Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/debab16d-42fd-4d5c-a9a7-7cd10c86a399.roa
File: debab16d-42fd-4d5c-a9a7-7cd10c86a399.roa (raw, json)
Hash identifier: hhQgRq8mAuPKTtEPTWpECdn6ECa0cZAwwkJhr1OaHqk=
Subject key identifier: 77:C6:F6:8B:CE:41:B8:96:02:36:1D:53:40:0F:F2:C5:24:A2:CD:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B86488885139509D3C6D99084C761B70AE5608F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/debab16d-42fd-4d5c-a9a7-7cd10c86a399.roa
Signing time: Wed 09 Sep 2026 16:14:08 +0000
ROA not before: Wed 09 Sep 2026 16:14:08 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:86:48:88:85:13:95:09:d3:c6:d9:90:84:c7:61:b7:0a:e5:60:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:14:08 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=7b56d3e007ad7cfdc7037dc7fa87abb684af75ff15e1e2edcc15aed02b000b8c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:ca:db:84:7d:86:81:6e:13:b0:fd:aa:6e:
b3:d8:22:c2:0c:50:30:7d:24:08:5c:61:f2:18:24:
1d:21:d4:90:8e:80:5e:81:26:16:7b:54:ac:0a:46:
d5:06:87:d0:a6:25:eb:5f:22:f1:ae:71:a9:44:6e:
11:d8:5f:68:f8:bf:ba:61:3e:ad:3e:da:13:bf:bd:
9b:85:d8:10:d9:24:93:5c:71:79:7a:12:69:54:4b:
58:54:57:bc:9b:21:d8:00:20:ae:80:49:0d:66:00:
29:e5:e5:28:f7:51:bb:c5:74:b1:1c:9c:09:14:6f:
34:e7:34:95:18:78:47:8e:64:05:7b:c3:50:8d:97:
02:d4:64:85:4b:90:db:26:49:7a:13:c3:4a:bb:3e:
5f:e6:40:07:7d:1e:b3:b9:9b:49:50:c0:c5:f3:43:
d3:43:03:2b:c8:32:62:18:66:6b:92:ce:8f:cd:4d:
6e:ea:0d:38:19:d8:f9:90:4f:28:6a:0c:c8:e5:e5:
0a:2e:c4:02:bb:f8:dc:9b:c2:b2:43:53:db:ca:e5:
4c:5b:fd:f5:0e:17:45:87:dc:be:9a:55:16:b5:72:
80:37:ac:8d:ed:50:0f:2d:87:9e:1b:2d:27:45:fc:
4d:c3:9a:e1:52:2a:ee:dd:22:50:a3:4a:0b:a6:1c:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:F6:8B:CE:41:B8:96:02:36:1D:53:40:0F:F2:C5:24:A2:CD:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/debab16d-42fd-4d5c-a9a7-7cd10c86a399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4800::/40
Signature Algorithm: sha256WithRSAEncryption
49:4a:33:d8:e9:db:f8:48:7a:e2:34:74:e5:76:36:49:b6:ee:
c2:02:93:13:ac:b0:0f:32:91:ab:3b:8c:df:33:9f:cb:f5:a4:
3a:72:e5:77:7d:f6:b5:73:8f:87:01:e8:32:31:ba:68:ca:b4:
d8:87:f6:76:97:02:d9:54:df:27:86:90:e0:91:71:9c:3d:15:
b5:6c:c8:03:26:40:a4:b4:2a:64:28:18:df:f8:b2:2e:9d:18:
5b:85:04:15:c9:97:c8:05:07:d2:8c:30:a2:94:39:31:e8:68:
0f:74:33:9a:03:ca:90:bd:f9:b9:11:6c:b3:d1:1d:f2:af:dd:
fe:5a:60:88:a8:7c:9b:24:a0:34:6c:32:1e:c5:ed:93:24:83:
c3:b7:96:71:7b:76:b0:8a:25:44:93:44:5c:1a:3f:2f:01:4f:
f2:58:c4:e6:99:6f:43:a8:16:7d:21:19:dc:46:04:57:db:1f:
72:15:64:41:ea:59:f8:7a:41:2f:09:bd:8d:e0:a1:cf:9d:5f:
c2:29:ab:bc:38:bf:91:eb:28:e1:09:7a:3d:c5:9a:a2:6b:57:
ce:58:9a:10:a5:9c:ba:a5:8c:df:fe:d2:f5:e1:16:b0:1d:7f:
4c:0c:8d:51:5b:aa:21:c9:34:1c:ac:89:6f:c6:0a:33:5a:6e:
44:d2:65:ca
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUC4ZIiIUTlQnTxtmQhMdhtwrlYI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE0MDhaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDdiNTZkM2UwMDdhZDdjZmRjNzAzN2RjN2ZhODdhYmI2ODRhZjc1ZmYxNWUx
ZTJlZGNjMTVhZWQwMmIwMDBiOGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJrSytuEfYaBbhOw/apus9giwgxQMH0kCFxh8hgkHSHUkI6AXoEmFntUrApG
1QaH0KYl618i8a5xqURuEdhfaPi/umE+rT7aE7+9m4XYENkkk1xxeXoSaVRLWFRX
vJsh2AAgroBJDWYAKeXlKPdRu8V0sRycCRRvNOc0lRh4R45kBXvDUI2XAtRkhUuQ
2yZJehPDSrs+X+ZAB30es7mbSVDAxfND00MDK8gyYhhma5LOj81NbuoNOBnY+ZBP
KGoMyOXlCi7EArv43JvCskNT28rlTFv99Q4XRYfcvppVFrVygDesje1QDy2Hnhst
J0X8TcOa4VIq7t0iUKNKC6YcN58CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR3xvaL
zkG4lgI2HVNAD/LFJKLNTDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGViYWIxNmQtNDJmZC00ZDVjLWE5YTctN2NkMTBjODZhMzk5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HtI
MA0GCSqGSIb3DQEBCwUAA4IBAQBJSjPY6dv4SHriNHTldjZJtu7CApMTrLAPMpGr
O4zfM5/L9aQ6cuV3ffa1c4+HAegyMbpoyrTYh/Z2lwLZVN8nhpDgkXGcPRW1bMgD
JkCktCpkKBjf+LIunRhbhQQVyZfIBQfSjDCilDkx6GgPdDOaA8qQvfm5EWyz0R3y
r93+WmCIqHybJKA0bDIexe2TJIPDt5Zxe3awiiVEk0RcGj8vAU/yWMTmmW9DqBZ9
IRncRgRX2x9yFWRB6ln4ekEvCb2N4KHPnV/CKau8OL+R6yjhCXo9xZqia1fOWJoQ
pZy6pYzf/tL14RawHX9MDI1RW6ohyTQcrIlvxgozWm5E0mXK
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:21 2026 by rpki-client