Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
File: 9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa (raw, json)
Hash identifier: 7O9e8SfkfAd+mORvrphZws4Gbj9qJ9Px5MqR+UzQKEs=
Subject key identifier: 71:83:EB:0D:9E:9A:50:02:95:1C:61:69:2B:E4:EC:E0:4B:1F:7E:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D292E16ED438FE0B805DD6ADC7ED344863CE921
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
Signing time: Fri 07 Aug 2026 05:40:27 +0000
ROA not before: Fri 07 Aug 2026 05:40:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:29:2e:16:ed:43:8f:e0:b8:05:dd:6a:dc:7e:d3:44:86:3c:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=51e5c8a7757f1fd074d811c5ba1f9241bd3df1f11596f6b0158de5c75b30cbc0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:ef:e7:f6:bc:7c:4c:d0:61:f6:dc:b9:b9:
0e:c6:ff:00:f6:52:c7:62:14:20:27:80:3c:e4:0b:
77:b6:c8:55:cf:97:3a:3b:64:ee:5e:1b:e2:4a:03:
f1:6b:02:15:36:09:3b:80:49:73:63:ee:af:e5:5c:
85:6e:3d:17:21:18:d5:d8:28:04:4d:d3:a0:7f:e8:
d8:8b:74:0b:35:07:62:eb:f1:6c:97:a2:a3:07:92:
18:43:3b:55:a0:1e:b3:9c:f1:2e:28:c5:db:93:a0:
a3:63:a5:ee:cf:1e:65:1d:b4:08:46:f4:68:3c:cf:
c7:2b:58:ec:9d:6f:fb:fc:c0:f2:75:1d:47:3f:9d:
40:2a:39:02:db:21:ac:9d:12:67:62:0b:37:ee:04:
58:50:cc:70:04:4b:94:27:6b:32:48:bf:cc:c2:dc:
5b:f5:ca:da:13:b2:2d:a8:73:f4:f7:7d:19:00:02:
68:e6:c8:80:a8:7b:c0:8a:a0:1e:18:b5:24:51:6e:
23:25:4e:c4:61:fc:3c:d7:cd:9b:2f:2a:5a:fc:9b:
ba:2c:07:0b:d2:2e:7c:02:2f:0f:b7:5a:6f:55:5d:
76:f1:bb:a3:cb:d1:dd:ff:ad:31:08:c1:6a:e8:90:
f3:00:72:07:d5:17:e5:d6:4d:59:a7:84:2e:a7:a3:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:EB:0D:9E:9A:50:02:95:1C:61:69:2B:E4:EC:E0:4B:1F:7E:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011::/36
Signature Algorithm: sha256WithRSAEncryption
8d:33:0e:c7:b2:64:93:e9:ab:cd:1f:61:95:f1:c8:3d:ee:d5:
62:72:f0:9d:cd:56:32:1d:a0:d8:5d:55:f4:99:35:1a:2d:29:
a1:d8:29:88:97:bb:17:e3:e1:b1:2f:66:4f:68:d5:7d:df:89:
8d:2f:b1:ec:15:51:01:e9:c4:74:b9:c4:72:66:74:df:73:ee:
18:c9:dc:63:18:17:53:7a:fe:e5:c8:56:f9:4f:31:83:03:ea:
f9:93:e2:ad:65:e0:74:5f:5f:e1:0a:da:d7:6f:1a:15:5e:f9:
11:62:4d:f1:fe:18:e6:22:7f:0b:97:05:ef:1a:87:50:a1:d9:
c8:7b:a6:81:a2:4f:6b:bd:f0:e1:38:8c:ef:c0:13:12:32:89:
28:bb:6c:f9:37:70:1a:e8:07:c0:07:41:2a:67:9f:f0:d1:95:
8f:68:dc:74:a1:66:91:9d:17:53:d2:7d:1b:c7:8c:23:b4:47:
38:06:f4:af:8f:e6:59:b9:fb:c3:bc:f7:4c:0e:34:b7:99:f1:
cf:bd:04:d8:3f:64:d1:42:64:f6:c8:bf:ab:c9:7d:24:c5:9f:
9e:75:a5:9a:ed:aa:da:52:3d:f3:d1:c9:f5:5d:a9:86:83:29:
30:ed:49:8f:33:c1:ef:99:d2:a4:b3:31:2a:36:98:a8:cb:ec:
a8:90:2c:a0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbSkuFu1Dj+C4Bd1q3H7TRIY86SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTQwMjdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDUxZTVjOGE3NzU3ZjFmZDA3NGQ4MTFjNWJhMWY5MjQxYmQzZGYxZjExNTk2
ZjZiMDE1OGRlNWM3NWIzMGNiYzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhB7+f2vHxM0GH23Lm5Dsb/APZSx2IUICeAPOQLd7bIVc+XOjtk7l4b4koD
8WsCFTYJO4BJc2Pur+VchW49FyEY1dgoBE3ToH/o2It0CzUHYuvxbJeioweSGEM7
VaAes5zxLijF25Ogo2Ol7s8eZR20CEb0aDzPxytY7J1v+/zA8nUdRz+dQCo5Atsh
rJ0SZ2ILN+4EWFDMcARLlCdrMki/zMLcW/XK2hOyLahz9Pd9GQACaObIgKh7wIqg
Hhi1JFFuIyVOxGH8PNfNmy8qWvybuiwHC9IufAIvD7dab1VddvG7o8vR3f+tMQjB
auiQ8wByB9UX5dZNWaeELqejUkUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRxg+sN
nppQApUcYWkr5OzgSx9+RTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWQ1ZmRjM2EtMWJmZC00Njc3LTllNTItYTEyYzg3Mjg1MmYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCNMw7HsmST6avNH2GV8cg97tVicvCdzVYyHaDY
XVX0mTUaLSmh2CmIl7sX4+GxL2ZPaNV934mNL7HsFVEB6cR0ucRyZnTfc+4Yydxj
GBdTev7lyFb5TzGDA+r5k+KtZeB0X1/hCtrXbxoVXvkRYk3x/hjmIn8LlwXvGodQ
odnIe6aBok9rvfDhOIzvwBMSMokou2z5N3Aa6AfAB0EqZ5/w0ZWPaNx0oWaRnRdT
0n0bx4wjtEc4BvSvj+ZZufvDvPdMDjS3mfHPvQTYP2TRQmT2yL+ryX0kxZ+edaWa
7araUj3z0cn1XamGgykw7UmPM8HvmdKkszEqNpioy+yokCyg
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:03 2026 by rpki-client