Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
File: dec4a7df-5727-45ab-92fb-7078e26fd54d.roa (raw, json)
Hash identifier: osvWySWWnTX93bJ3JGhz8o9GgGPq9v0YNxn1MwD+sAg=
Subject key identifier: 5D:94:59:9D:41:4D:32:1E:31:54:5B:E6:0F:05:5F:E5:92:A2:F0:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 147AA7EDCB95D2CD45EF59E11DDEBFA2F14EBE1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
Signing time: Thu 30 Jul 2026 01:40:48 +0000
ROA not before: Thu 30 Jul 2026 01:40:48 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7a:a7:ed:cb:95:d2:cd:45:ef:59:e1:1d:de:bf:a2:f1:4e:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 01:40:48 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=fd87e559329f62e014cffc4fc95eb8dc88367a11ac2352bbefcfe79d796de582, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:5a:96:36:f7:34:3b:7d:1b:b7:10:5d:58:
a8:37:b9:51:db:12:4c:85:17:40:77:ba:bc:b7:1d:
d0:c5:d0:56:f8:38:f3:d6:85:65:79:e0:9f:73:d2:
fa:dc:a7:6a:a9:c1:35:41:04:c7:1d:d9:53:cb:3a:
45:a2:b6:e1:bf:6c:1f:5b:0e:03:0f:43:7c:9b:f0:
eb:06:9e:23:1a:84:f7:03:11:ee:de:b0:aa:57:9f:
a6:f5:0e:be:1a:a4:4d:2f:30:9a:a4:13:03:63:94:
1f:8f:c0:63:17:59:6e:7b:34:3f:f8:aa:6a:e9:d9:
d9:7f:1d:eb:2a:8d:18:35:69:8b:bd:2a:61:1c:07:
7d:be:ca:35:25:a9:67:8d:69:b8:97:a1:09:ad:21:
b5:6a:53:8c:6d:66:8b:b8:aa:06:45:89:14:84:a9:
d6:53:e6:3d:8a:3f:ec:29:8a:a1:9f:21:ba:95:24:
f3:95:a2:63:df:30:d3:26:a9:8b:00:6b:69:e5:b7:
4c:f6:58:66:f1:e7:a9:45:b8:0d:08:da:15:12:c2:
c1:c5:b9:bd:41:14:22:e4:66:6e:d5:52:67:56:25:
14:73:50:00:53:d9:7b:c0:47:e7:02:f6:5d:5c:19:
2a:93:0d:9f:7e:b3:aa:6c:de:05:76:43:bf:09:2f:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:59:9D:41:4D:32:1E:31:54:5B:E6:0F:05:5F:E5:92:A2:F0:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dec4a7df-5727-45ab-92fb-7078e26fd54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076::/32
Signature Algorithm: sha256WithRSAEncryption
81:77:2f:0b:10:7e:b9:fd:95:34:bc:41:c7:84:07:ca:03:be:
ff:00:09:6a:6f:3f:f2:c8:9d:c6:89:7b:e0:3e:31:c0:bd:05:
91:86:0b:7e:d6:7b:7a:0b:78:d9:30:f6:91:78:ce:41:98:90:
c9:be:d8:4e:59:28:f4:10:80:50:35:a5:8c:01:87:71:f2:58:
70:a6:4a:cf:68:b2:f0:59:c3:c9:39:07:54:2b:a5:a6:1e:93:
1d:e0:4a:e7:4b:c0:ac:de:26:11:2f:e9:5a:f6:53:1d:ef:cf:
f3:25:12:01:d6:9b:74:f3:9a:d3:5a:8e:cc:5c:c2:9c:dc:f0:
87:c9:cd:c7:e6:0c:b8:11:23:87:fc:60:ce:73:e1:ec:b9:3c:
9c:97:26:c4:26:a0:a2:05:fd:2b:e8:0e:d8:d2:df:87:63:a6:
60:59:f9:50:80:2b:6e:9e:a1:2b:79:64:bf:a6:16:4e:70:2b:
5d:03:70:84:0a:0c:92:07:56:74:8a:95:94:80:06:1d:dd:b9:
6b:79:aa:51:d2:e0:86:c8:a8:46:d5:59:b6:e7:05:88:18:77:
92:50:6b:02:e4:22:25:58:47:73:f7:52:0c:51:58:48:fc:e8:
5d:1c:59:ad:1b:7c:6e:05:7d:51:ca:ef:aa:0d:3a:f5:42:62:
10:31:09:fb
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUFHqn7cuV0s1F71nhHd6/ovFOvh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MzAwMTQwNDhaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGZkODdlNTU5MzI5ZjYyZTAxNGNmZmM0ZmM5NWViOGRjODgzNjdhMTFhYzIz
NTJiYmVmY2ZlNzlkNzk2ZGU1ODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALX4WpY29zQ7fRu3EF1YqDe5UdsSTIUXQHe6vLcd0MXQVvg489aFZXngn3PS
+tynaqnBNUEExx3ZU8s6RaK24b9sH1sOAw9DfJvw6waeIxqE9wMR7t6wqlefpvUO
vhqkTS8wmqQTA2OUH4/AYxdZbns0P/iqaunZ2X8d6yqNGDVpi70qYRwHfb7KNSWp
Z41puJehCa0htWpTjG1mi7iqBkWJFISp1lPmPYo/7CmKoZ8hupUk85WiY98w0yap
iwBraeW3TPZYZvHnqUW4DQjaFRLCwcW5vUEUIuRmbtVSZ1YlFHNQAFPZe8BH5wL2
XVwZKpMNn36zqmzeBXZDvwkv79UCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRdlFmd
QU0yHjFUW+YPBV/lkqLwrzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVjNGE3ZGYtNTcyNy00NWFiLTkyZmItNzA3OGUyNmZkNTRkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0HYw
DQYJKoZIhvcNAQELBQADggEBAIF3LwsQfrn9lTS8QceEB8oDvv8ACWpvP/LIncaJ
e+A+McC9BZGGC37We3oLeNkw9pF4zkGYkMm+2E5ZKPQQgFA1pYwBh3HyWHCmSs9o
svBZw8k5B1QrpaYekx3gSudLwKzeJhEv6Vr2Ux3vz/MlEgHWm3TzmtNajsxcwpzc
8IfJzcfmDLgRI4f8YM5z4ey5PJyXJsQmoKIF/SvoDtjS34djpmBZ+VCAK26eoSt5
ZL+mFk5wK10DcIQKDJIHVnSKlZSABh3duWt5qlHS4IbIqEbVWbbnBYgYd5JQawLk
IiVYR3P3UgxRWEj86F0cWa0bfG4FfVHK76oNOvVCYhAxCfs=
-----END CERTIFICATE-----
Generated at Fri Jul 31 12:15:28 2026 by rpki-client