Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f51c56-79aa-48ca-895c-790a431bbd73.roa
File: 03f51c56-79aa-48ca-895c-790a431bbd73.roa (raw, json)
Hash identifier: VI2ShsYS+saYyrOH/o5om2kuozJHliYfDoBHak7V2Uc=
Subject key identifier: 66:38:9C:1D:EC:A9:33:1A:FA:27:CB:36:8F:37:94:48:73:A7:7E:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2ED6E7522C92D26281D761AF81A8C5CF0B07617E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f51c56-79aa-48ca-895c-790a431bbd73.roa
Signing time: Sat 24 Oct 2026 02:02:59 +0000
ROA not before: Sat 24 Oct 2026 02:02:59 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d6:e7:52:2c:92:d2:62:81:d7:61:af:81:a8:c5:cf:0b:07:61:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:02:59 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=548f6351f328cc92c3c9f80dfd858f2c1f9fc0a2cce2001bd995775950109078, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:11:ba:e0:a8:6b:6d:b7:c5:ad:02:c3:29:
4e:9d:1f:b3:6b:f5:bd:da:a0:c4:f4:66:4c:8e:f0:
cf:e8:5e:32:44:b4:31:57:7c:28:d2:c0:bc:b5:93:
b4:d5:73:40:b2:f0:55:fb:d8:61:06:19:c3:42:e0:
a5:db:d6:75:31:44:cf:4a:0c:8f:af:ae:34:df:24:
1a:36:4c:16:30:9e:8e:bb:67:d8:f2:8d:f7:33:3b:
44:a1:eb:40:8b:9f:c6:d0:09:14:52:94:56:c9:b6:
71:f2:e8:9d:23:a4:38:a4:af:da:3e:9c:1b:79:48:
67:54:ca:e8:55:a6:d3:dd:3b:74:c6:43:78:a2:a2:
3c:00:b1:ad:ac:1c:5c:3e:b6:2e:44:f7:45:f4:09:
7b:66:98:9b:3b:d9:36:28:ef:2b:1f:54:5c:38:ec:
15:28:74:36:a9:a7:22:b6:fc:82:f6:e5:53:bf:f4:
56:8f:73:ae:90:e0:de:bb:51:8e:67:1b:da:1a:18:
de:bb:1e:13:cd:17:7d:e8:81:d4:d3:9a:8d:93:04:
ed:96:04:c7:83:5b:1e:8e:09:0e:73:f2:5a:69:57:
e2:ca:c1:91:f2:3a:48:6c:93:1c:86:c1:4b:46:9b:
ac:57:c8:40:a3:e4:29:9d:77:ec:92:a6:0f:82:5a:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:38:9C:1D:EC:A9:33:1A:FA:27:CB:36:8F:37:94:48:73:A7:7E:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03f51c56-79aa-48ca-895c-790a431bbd73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:800::/40
Signature Algorithm: sha256WithRSAEncryption
0f:c8:eb:fa:66:05:20:ab:86:68:34:7e:59:eb:0c:cb:ff:fb:
42:d9:9e:18:fa:60:aa:90:b5:6d:7a:5b:2d:47:33:10:fd:7b:
26:10:88:ea:ba:51:e0:78:cb:c5:ef:b8:fd:bc:5c:5c:c4:73:
71:db:09:a3:67:44:a1:e2:5a:c2:f6:0d:2b:e1:de:d2:fd:1f:
c9:8d:57:3e:f9:16:8b:8f:dc:46:7a:22:2e:4f:4e:0c:d6:be:
c5:25:4c:9d:03:58:67:fb:59:b0:01:0a:6f:ef:37:18:a1:15:
4a:8b:32:57:49:db:a8:b9:a2:98:38:8c:bd:c0:96:49:aa:0a:
60:38:9c:41:ab:05:bf:c5:72:74:d9:f4:3b:4e:dc:80:1e:01:
d7:8e:35:6f:d5:1b:b3:be:ac:90:37:d7:57:2d:7f:4d:be:3c:
46:d5:a6:86:1e:99:2e:90:bb:f6:57:6e:7c:81:fb:12:0c:51:
77:2a:49:c3:80:8f:db:6c:4d:ae:6f:bb:80:6e:83:92:4d:9a:
a6:4c:05:30:20:83:ce:0a:7f:94:d3:be:ab:54:d2:03:66:9d:
88:32:17:8e:7d:41:c7:06:e5:e1:a0:29:74:de:d6:99:fa:46:
40:12:84:59:ac:6c:b1:80:98:48:c8:58:06:c7:95:2b:fa:76:
98:63:59:cd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULtbnUiyS0mKB12GvgajFzwsHYX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjQwMjAyNTlaFw0yNzAxMjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDU0OGY2MzUxZjMyOGNjOTJjM2M5ZjgwZGZkODU4ZjJjMWY5ZmMwYTJjY2Uy
MDAxYmQ5OTU3NzU5NTAxMDkwNzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJXAEbrgqGttt8WtAsMpTp0fs2v1vdqgxPRmTI7wz+heMkS0MVd8KNLAvLWT
tNVzQLLwVfvYYQYZw0LgpdvWdTFEz0oMj6+uNN8kGjZMFjCejrtn2PKN9zM7RKHr
QIufxtAJFFKUVsm2cfLonSOkOKSv2j6cG3lIZ1TK6FWm0907dMZDeKKiPACxrawc
XD62LkT3RfQJe2aYmzvZNijvKx9UXDjsFSh0NqmnIrb8gvblU7/0Vo9zrpDg3rtR
jmcb2hoY3rseE80XfeiB1NOajZME7ZYEx4NbHo4JDnPyWmlX4srBkfI6SGyTHIbB
S0abrFfIQKPkKZ137JKmD4JaXrsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRmOJwd
7KkzGvonyzaPN5RIc6d+GjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDNmNTFjNTYtNzlhYS00OGNhLTg5NWMtNzkwYTQzMWJiZDczLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HUI
MA0GCSqGSIb3DQEBCwUAA4IBAQAPyOv6ZgUgq4ZoNH5Z6wzL//tC2Z4Y+mCqkLVt
elstRzMQ/XsmEIjqulHgeMvF77j9vFxcxHNx2wmjZ0Sh4lrC9g0r4d7S/R/JjVc+
+RaLj9xGeiIuT04M1r7FJUydA1hn+1mwAQpv7zcYoRVKizJXSduouaKYOIy9wJZJ
qgpgOJxBqwW/xXJ02fQ7TtyAHgHXjjVv1RuzvqyQN9dXLX9NvjxG1aaGHpkukLv2
V258gfsSDFF3KknDgI/bbE2ub7uAboOSTZqmTAUwIIPOCn+U076rVNIDZp2IMheO
fUHHBuXhoCl03taZ+kZAEoRZrGyxgJhIyFgGx5Ur+naYY1nN
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:12 2026 by rpki-client