Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa
File: 0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa (raw, json)
Hash identifier: bMuxsNQUB1N6JSoswjz0qs5sTdCHUrDQ5804lLp5Dfo=
Subject key identifier: 79:4A:D7:48:9B:97:43:50:51:16:DB:D6:3E:76:8C:A0:9B:80:FF:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C784B0B6F4B700FFFE6104F56F9C90D338FD2B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa
Signing time: Mon 26 Oct 2026 05:10:26 +0000
ROA not before: Mon 26 Oct 2026 05:10:26 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:78:4b:0b:6f:4b:70:0f:ff:e6:10:4f:56:f9:c9:0d:33:8f:d2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:26 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5396801af355d176622445c4ff7d82882a5be81baaa77b5c55d4eb21509eb6f4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:98:73:34:a5:49:86:7e:b0:8e:ad:d1:b4:
58:54:f4:1f:12:27:ae:05:96:70:52:27:f6:df:da:
b0:33:b0:6c:df:d2:b9:ea:d0:91:7f:bb:b1:ac:34:
47:bc:ab:3c:d7:cb:6a:bd:d7:d9:b5:2c:35:bd:b8:
f2:37:87:70:c0:55:a5:10:ad:fb:56:f5:48:b3:e8:
3b:43:0f:c0:5d:0e:cc:aa:3a:76:29:6c:70:e6:70:
cf:47:f1:7f:da:e9:29:b2:62:91:b6:07:00:fc:43:
ff:1a:4d:7e:6a:63:5b:54:06:cf:c4:22:20:d8:54:
77:fc:c3:76:87:d4:bf:1b:32:80:2f:ce:23:37:42:
60:85:a8:a0:4a:6d:d5:2b:f2:e0:f7:7a:0b:d6:63:
84:0c:e9:3e:0b:9c:e2:f1:bb:2a:16:89:68:c1:09:
49:4f:34:19:28:70:08:49:e0:e3:5d:c6:e9:4a:da:
c0:5c:4b:de:74:73:c2:73:88:4e:51:21:b0:f0:f8:
72:c1:b0:4a:3e:6c:5f:c2:fe:24:15:db:fe:94:32:
71:61:fe:8f:92:8b:73:ee:a1:db:d1:2e:74:fd:9f:
d9:fe:a6:e3:ef:3d:01:85:83:d9:bc:2b:39:07:31:
12:87:f2:30:08:39:12:c0:f9:2d:90:fc:35:09:55:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:D7:48:9B:97:43:50:51:16:DB:D6:3E:76:8C:A0:9B:80:FF:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0bf6cef8-8c60-4a0e-8932-cfda648d2772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:1000::/36
Signature Algorithm: sha256WithRSAEncryption
80:e2:61:c5:3b:df:8a:a0:6b:36:05:af:23:b2:b5:13:0c:a3:
de:ff:95:3d:66:09:a3:a3:07:ac:a4:3d:7f:ab:3c:83:6c:d1:
62:fa:71:34:f3:8f:75:9a:9f:67:bc:a5:6d:3f:98:40:71:a3:
6d:ce:a2:07:73:c8:10:5e:9c:7e:33:e7:a0:21:96:bd:2d:ec:
92:2c:35:7c:8f:ef:6c:31:18:dc:37:5f:87:14:3f:a6:9c:28:
5a:a0:2b:ce:ec:77:f7:49:04:59:05:7e:3e:c3:c5:ff:73:a7:
76:6e:8c:b6:1e:39:c8:d1:0e:b7:9d:e0:89:4e:d7:5b:76:f0:
2c:58:49:5f:a0:a7:7a:29:26:70:aa:74:75:e5:fe:6b:5c:22:
41:07:33:38:f1:65:b3:cc:ba:db:2a:95:89:57:cf:60:62:f5:
7b:6c:8d:d1:af:e2:a5:62:58:4d:c8:52:98:93:35:ba:b0:f7:
e6:ef:2e:77:5c:4b:9b:26:e2:a7:53:7b:26:6b:cf:ee:cd:45:
9e:62:36:64:5e:1c:05:31:97:f4:d2:f1:8a:41:70:8f:03:65:
9b:9c:66:1b:44:e2:df:3a:28:4c:d3:89:75:01:e3:df:6f:b9:
34:3a:17:32:71:4e:a0:58:81:41:0e:7b:59:cf:b4:b0:76:41:
16:3b:1a:1c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbHhLC29LcA//5hBPVvnJDTOP0rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTEwMjZaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDUzOTY4MDFhZjM1NWQxNzY2MjI0NDVjNGZmN2Q4Mjg4MmE1YmU4MWJhYWE3
N2I1YzU1ZDRlYjIxNTA5ZWI2ZjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPD0mHM0pUmGfrCOrdG0WFT0HxInrgWWcFIn9t/asDOwbN/SuerQkX+7saw0
R7yrPNfLar3X2bUsNb248jeHcMBVpRCt+1b1SLPoO0MPwF0OzKo6dilscOZwz0fx
f9rpKbJikbYHAPxD/xpNfmpjW1QGz8QiINhUd/zDdofUvxsygC/OIzdCYIWooEpt
1Svy4Pd6C9ZjhAzpPguc4vG7KhaJaMEJSU80GShwCEng413G6UrawFxL3nRzwnOI
TlEhsPD4csGwSj5sX8L+JBXb/pQycWH+j5KLc+6h29EudP2f2f6m4+89AYWD2bwr
OQcxEofyMAg5EsD5LZD8NQlV3GcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR5StdI
m5dDUFEW29Y+doygm4D/ZjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGJmNmNlZjgtOGM2MC00YTBlLTg5MzItY2ZkYTY0OGQyNzcyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCA4mHFO9+KoGs2Ba8jsrUTDKPe/5U9Zgmjowes
pD1/qzyDbNFi+nE08491mp9nvKVtP5hAcaNtzqIHc8gQXpx+M+egIZa9LeySLDV8
j+9sMRjcN1+HFD+mnChaoCvO7Hf3SQRZBX4+w8X/c6d2boy2HjnI0Q63neCJTtdb
dvAsWElfoKd6KSZwqnR15f5rXCJBBzM48WWzzLrbKpWJV89gYvV7bI3Rr+KlYlhN
yFKYkzW6sPfm7y53XEubJuKnU3sma8/uzUWeYjZkXhwFMZf00vGKQXCPA2WbnGYb
ROLfOihM04l1AePfb7k0OhcycU6gWIFBDntZz7SwdkEWOxoc
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:06 2026 by rpki-client