Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
File: ad363c67-ff83-46aa-9474-de02e382946b.roa (raw, json)
Hash identifier: 4C5SIprPDoUMroEpUXlDVKy7vQVx0JGwzIn8wvG7F/I=
Subject key identifier: 61:19:C0:DD:DE:E4:8B:F1:AE:F5:E8:9E:5A:8A:E7:A5:A0:B0:18:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28CBD5CBB6197DB044693B9DF642D5CA390FF470
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
Signing time: Fri 07 Aug 2026 04:50:25 +0000
ROA not before: Fri 07 Aug 2026 04:50:25 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cb:d5:cb:b6:19:7d:b0:44:69:3b:9d:f6:42:d5:ca:39:0f:f4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:50:25 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=23bc78e290168aac4bf386cb08c877f33e4c8eb58cec93fb4bc992ed89fb046a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:19:86:f2:22:b5:ad:20:52:f9:94:8f:d4:
58:44:2c:3a:11:ec:19:de:8e:da:64:36:8a:bb:57:
b1:48:be:d0:cf:7c:20:73:d9:e0:25:e3:d3:78:7d:
73:ea:42:ac:5a:1b:44:41:b1:14:75:8f:a2:9c:2b:
af:ad:4c:d6:f8:b0:7e:b7:3f:49:af:af:d8:a5:8b:
8c:06:91:1a:34:3f:55:f4:e1:97:d6:a1:06:95:c9:
7f:1a:37:0b:40:73:35:09:9a:e2:9c:be:c3:ba:15:
cb:4b:93:42:8b:d0:7c:dd:6a:64:95:9b:9f:c8:31:
8d:79:ea:47:a1:ab:ca:0a:10:93:12:a0:70:34:4c:
fd:a6:c9:99:3f:a1:ee:d2:68:fe:bd:2c:87:9e:76:
60:06:fc:99:1f:41:25:96:0e:48:33:a3:20:55:6d:
a6:53:b4:b8:15:06:ac:0e:c1:a5:fe:83:04:f0:9f:
4c:de:1c:c5:a4:f9:a6:f7:cc:52:4a:d7:36:55:0d:
d7:10:d9:39:2d:f7:4b:67:4b:20:d9:15:dc:5d:19:
3b:bf:0e:da:e3:fd:54:ab:e1:73:4b:c9:9d:7a:aa:
10:cd:9e:a3:f5:9f:c2:3f:1d:12:72:58:a7:68:8a:
da:8a:0d:53:71:03:25:55:02:64:e3:96:75:d4:2a:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:19:C0:DD:DE:E4:8B:F1:AE:F5:E8:9E:5A:8A:E7:A5:A0:B0:18:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:b000::/40
Signature Algorithm: sha256WithRSAEncryption
b6:b1:e3:ba:39:41:72:23:c3:22:ff:aa:60:bf:34:b5:29:39:
43:f7:95:38:07:ea:a4:fc:15:60:14:29:c3:10:e5:26:f2:32:
00:3d:ef:2b:41:25:33:ac:fe:8d:d8:1c:42:f6:2b:fa:26:b7:
35:71:40:b5:97:f9:11:c8:18:1d:cb:06:99:3e:a9:96:2a:4d:
a3:63:bd:ba:b6:8e:c3:8d:13:c6:9a:c4:0d:1f:da:72:58:af:
f6:6a:89:1e:7f:fa:7a:91:04:f1:5b:9d:30:b7:c9:3a:ae:62:
f9:91:92:19:a7:56:f2:70:aa:b3:43:23:21:de:b6:ca:fe:f5:
96:73:47:1f:7a:d1:08:88:70:64:8e:9f:1e:fd:37:d8:eb:4f:
aa:32:05:18:a9:5d:6a:f9:7c:23:d0:89:70:25:79:b5:2f:32:
6c:74:6d:c4:c2:a5:5f:63:c0:ba:6c:a0:7a:3d:b9:ec:66:d5:
b3:37:8b:2a:75:8d:14:5e:82:0e:73:8a:eb:17:2f:cd:a7:67:
87:57:c5:54:cd:57:e8:dc:aa:ab:9e:87:9a:7d:a9:45:98:63:
ad:15:c0:17:8b:41:90:7a:2e:f2:2e:5e:9b:96:07:ea:a9:50:
5c:98:ce:1c:06:31:40:6a:40:86:d3:1e:25:98:cc:c0:5e:4d:
3d:9b:68:f8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKMvVy7YZfbBEaTud9kLVyjkP9HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDUwMjVaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzYmM3OGUyOTAxNjhhYWM0YmYzODZjYjA4Yzg3N2YzM2U0YzhlYjU4Y2Vj
OTNmYjRiYzk5MmVkODlmYjA0NmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI0vGYbyIrWtIFL5lI/UWEQsOhHsGd6O2mQ2irtXsUi+0M98IHPZ4CXj03h9
c+pCrFobREGxFHWPopwrr61M1viwfrc/Sa+v2KWLjAaRGjQ/VfThl9ahBpXJfxo3
C0BzNQma4py+w7oVy0uTQovQfN1qZJWbn8gxjXnqR6GrygoQkxKgcDRM/abJmT+h
7tJo/r0sh552YAb8mR9BJZYOSDOjIFVtplO0uBUGrA7Bpf6DBPCfTN4cxaT5pvfM
UkrXNlUN1xDZOS33S2dLINkV3F0ZO78O2uP9VKvhc0vJnXqqEM2eo/Wfwj8dEnJY
p2iK2ooNU3EDJVUCZOOWddQqixcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRhGcDd
3uSL8a716J5aiueloLAY7TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWQzNjNjNjctZmY4My00NmFhLTk0NzQtZGUwMmUzODI5NDZiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HGw
MA0GCSqGSIb3DQEBCwUAA4IBAQC2seO6OUFyI8Mi/6pgvzS1KTlD95U4B+qk/BVg
FCnDEOUm8jIAPe8rQSUzrP6N2BxC9iv6Jrc1cUC1l/kRyBgdywaZPqmWKk2jY726
to7DjRPGmsQNH9pyWK/2aokef/p6kQTxW50wt8k6rmL5kZIZp1bycKqzQyMh3rbK
/vWWc0cfetEIiHBkjp8e/TfY60+qMgUYqV1q+Xwj0IlwJXm1LzJsdG3EwqVfY8C6
bKB6PbnsZtWzN4sqdY0UXoIOc4rrFy/Np2eHV8VUzVfo3KqrnoeafalFmGOtFcAX
i0GQei7yLl6blgfqqVBcmM4cBjFAakCG0x4lmMzAXk09m2j4
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:54 2026 by rpki-client