Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f901e84a-60ec-41d5-8522-562de1706ecd.roa
File: f901e84a-60ec-41d5-8522-562de1706ecd.roa (raw, json)
Hash identifier: lwxsJFoX2ajf8PbbPfyAeVaul7VqXyXAALxswjcnF2M=
Subject key identifier: 7C:D5:2E:7B:29:A1:B1:9E:EA:E0:B6:DE:6B:A8:EF:59:9F:A2:83:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C124B4BBCAFA8FE6715B3D94E0FC7B57365774D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f901e84a-60ec-41d5-8522-562de1706ecd.roa
Signing time: Wed 19 Aug 2026 00:50:08 +0000
ROA not before: Wed 19 Aug 2026 00:50:08 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:12:4b:4b:bc:af:a8:fe:67:15:b3:d9:4e:0f:c7:b5:73:65:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 00:50:08 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=916af9a490091c3d9f83695ab5a0bf568b7391e93e88820cbaabb0aede58097c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:61:35:78:52:77:d2:6e:72:07:74:d8:dd:
fd:eb:62:39:c9:5e:25:f6:f7:e4:89:2b:90:ff:b0:
d3:f2:78:0f:cc:8f:e7:8b:47:5f:d3:d3:91:0f:00:
f4:10:e3:e3:42:ba:5b:97:ff:10:d9:4a:f7:a3:99:
d3:65:40:11:0a:06:6d:dd:94:97:4c:17:1a:2f:21:
f6:49:97:ee:ff:9e:48:f2:b8:cc:ff:61:96:df:1f:
98:a7:9b:c9:28:53:e7:f3:00:85:96:39:3d:b1:7e:
92:71:2f:9e:b3:d5:d6:34:78:cb:96:6f:59:6e:28:
9a:1b:91:21:e5:a7:1b:e3:20:2a:87:ab:77:4c:6d:
f7:94:c5:08:bc:22:e5:01:03:f0:fc:09:a0:45:3d:
98:af:86:26:e6:00:e7:2a:4f:dc:a0:23:ae:2d:99:
16:6b:5b:27:19:c5:85:fc:ce:7c:30:eb:38:a6:52:
f4:44:82:be:34:e8:c6:bd:7a:f0:ea:c5:91:19:7c:
b9:72:ee:09:02:b0:d0:2c:94:22:8d:4f:0f:76:8c:
95:2b:c6:5a:22:b3:b9:2a:be:20:ae:12:85:17:16:
2f:19:61:0c:0c:af:94:fd:69:a6:e1:08:9b:6c:91:
5d:8a:b1:36:a5:05:c7:00:f8:6d:0e:70:5c:06:a8:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:2E:7B:29:A1:B1:9E:EA:E0:B6:DE:6B:A8:EF:59:9F:A2:83:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f901e84a-60ec-41d5-8522-562de1706ecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
67:d2:53:85:d1:18:f7:29:f9:26:9e:f2:62:8e:4f:f2:e2:87:
62:83:c2:3d:76:69:99:54:52:0e:c8:f2:1a:81:06:53:af:d6:
32:a5:6e:f4:7b:b6:35:7c:8b:26:b2:44:51:c4:87:1f:d6:d5:
3f:06:a6:ea:8f:e6:0e:d2:2f:bd:a0:39:f4:26:6c:2f:ba:24:
7b:1d:56:a8:dd:02:25:c3:72:a2:04:4d:7e:b5:a8:f7:18:4c:
62:ea:1d:ed:f4:b9:b9:92:29:31:b3:70:0c:e1:c6:b9:1f:b1:
76:a4:1a:09:42:50:eb:6f:17:08:80:c1:f8:f6:da:25:bf:35:
81:c6:d7:01:37:c4:7a:13:68:12:4d:72:97:ac:94:a5:98:fe:
5a:e7:57:e0:1b:dd:67:90:13:92:fe:56:62:38:d4:79:67:70:
f0:4d:f8:ae:a2:81:8d:4b:73:31:49:fe:0f:6c:27:51:28:23:
2d:42:c6:67:ed:02:a2:c5:2d:d1:bb:7e:1f:bb:5b:ab:83:1e:
c6:f6:49:f3:fb:91:70:91:c8:4a:46:2f:75:ff:5b:60:1f:ef:
08:5a:9c:4a:b1:25:15:69:8c:20:26:dc:ea:00:82:bb:35:24:
31:d9:25:9e:a7:90:27:6f:cb:e1:c1:f8:ea:6a:fe:d6:aa:5f:
5c:db:4c:60
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHBJLS7yvqP5nFbPZTg/HtXNld00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTkwMDUwMDhaFw0yNjExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxNmFmOWE0OTAwOTFjM2Q5ZjgzNjk1YWI1YTBiZjU2OGI3MzkxZTkzZTg4
ODIwY2JhYWJiMGFlZGU1ODA5N2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCkYTV4UnfSbnIHdNjd/etiOcleJfb35IkrkP+w0/J4D8yP54tHX9PTkQ8A
9BDj40K6W5f/ENlK96OZ02VAEQoGbd2Ul0wXGi8h9kmX7v+eSPK4zP9hlt8fmKeb
yShT5/MAhZY5PbF+knEvnrPV1jR4y5ZvWW4omhuRIeWnG+MgKoerd0xt95TFCLwi
5QED8PwJoEU9mK+GJuYA5ypP3KAjri2ZFmtbJxnFhfzOfDDrOKZS9ESCvjToxr16
8OrFkRl8uXLuCQKw0CyUIo1PD3aMlSvGWiKzuSq+IK4ShRcWLxlhDAyvlP1ppuEI
m2yRXYqxNqUFxwD4bQ5wXAaoJiECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR81S57
KaGxnurgtt5rqO9Zn6KDTjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjkwMWU4NGEtNjBlYy00MWQ1LTg1MjItNTYyZGUxNzA2ZWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBn0lOF0Rj3KfkmnvJijk/y4odig8I9dmmZVFIO
yPIagQZTr9YypW70e7Y1fIsmskRRxIcf1tU/Bqbqj+YO0i+9oDn0JmwvuiR7HVao
3QIlw3KiBE1+taj3GExi6h3t9Lm5kikxs3AM4ca5H7F2pBoJQlDrbxcIgMH49tol
vzWBxtcBN8R6E2gSTXKXrJSlmP5a51fgG91nkBOS/lZiONR5Z3DwTfiuooGNS3Mx
Sf4PbCdRKCMtQsZn7QKixS3Ru34fu1urgx7G9knz+5FwkchKRi91/1tgH+8IWpxK
sSUVaYwgJtzqAIK7NSQx2SWep5Anb8vhwfjqav7Wql9c20xg
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:16 2026 by rpki-client