Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7055f6d-b8e5-460c-aa12-f5580251296e.roa
File: b7055f6d-b8e5-460c-aa12-f5580251296e.roa (raw, json)
Hash identifier: pquQiNDltK+CUsCLOUYREQxZfZe2dJ8VnIwkEV3pwtw=
Subject key identifier: E2:CF:D5:95:7E:F2:E4:A1:19:9F:A9:C4:5D:38:EF:9F:6B:22:84:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2029B42B987DC575D6F8D08618D4198BF2128FB5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7055f6d-b8e5-460c-aa12-f5580251296e.roa
Signing time: Wed 09 Sep 2026 16:12:59 +0000
ROA not before: Wed 09 Sep 2026 16:12:59 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:29:b4:2b:98:7d:c5:75:d6:f8:d0:86:18:d4:19:8b:f2:12:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:12:59 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=d7dd843e9eaf4bad438258240f2083254d7a205a4df65cf9eace678104237602, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:aa:76:cd:cc:16:a8:ee:dd:fa:77:e6:6d:
06:90:8b:b9:43:68:99:ce:ed:11:2e:ac:84:05:6a:
e5:1b:d2:df:3c:4b:dd:9b:0e:59:4c:e7:c1:46:80:
a5:c0:ff:41:ec:d4:20:41:61:54:75:ba:fb:1c:e4:
e9:8c:ab:5d:5a:d2:1e:c0:5d:1f:78:3b:e5:a1:22:
28:a8:37:2f:2c:98:ed:d3:c6:b8:b8:2e:d6:85:c8:
a2:f1:76:bf:62:3a:40:9c:8e:5c:07:e3:9e:6a:e9:
ff:30:a2:86:d3:22:b4:05:99:99:71:2d:82:cc:68:
93:b9:b3:ca:7b:86:62:17:cf:81:10:69:71:55:65:
03:81:6a:c6:c0:00:0e:ea:f2:b6:4d:6b:bd:7b:46:
52:b0:1e:d6:b7:07:5d:f7:24:c4:58:c0:aa:96:b2:
bc:81:6b:37:25:3a:ec:21:fd:79:a9:7d:63:8b:ab:
16:23:80:16:d1:c8:64:c7:7f:53:91:ae:f0:21:74:
cb:79:18:93:a6:3b:95:52:91:0b:59:4f:a2:0e:8c:
28:f2:22:b0:f3:dc:ff:e7:aa:8b:0d:07:e9:d8:73:
6b:2d:4a:aa:fd:c1:b5:8f:e0:bc:05:16:b8:36:75:
6d:7e:b9:66:6d:24:87:94:e0:9a:70:f1:d2:c7:b2:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:D5:95:7E:F2:E4:A1:19:9F:A9:C4:5D:38:EF:9F:6B:22:84:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b7055f6d-b8e5-460c-aa12-f5580251296e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:8800::/40
Signature Algorithm: sha256WithRSAEncryption
0b:9f:d7:1c:03:d4:76:84:ac:da:c7:0d:99:d0:e1:3c:df:f0:
9a:a9:f4:aa:79:9a:9a:f0:2d:d8:56:45:75:eb:ce:5c:d7:72:
d6:89:a2:50:f3:56:d9:f0:9f:85:93:d2:fd:70:ad:46:10:1b:
d9:26:d4:13:9f:d8:30:e7:89:e5:ce:5f:0c:8e:98:cb:47:c1:
f3:aa:6e:f6:9a:75:ed:9c:af:e7:1e:8d:5b:9f:09:63:e0:03:
dd:e9:60:f7:b6:fe:25:3b:87:e5:72:db:07:3a:b3:52:6f:59:
d8:a7:a7:e2:bc:4a:15:c5:ac:43:9b:56:bf:d8:d1:b5:88:74:
fa:db:be:d6:e4:fa:7e:31:1f:0e:08:28:07:94:6b:ca:4a:cb:
1f:0e:3e:98:5f:bd:d2:0a:ea:03:07:d3:a7:b4:75:c5:f7:8f:
7e:8f:60:2f:73:f7:8c:a4:ab:14:7c:81:6d:cd:34:fb:67:f8:
fb:62:56:d3:fe:4a:7a:49:cb:13:bd:e3:9c:6c:ab:f7:58:44:
96:f4:a6:f7:e5:a6:21:03:6a:3f:05:4d:ab:fd:15:92:7c:60:
ff:cf:55:77:cb:d6:03:26:48:af:b5:f5:ac:e1:d6:7a:1e:fe:
0d:39:f4:cb:1c:fb:69:28:58:64:91:bb:dd:86:8d:79:0d:b5:
0a:1e:27:d9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUICm0K5h9xXXW+NCGGNQZi/ISj7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjEyNTlaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ3ZGQ4NDNlOWVhZjRiYWQ0MzgyNTgyNDBmMjA4MzI1NGQ3YTIwNWE0ZGY2
NWNmOWVhY2U2NzgxMDQyMzc2MDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9fqnbNzBao7t36d+ZtBpCLuUNomc7tES6shAVq5RvS3zxL3ZsOWUznwUaA
pcD/QezUIEFhVHW6+xzk6YyrXVrSHsBdH3g75aEiKKg3LyyY7dPGuLgu1oXIovF2
v2I6QJyOXAfjnmrp/zCihtMitAWZmXEtgsxok7mzynuGYhfPgRBpcVVlA4FqxsAA
Durytk1rvXtGUrAe1rcHXfckxFjAqpayvIFrNyU67CH9eal9Y4urFiOAFtHIZMd/
U5Gu8CF0y3kYk6Y7lVKRC1lPog6MKPIisPPc/+eqiw0H6dhzay1Kqv3BtY/gvAUW
uDZ1bX65Zm0kh5TgmnDx0seyGKECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTiz9WV
fvLkoRmfqcRdOO+fayKEcTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjcwNTVmNmQtYjhlNS00NjBjLWFhMTItZjU1ODAyNTEyOTZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FCI
MA0GCSqGSIb3DQEBCwUAA4IBAQALn9ccA9R2hKzaxw2Z0OE83/CaqfSqeZqa8C3Y
VkV1685c13LWiaJQ81bZ8J+Fk9L9cK1GEBvZJtQTn9gw54nlzl8MjpjLR8Hzqm72
mnXtnK/nHo1bnwlj4APd6WD3tv4lO4flctsHOrNSb1nYp6fivEoVxaxDm1a/2NG1
iHT6277W5Pp+MR8OCCgHlGvKSssfDj6YX73SCuoDB9OntHXF949+j2Avc/eMpKsU
fIFtzTT7Z/j7YlbT/kp6ScsTveOcbKv3WESW9Kb35aYhA2o/BU2r/RWSfGD/z1V3
y9YDJkivtfWs4dZ6Hv4NOfTLHPtpKFhkkbvdho15DbUKHifZ
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:25 2026 by rpki-client