Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa
File: d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa (raw, json)
Hash identifier: mNJKoxo0zxmNaAFIbriIgTbP/qVFnSMs573ZfMWtZnQ=
Subject key identifier: 6A:71:8D:CF:94:32:74:FD:C2:6F:D4:44:07:FF:45:E2:65:CC:04:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A64297B0EFA43BF16989C80226C3D574D37D33D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa
Signing time: Thu 10 Sep 2026 02:40:36 +0000
ROA not before: Thu 10 Sep 2026 02:40:36 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:64:29:7b:0e:fa:43:bf:16:98:9c:80:22:6c:3d:57:4d:37:d3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:36 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=5cfe92ff8dfca43cf62b28483dce70278983b3e1125c9fad0d2fb4d65aaea2a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:bc:e2:de:46:2e:a5:02:84:2e:88:25:12:
17:c2:f9:5f:8f:74:77:b4:33:5d:f7:fb:9d:81:19:
fa:04:19:e9:f7:e8:c4:9c:bd:5e:37:4e:25:02:f4:
42:6d:b2:4d:87:ae:25:c5:13:95:52:be:4d:86:76:
dd:96:d6:e2:8b:ed:05:f9:e1:85:a2:00:4b:af:cd:
b6:01:36:dd:f1:96:22:13:4f:8b:2d:36:d7:d5:40:
77:9a:c5:a9:83:40:7e:14:b2:55:a2:5a:c8:77:25:
07:61:f3:95:0e:41:56:d4:d6:79:32:6d:33:f5:9f:
9d:00:26:d6:16:8f:87:b8:7d:9f:17:9f:00:f2:1d:
0d:32:37:66:11:c2:24:00:7c:d0:d2:0f:b4:e3:11:
81:26:4b:f5:c2:67:37:4a:0b:a4:68:60:90:88:6e:
5c:cb:af:96:c5:2a:9c:df:f9:f1:c1:4b:71:b5:9d:
38:a9:01:2d:b8:25:bf:c2:7a:06:a7:a9:78:92:43:
6c:5c:4e:71:8e:d2:a2:64:50:97:86:09:44:84:b2:
e7:df:52:33:68:1a:8e:ad:9c:3c:14:51:14:b8:67:
fe:0c:9f:4b:b9:b4:e0:3f:dd:ba:0d:0f:9d:af:8a:
0a:32:0c:43:84:a6:f3:ac:f1:39:7b:6e:ab:59:01:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:8D:CF:94:32:74:FD:C2:6F:D4:44:07:FF:45:E2:65:CC:04:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:6000::/40
Signature Algorithm: sha256WithRSAEncryption
45:76:cc:af:d4:58:28:27:0f:a9:91:7b:46:a3:41:18:f7:4d:
30:3a:68:4e:70:71:a3:99:c7:dc:54:38:19:16:f8:fb:fc:8c:
20:7a:a9:e8:9f:2c:f0:b9:90:41:a6:26:63:e4:71:00:02:1f:
c4:b3:58:ff:f0:d3:d6:65:4e:d2:94:8d:1b:52:81:d3:0f:d0:
68:c8:25:58:7b:c7:1c:0f:82:4b:63:1f:92:db:73:a8:34:55:
e2:8f:0c:aa:2e:10:11:bd:8a:42:8a:a7:c0:42:a5:ef:90:5d:
08:29:10:fe:35:1b:9e:e6:54:9a:06:c4:6c:60:b2:c2:6e:e4:
11:69:01:aa:fd:1e:92:12:3e:65:42:1c:1d:b0:20:76:9e:f9:
fe:6e:28:c0:52:f3:9f:b2:29:a2:a0:f9:85:d7:2b:e4:86:bb:
8d:81:52:1c:7f:64:8b:fd:0c:3d:35:1a:38:62:bd:0d:17:33:
8e:69:be:40:7b:d3:29:ca:53:99:81:21:76:f6:a8:88:28:15:
11:11:49:60:76:c2:fc:16:d4:8b:d3:81:e8:00:a4:95:23:28:
df:98:e4:ae:4f:89:7d:01:18:c0:20:97:dd:cb:a6:d7:fd:8a:
b2:26:fe:44:39:67:4b:39:75:e2:43:04:0f:7e:0b:c7:be:bc:
0b:2a:2a:ed
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGmQpew76Q78WmJyAImw9V0030z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjQwMzZaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDVjZmU5MmZmOGRmY2E0M2NmNjJiMjg0ODNkY2U3MDI3ODk4M2IzZTExMjVj
OWZhZDBkMmZiNGQ2NWFhZWEyYTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN+evOLeRi6lAoQuiCUSF8L5X490d7QzXff7nYEZ+gQZ6ffoxJy9XjdOJQL0
Qm2yTYeuJcUTlVK+TYZ23ZbW4ovtBfnhhaIAS6/NtgE23fGWIhNPiy0219VAd5rF
qYNAfhSyVaJayHclB2HzlQ5BVtTWeTJtM/WfnQAm1haPh7h9nxefAPIdDTI3ZhHC
JAB80NIPtOMRgSZL9cJnN0oLpGhgkIhuXMuvlsUqnN/58cFLcbWdOKkBLbglv8J6
BqepeJJDbFxOcY7SomRQl4YJRISy599SM2gajq2cPBRRFLhn/gyfS7m04D/dug0P
na+KCjIMQ4Sm86zxOXtuq1kBSOkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRqcY3P
lDJ0/cJv1EQH/0XiZcwECTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDRjZjNkOTYtZWM4YS00ZjgyLThjYmUtZWVjY2QzNzAxYmZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gtg
MA0GCSqGSIb3DQEBCwUAA4IBAQBFdsyv1FgoJw+pkXtGo0EY900wOmhOcHGjmcfc
VDgZFvj7/IwgeqnonyzwuZBBpiZj5HEAAh/Es1j/8NPWZU7SlI0bUoHTD9BoyCVY
e8ccD4JLYx+S23OoNFXijwyqLhARvYpCiqfAQqXvkF0IKRD+NRue5lSaBsRsYLLC
buQRaQGq/R6SEj5lQhwdsCB2nvn+bijAUvOfsimioPmF1yvkhruNgVIcf2SL/Qw9
NRo4Yr0NFzOOab5Ae9MpylOZgSF29qiIKBUREUlgdsL8FtSL04HoAKSVIyjfmOSu
T4l9ARjAIJfdy6bX/YqyJv5EOWdLOXXiQwQPfgvHvrwLKirt
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:43 2026 by rpki-client