Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8a0726-66bc-4cb3-9204-f821b8cf0b22.roa
File: bf8a0726-66bc-4cb3-9204-f821b8cf0b22.roa (raw, json)
Hash identifier: vkg9A//NcKDwkbsjbBEBbdHJUPzd3/JXn8He8MbRpRM=
Subject key identifier: 49:56:3C:58:9B:C6:55:18:85:D7:A0:6B:06:25:53:85:89:E1:57:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A996E66A6EBA5256083EA689A86CCEDA9E7FDC9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8a0726-66bc-4cb3-9204-f821b8cf0b22.roa
Signing time: Wed 09 Sep 2026 15:12:38 +0000
ROA not before: Wed 09 Sep 2026 15:12:38 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:99:6e:66:a6:eb:a5:25:60:83:ea:68:9a:86:cc:ed:a9:e7:fd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 15:12:38 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=d3b6f012e12cee9d7ecdaa0c36d1209c72cdcf0de4441b7c382fa42c899edf6f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:e4:dc:f0:94:2f:1c:5c:10:25:e6:6f:1a:
ee:d7:cf:82:c0:28:ae:ea:83:d2:85:e0:d6:99:dd:
98:4c:78:12:b2:9c:0f:eb:64:1b:63:0a:7a:6e:eb:
b3:74:15:33:83:40:58:66:15:ca:e6:3b:82:46:a7:
35:98:7d:98:97:d7:ae:4d:c3:a2:6e:a3:29:ee:b4:
ec:7a:36:aa:eb:9c:3e:6d:4f:70:44:17:66:80:eb:
02:47:1b:ba:56:5f:45:45:1b:ea:e1:7d:e5:f7:38:
17:ca:0b:8a:56:db:e5:de:86:60:33:7b:68:84:81:
32:47:e0:f6:9e:4f:3b:3a:a6:e0:d6:19:e4:be:fd:
cb:34:b3:37:e7:57:bf:b1:d2:04:a8:47:16:d9:15:
91:7d:b4:59:16:1b:3c:12:13:39:6e:83:b9:c2:bb:
e9:33:99:82:95:10:49:f6:a3:7e:39:af:aa:88:62:
4d:b7:e4:76:29:eb:c6:ad:13:ce:f9:c4:3a:ec:9e:
15:cb:75:31:c5:4d:cf:45:65:30:de:cc:e0:12:f2:
22:10:44:75:ea:fd:2f:7e:b7:5f:7b:b9:1d:2d:c5:
67:55:8a:0d:b9:d0:34:c9:ab:68:15:d3:b6:45:69:
e5:87:f9:e5:f2:bf:0e:d4:3b:0c:8a:a5:6d:f0:18:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:3C:58:9B:C6:55:18:85:D7:A0:6B:06:25:53:85:89:E1:57:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8a0726-66bc-4cb3-9204-f821b8cf0b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8880::/48
Signature Algorithm: sha256WithRSAEncryption
70:67:4e:85:43:e0:f5:eb:dd:d0:2a:dd:ba:39:ac:03:04:7e:
8d:72:84:59:55:4e:7d:5a:35:c3:27:cd:32:4b:1a:8f:c8:8b:
dc:96:5b:19:40:e5:7e:37:ac:d0:55:1c:ab:42:e3:be:37:16:
d7:f4:2d:40:ee:cd:e3:4b:1c:e1:69:66:85:16:ac:7e:81:90:
35:86:da:cf:e2:cd:d9:ea:cd:1a:d9:2b:7a:87:92:07:71:f0:
e6:74:fc:b8:9b:16:55:b9:05:01:0d:ab:94:61:de:62:cf:a5:
ea:5b:59:6e:7a:0a:e6:cf:a7:bb:ac:ca:f2:2c:b8:09:2f:9c:
40:aa:92:e1:6d:23:5e:78:63:44:6b:04:41:14:8e:c8:f6:c4:
bd:be:96:99:ae:b9:49:ae:05:af:fa:0d:67:70:1f:3e:6b:7b:
14:45:aa:fe:26:50:99:a0:27:d2:1c:47:25:7e:3a:fc:90:24:
ed:5d:9d:74:c4:a0:92:ee:93:f6:4d:f8:1c:ae:d8:5e:bf:10:
e2:c9:7b:b4:24:f0:ff:2d:5b:29:76:48:3d:26:4b:65:8e:2d:
3a:58:a7:7d:83:c8:c4:6c:3a:7b:82:48:1a:9d:41:af:dc:f1:
89:8e:2d:d9:62:05:86:65:27:07:19:2e:75:e2:45:7f:fb:2f:
6a:ac:1e:e3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGpluZqbrpSVgg+pomobM7ann/ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNTEyMzhaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGQzYjZmMDEyZTEyY2VlOWQ3ZWNkYWEwYzM2ZDEyMDljNzJjZGNmMGRlNDQ0
MWI3YzM4MmZhNDJjODk5ZWRmNmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1I5NzwlC8cXBAl5m8a7tfPgsAoruqD0oXg1pndmEx4ErKcD+tkG2MKem7r
s3QVM4NAWGYVyuY7gkanNZh9mJfXrk3Dom6jKe607Ho2quucPm1PcEQXZoDrAkcb
ulZfRUUb6uF95fc4F8oLilbb5d6GYDN7aISBMkfg9p5POzqm4NYZ5L79yzSzN+dX
v7HSBKhHFtkVkX20WRYbPBITOW6DucK76TOZgpUQSfajfjmvqohiTbfkdinrxq0T
zvnEOuyeFct1McVNz0VlMN7M4BLyIhBEder9L363X3u5HS3FZ1WKDbnQNMmraBXT
tkVp5Yf55fK/DtQ7DIqlbfAY0pECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRJVjxY
m8ZVGIXXoGsGJVOFieFXsjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmY4YTA3MjYtNjZiYy00Y2IzLTkyMDQtZjgyMWI4Y2YwYjIyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H2I
gDANBgkqhkiG9w0BAQsFAAOCAQEAcGdOhUPg9evd0CrdujmsAwR+jXKEWVVOfVo1
wyfNMksaj8iL3JZbGUDlfjes0FUcq0LjvjcW1/QtQO7N40sc4WlmhRasfoGQNYba
z+LN2erNGtkreoeSB3Hw5nT8uJsWVbkFAQ2rlGHeYs+l6ltZbnoK5s+nu6zK8iy4
CS+cQKqS4W0jXnhjRGsEQRSOyPbEvb6Wma65Sa4Fr/oNZ3AfPmt7FEWq/iZQmaAn
0hxHJX46/JAk7V2ddMSgku6T9k34HK7YXr8Q4sl7tCTw/y1bKXZIPSZLZY4tOlin
fYPIxGw6e4JIGp1Br9zxiY4t2WIFhmUnBxkudeJFf/svaqwe4w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:48:28 2026 by rpki-client