Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a0196e5-a789-4daf-912c-37aa6951f379.roa
File: 9a0196e5-a789-4daf-912c-37aa6951f379.roa (raw, json)
Hash identifier: Jceagi2k1QABNqFJ9OvAh6Z5UGYQsVuYARo5XvSmuM4=
Subject key identifier: 7F:51:C6:C1:FF:5F:3D:41:62:7B:6B:B6:5A:ED:0B:E5:25:1A:30:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B77C84C9975F88C83ABB20DC5CA094936DC8B20
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a0196e5-a789-4daf-912c-37aa6951f379.roa
Signing time: Thu 30 Jul 2026 01:40:35 +0000
ROA not before: Thu 30 Jul 2026 01:40:35 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:77:c8:4c:99:75:f8:8c:83:ab:b2:0d:c5:ca:09:49:36:dc:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:35 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=0fa97ffeaf92bdf16ff944836650d53578d09b49f903879715aad388ddfaa6e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:fc:03:ce:41:bd:11:a7:18:ba:0d:58:9d:
8e:e1:a6:b7:71:41:23:a6:f8:e7:ef:15:bf:17:74:
dd:f4:27:3c:34:ca:fe:1f:97:09:8a:7d:57:dd:e4:
8b:00:6f:d3:d5:97:c6:81:cd:82:b0:24:ab:69:6f:
48:18:21:fd:10:df:5a:43:15:62:bf:bf:6d:e4:ad:
34:ac:9e:9e:14:ad:ab:ec:b4:45:c7:ca:c4:6d:70:
db:a6:cb:be:8d:34:06:e2:43:54:c6:b7:e5:24:a7:
d8:be:32:e4:18:2b:20:05:a2:99:cf:3f:51:c3:3f:
2c:12:50:05:c7:32:1d:4c:c7:b1:8e:a7:43:9c:54:
9b:0d:0c:c7:3d:ef:54:11:b1:2c:3c:53:f7:f5:b4:
2e:ea:83:fe:ea:bf:f1:2a:dc:4b:17:60:0f:e6:2f:
54:f0:7f:c4:f2:03:38:46:66:a2:20:66:c3:39:f5:
b7:74:b3:88:97:76:77:a6:b3:c1:dd:08:82:6d:f3:
f2:f5:5f:f4:b2:4e:61:ae:57:52:e8:40:93:3b:77:
38:26:b5:01:cf:a0:76:40:49:dc:cb:29:ce:04:70:
c1:74:99:91:ba:47:24:fd:2b:b2:f5:a5:21:14:13:
13:8d:a6:04:31:59:ba:76:0c:6a:02:30:f1:af:85:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:C6:C1:FF:5F:3D:41:62:7B:6B:B6:5A:ED:0B:E5:25:1A:30:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9a0196e5-a789-4daf-912c-37aa6951f379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:a000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:0e:b4:b6:c5:e4:69:0b:56:8d:df:01:90:88:bb:00:0f:d0:
7f:09:67:0b:36:fe:03:1b:2a:03:31:c5:aa:04:7f:bb:f8:23:
a1:15:28:11:31:2c:ce:bf:5f:ec:bd:d5:0a:2b:42:49:8d:1b:
a5:9e:d3:e7:8b:25:6e:a2:43:8e:af:2d:91:6f:cf:40:3e:b9:
3c:ec:9a:4b:64:30:fa:21:8c:4f:82:4d:0d:41:0c:e8:d1:0e:
ca:6c:e3:6d:8b:04:99:26:a0:ea:96:83:e7:6d:ea:5b:ff:c4:
5d:68:c1:31:65:0c:cf:ca:dd:04:67:29:b7:7e:b1:41:d9:0f:
56:de:53:9f:24:65:ab:b5:38:3e:85:fd:e0:1e:ea:9e:87:1f:
22:08:9c:8c:31:7d:42:ba:5c:ff:99:62:ea:c1:bf:71:11:fc:
6b:53:46:71:d7:dd:bc:c1:ef:5e:02:67:e1:16:4f:72:68:ab:
ce:28:e9:35:ba:9a:58:69:47:10:0b:21:a8:ec:ff:cf:02:4a:
f3:d3:91:72:1c:cf:50:02:3c:1a:2c:1e:00:f7:5b:a2:06:c7:
13:47:cf:08:5b:27:09:c5:95:0c:3c:8d:dd:ce:09:3f:03:8e:
75:0b:81:c5:55:37:cb:9c:53:6d:60:1c:46:9b:33:7e:10:79:
d3:11:62:8d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUK3fITJl1+IyDq7INxcoJSTbciyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQwMzVaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDBmYTk3ZmZlYWY5MmJkZjE2ZmY5NDQ4MzY2NTBkNTM1NzhkMDliNDlmOTAz
ODc5NzE1YWFkMzg4ZGRmYWE2ZTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKto/APOQb0Rpxi6DVidjuGmt3FBI6b45+8Vvxd03fQnPDTK/h+XCYp9V93k
iwBv09WXxoHNgrAkq2lvSBgh/RDfWkMVYr+/beStNKyenhStq+y0RcfKxG1w26bL
vo00BuJDVMa35SSn2L4y5BgrIAWimc8/UcM/LBJQBccyHUzHsY6nQ5xUmw0Mxz3v
VBGxLDxT9/W0LuqD/uq/8SrcSxdgD+YvVPB/xPIDOEZmoiBmwzn1t3SziJd2d6az
wd0Igm3z8vVf9LJOYa5XUuhAkzt3OCa1Ac+gdkBJ3MspzgRwwXSZkbpHJP0rsvWl
IRQTE42mBDFZunYMagIw8a+FEp0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR/UcbB
/189QWJ7a7Za7QvlJRowUzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWEwMTk2ZTUtYTc4OS00ZGFmLTkxMmMtMzdhYTY5NTFmMzc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DCg
MA0GCSqGSIb3DQEBCwUAA4IBAQCcDrS2xeRpC1aN3wGQiLsAD9B/CWcLNv4DGyoD
McWqBH+7+COhFSgRMSzOv1/svdUKK0JJjRulntPniyVuokOOry2Rb89APrk87JpL
ZDD6IYxPgk0NQQzo0Q7KbONtiwSZJqDqloPnbepb/8RdaMExZQzPyt0EZym3frFB
2Q9W3lOfJGWrtTg+hf3gHuqehx8iCJyMMX1Culz/mWLqwb9xEfxrU0Zx1928we9e
AmfhFk9yaKvOKOk1uppYaUcQCyGo7P/PAkrz05FyHM9QAjwaLB4A91uiBscTR88I
WycJxZUMPI3dzgk/A451C4HFVTfLnFNtYBxGmzN+EHnTEWKN
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:19:29 2026 by rpki-client