Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa
File: d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa (raw, json)
Hash identifier: XykS4Xf2s6n4x2PKEyQRTV04TXaWyjmU0FUfLfoCsHQ=
Subject key identifier: ED:01:B6:79:8A:F3:66:8D:C9:D1:8B:59:69:9B:C4:C7:AD:F6:3A:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49B8B258FC59C5F549F700BFA7099829BBBA41DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa
Signing time: Thu 10 Sep 2026 02:30:14 +0000
ROA not before: Thu 10 Sep 2026 02:30:14 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b8:b2:58:fc:59:c5:f5:49:f7:00:bf:a7:09:98:29:bb:ba:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:30:14 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=5081447b12646aee7b0a1970c1b727ce2034c1f5a64fcc60368b5edb2c1274d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:9e:37:a1:2c:17:f7:22:b4:c5:d0:9e:9a:
f2:db:ec:2b:3c:65:e9:23:b2:c6:25:e8:7d:88:af:
89:0c:5b:de:b0:95:4a:f6:46:ac:70:be:d1:d9:90:
9f:db:32:c2:2c:cb:aa:1c:d2:82:c1:08:9b:8d:96:
e7:b5:8c:e8:40:08:0c:0d:fb:8c:7e:ca:3c:ed:75:
86:70:0a:a7:88:c9:be:8b:60:f6:38:de:c6:f3:91:
3b:07:2a:23:e9:da:26:83:8f:3e:7b:6e:96:1f:c0:
20:60:44:b3:f0:6c:a1:b7:1f:cd:1f:3f:d4:b8:e2:
cc:01:06:0c:9d:bf:c1:d8:a1:7f:fe:51:bf:e0:7f:
dd:00:f6:b8:22:4c:39:77:48:ef:95:de:87:f7:12:
1d:91:5b:3f:40:ee:a7:51:86:d7:d5:13:77:aa:27:
55:07:5c:32:c0:56:16:41:0b:4a:be:39:2d:68:42:
0f:af:a6:09:a8:22:05:44:93:89:fc:2e:0f:0c:c7:
f7:9a:5d:4d:3e:f3:c9:17:e7:ca:25:18:ef:a2:63:
f6:75:20:8d:55:37:a8:a8:0d:9d:1b:15:98:00:4e:
3d:ba:39:e1:36:37:05:a2:53:e4:9b:78:a3:ff:4e:
62:9d:88:01:06:9d:62:7a:62:12:a6:ad:95:7e:f0:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:B6:79:8A:F3:66:8D:C9:D1:8B:59:69:9B:C4:C7:AD:F6:3A:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:c9:46:34:80:f2:d8:c1:b7:13:2b:ad:13:76:06:8c:d9:64:
83:00:cf:c9:1c:fa:eb:bc:09:54:29:c0:56:16:cb:5b:c9:ad:
d4:64:53:8e:c9:19:ed:c8:88:c7:f3:cd:cb:4c:ee:cc:50:8f:
82:c0:d8:ea:85:9e:54:19:85:06:82:da:e6:b2:4d:64:e1:aa:
09:8e:89:a1:b1:50:09:b5:bd:d6:25:eb:fc:9f:6e:38:66:03:
e3:1b:f5:ca:05:e0:85:d3:8a:c7:cf:cb:5a:a5:fa:df:46:d7:
b0:4c:85:81:04:67:ba:a4:aa:19:3d:d2:97:a6:14:b2:43:0a:
29:6a:4c:8f:68:f0:f2:b5:69:61:b7:c4:a7:bf:a7:53:58:0c:
ec:a8:64:1b:bf:50:11:a4:7d:78:92:4a:eb:22:b9:97:2c:b6:
ea:e0:97:84:e9:83:2a:9e:d6:28:1e:d6:89:79:91:05:6c:ff:
8b:af:0e:f6:1d:55:f4:4b:f7:ad:41:21:fd:40:7f:20:86:79:
5d:a4:7a:d3:75:11:2e:fe:9c:ba:78:26:21:58:bf:d2:f5:21:
b9:f2:dc:8c:48:f0:f0:27:ae:d5:f4:b4:87:9a:af:73:c5:98:
f1:d8:13:bd:69:e2:7e:0f:f9:f2:3f:81:e4:6d:b8:e3:b2:d9:
f4:be:f9:3e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSbiyWPxZxfVJ9wC/pwmYKbu6Qd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjMwMTRaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDUwODE0NDdiMTI2NDZhZWU3YjBhMTk3MGMxYjcyN2NlMjAzNGMxZjVhNjRm
Y2M2MDM2OGI1ZWRiMmMxMjc0ZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKvDnjehLBf3IrTF0J6a8tvsKzxl6SOyxiXofYiviQxb3rCVSvZGrHC+0dmQ
n9sywizLqhzSgsEIm42W57WM6EAIDA37jH7KPO11hnAKp4jJvotg9jjexvOROwcq
I+naJoOPPntulh/AIGBEs/BsobcfzR8/1LjizAEGDJ2/wdihf/5Rv+B/3QD2uCJM
OXdI75Xeh/cSHZFbP0Dup1GG19UTd6onVQdcMsBWFkELSr45LWhCD6+mCagiBUST
ifwuDwzH95pdTT7zyRfnyiUY76Jj9nUgjVU3qKgNnRsVmABOPbo54TY3BaJT5Jt4
o/9OYp2IAQadYnpiEqatlX7wH1kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTtAbZ5
ivNmjcnRi1lpm8THrfY60DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDZkYTUzZTQtYjdhNy00MTA1LWFiMzYtZDk3NTUyNjViMWQ0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gug
wDANBgkqhkiG9w0BAQsFAAOCAQEAW8lGNIDy2MG3EyutE3YGjNlkgwDPyRz667wJ
VCnAVhbLW8mt1GRTjskZ7ciIx/PNy0zuzFCPgsDY6oWeVBmFBoLa5rJNZOGqCY6J
obFQCbW91iXr/J9uOGYD4xv1ygXghdOKx8/LWqX630bXsEyFgQRnuqSqGT3Sl6YU
skMKKWpMj2jw8rVpYbfEp7+nU1gM7KhkG79QEaR9eJJK6yK5lyy26uCXhOmDKp7W
KB7WiXmRBWz/i68O9h1V9Ev3rUEh/UB/IIZ5XaR603URLv6cungmIVi/0vUhufLc
jEjw8Ceu1fS0h5qvc8WY8dgTvWnifg/58j+B5G2447LZ9L75Pg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:52 2026 by rpki-client