Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9096a2fe-35f1-45a6-987e-41fd25643cb7.roa
File: 9096a2fe-35f1-45a6-987e-41fd25643cb7.roa (raw, json)
Hash identifier: nmxFIUmRH9dPJh49w1H2kelWzzfq976zCZttKDTRrWU=
Subject key identifier: 20:A2:3F:1B:EA:68:1F:FC:4B:F1:8E:4B:1A:10:28:97:15:CE:37:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5719E3756639088D4744660B9C29CCDFFB67AB28
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9096a2fe-35f1-45a6-987e-41fd25643cb7.roa
Signing time: Fri 08 May 2026 03:30:15 +0000
ROA not before: Fri 08 May 2026 03:30:15 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:19:e3:75:66:39:08:8d:47:44:66:0b:9c:29:cc:df:fb:67:ab:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 8 03:30:15 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=9e595e8191a4fb1c827cf162ab30d5977f3e6caedfec5ce443627aff73a663bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:0c:df:ea:9b:e2:81:b0:94:b2:98:c7:9c:
64:ce:75:21:d2:64:d6:c5:c4:b3:41:20:4e:78:d6:
9a:f9:4d:b8:f2:97:3d:98:af:4d:f2:f2:42:da:47:
6f:45:99:bb:63:08:0b:ff:8b:fe:cb:a6:03:33:89:
76:10:d1:89:a4:73:d4:98:8a:a8:4a:61:1c:45:d4:
c7:dc:27:dd:81:6b:e2:8e:d5:88:bb:39:48:be:cd:
c5:10:fc:93:0b:1b:9a:a5:97:8b:91:4a:df:ec:01:
d3:72:13:b9:51:16:68:87:91:ce:d3:59:58:00:5c:
8b:26:f7:9d:28:71:a4:f8:39:af:2c:42:c4:3a:e2:
66:1c:e7:e5:12:60:6a:49:cf:c2:97:37:66:eb:0c:
29:15:b8:87:d8:e7:59:d5:d5:73:65:83:b7:b8:a3:
be:67:dd:43:60:40:37:5e:42:64:05:c1:cc:0b:5d:
8c:40:85:ff:29:bc:30:21:01:ca:62:43:46:2c:c3:
bc:31:77:e3:5a:ee:05:fa:88:34:1c:c8:bb:33:af:
0a:08:94:cf:ca:5f:fc:39:0b:bd:e1:94:3b:53:31:
9c:69:39:53:99:01:26:88:9c:43:8a:f6:5f:e1:9d:
cf:91:16:1f:98:67:d7:95:a9:59:66:7f:a3:bb:e7:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A2:3F:1B:EA:68:1F:FC:4B:F1:8E:4B:1A:10:28:97:15:CE:37:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9096a2fe-35f1-45a6-987e-41fd25643cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a9:fc:76:87:88:5d:3b:26:5c:62:f6:90:47:66:69:c6:d4:
b4:49:35:db:e8:10:d0:af:18:5d:29:29:98:ee:86:7e:01:73:
38:af:c2:85:09:51:0a:c1:14:fe:70:de:e3:c0:38:14:f4:f4:
eb:f9:b6:d7:83:dd:3b:82:79:c3:a9:e4:cc:f2:fd:27:5d:1c:
f5:2f:eb:b6:7a:97:0d:1c:29:a0:48:a0:24:79:b0:63:7e:3c:
0e:98:f7:22:51:94:d6:cc:1b:df:50:8a:1b:c7:ce:dd:1b:93:
a7:2a:6e:a8:d1:cf:b5:0c:1a:17:28:1f:2b:2e:e4:e3:8f:3a:
35:98:d3:73:da:4c:21:e5:d3:b3:aa:ba:13:34:c2:0b:91:c8:
c4:6c:91:97:04:0c:58:f1:52:b6:15:24:1b:f0:f3:2d:0a:e7:
26:21:85:4b:c2:f3:b0:9d:f1:4c:64:f7:5a:ae:74:c2:6e:d6:
0d:53:c6:66:3d:e2:8a:3f:17:25:e9:ec:6e:19:54:95:f7:ff:
c3:e1:ba:cd:86:9e:3e:60:a3:9d:1d:1b:69:a4:6a:71:87:ec:
6d:2f:74:2f:b0:4e:de:1a:8b:7d:b4:8c:01:ce:40:4b:86:24:
01:bf:f3:8b:48:30:8d:6f:ce:08:91:41:23:ea:39:7b:5c:3a:
07:41:5c:a3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUVxnjdWY5CI1HRGYLnCnM3/tnqygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA1MDgwMzMwMTVaFw0yNjA4MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDllNTk1ZTgxOTFhNGZiMWM4MjdjZjE2MmFiMzBkNTk3N2YzZTZjYWVkZmVj
NWNlNDQzNjI3YWZmNzNhNjYzYmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKEGDN/qm+KBsJSymMecZM51IdJk1sXEs0EgTnjWmvlNuPKXPZivTfLyQtpH
b0WZu2MIC/+L/sumAzOJdhDRiaRz1JiKqEphHEXUx9wn3YFr4o7ViLs5SL7NxRD8
kwsbmqWXi5FK3+wB03ITuVEWaIeRztNZWABciyb3nShxpPg5ryxCxDriZhzn5RJg
aknPwpc3ZusMKRW4h9jnWdXVc2WDt7ijvmfdQ2BAN15CZAXBzAtdjECF/ym8MCEB
ymJDRizDvDF341ruBfqINBzIuzOvCgiUz8pf/DkLveGUO1MxnGk5U5kBJoicQ4r2
X+Gdz5EWH5hn15WpWWZ/o7vnGckCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQgoj8b
6mgf/EvxjksaECiXFc435TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTA5NmEyZmUtMzVmMS00NWE2LTk4N2UtNDFmZDI1NjQzY2I3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAI
wDANBgkqhkiG9w0BAQsFAAOCAQEAWqn8doeIXTsmXGL2kEdmacbUtEk12+gQ0K8Y
XSkpmO6GfgFzOK/ChQlRCsEU/nDe48A4FPT06/m214PdO4J5w6nkzPL9J10c9S/r
tnqXDRwpoEigJHmwY348Dpj3IlGU1swb31CKG8fO3RuTpypuqNHPtQwaFygfKy7k
4486NZjTc9pMIeXTs6q6EzTCC5HIxGyRlwQMWPFSthUkG/DzLQrnJiGFS8LzsJ3x
TGT3Wq50wm7WDVPGZj3iij8XJensbhlUlff/w+G6zYaePmCjnR0baaRqcYfsbS90
L7BO3hqLfbSMAc5AS4YkAb/zi0gwjW/OCJFBI+o5e1w6B0Fcow==
-----END CERTIFICATE-----
Generated at Tue May 12 23:40:34 2026 by rpki-client