM2NTBmODI2OWUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BEE
MA0GCSqGSIb3DQEBCwUAA4IBAQBkDtuRkBkDQcfFXdHW+DU0TCldy9dggK3mxOcY
NyaDw0gMHsPsngf3q0V5qIlrbCUwxUJ88oFaEWO19n0y4zZk3CucdU1WP9h+gubE
pR5ZcUf0973jm5PCTq1vzmjyAjzQehUhVjq9yG6gNoDzHGzd9WqLQOUWRKSqmOYu
GqFWQJUTxsA/z263Q7Th1UEINeBF2HGDtdz3VsFqS0xTrYlbmUYrnpuWkdcV+WSu
cR+reC2TFePA4zQo6InlJHXyvH9AAwJtKrkin0aowO2sELwCdx59xa+54c9CPPUW
NVry2Hi3r5DGuLrA4FfSuuS210E75Fs4ufTKCpSOS9lFQ/xO
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:43 2026 by rpki-client