Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
File: 113e55fd-9531-4700-bcdc-5abe9a806b41.roa (raw, json)
Hash identifier: pQlku+9Dtx9DkkTRZVIvBGhaLTOVlz+1/DZVv2j1Jco=
Subject key identifier: 7A:97:21:7A:3B:5B:5F:9F:1B:E8:33:03:3E:F9:64:B0:46:D6:C2:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42DE15FA0513B7F9DF67596899ADE892D195009B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
Signing time: Fri 23 Oct 2026 01:50:06 +0000
ROA not before: Fri 23 Oct 2026 01:50:06 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:de:15:fa:05:13:b7:f9:df:67:59:68:99:ad:e8:92:d1:95:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 23 01:50:06 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=4e77a91c6d728ca0e078fd09166561c741fbe435488a7598c561fc3348bf3f1d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:6c:da:01:66:9b:38:48:dc:23:b3:cd:3a:
e6:b3:06:88:af:c8:08:4d:df:fe:19:2c:25:2c:3e:
53:c4:68:e4:df:4f:b5:3a:fd:e4:70:5f:3d:36:ef:
03:21:b4:d6:9d:72:c8:b5:3e:48:07:1d:9f:cc:0c:
b0:c8:13:b9:5e:cc:bc:73:ef:e5:94:6c:91:11:1f:
c7:dc:34:31:e0:a8:ad:4d:c4:ad:42:95:d4:ef:df:
c4:34:8c:78:63:30:95:30:d5:ae:92:5d:77:26:fe:
e1:85:5d:ab:a8:13:fc:20:6e:22:ce:24:a2:89:9b:
f6:f7:15:a3:b3:89:68:a2:8d:59:47:70:da:10:10:
8a:36:30:77:72:50:e1:2c:bc:9c:da:c6:51:66:06:
6c:58:6f:33:58:ea:fd:70:47:58:39:69:f6:a9:68:
31:91:6a:54:57:d9:c1:0b:e0:f7:05:60:4d:0f:5c:
16:1e:25:1d:34:b7:bf:99:e2:8b:71:00:01:48:fb:
e7:74:72:e3:0d:81:aa:b4:3d:fa:32:d7:40:5a:a2:
b7:aa:aa:a7:b3:9b:78:aa:22:1e:4c:6a:c3:a4:bb:
96:e8:e3:7d:88:5b:52:90:b4:2c:98:3a:f6:21:88:
cd:17:ee:50:04:20:eb:4f:ad:cb:f1:9d:4a:14:01:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:21:7A:3B:5B:5F:9F:1B:E8:33:03:3E:F9:64:B0:46:D6:C2:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/40
Signature Algorithm: sha256WithRSAEncryption
3f:a9:90:30:0b:f4:e0:b1:4c:c7:7d:39:e9:7f:4f:46:67:09:
8a:fb:d3:6f:9f:01:df:d8:6b:8a:32:95:ec:d5:88:29:6f:2e:
ae:8e:e4:6d:13:81:2c:e0:8d:1b:ce:f0:57:3b:2d:4a:28:b4:
5e:6b:6f:ba:9b:d7:04:0c:a8:97:51:b0:e3:a7:b6:e0:79:4e:
1a:89:77:8a:e5:d7:37:05:e0:5a:b8:88:f7:6c:66:54:98:49:
70:66:43:e6:33:59:2c:2a:77:60:8c:4d:0c:d6:3f:8c:f6:3a:
46:1f:60:c4:8d:12:fe:15:fe:5a:6f:b3:ad:39:42:0d:a7:63:
84:1b:43:ce:e5:83:65:9c:cb:9d:6d:48:9b:4a:11:92:1e:49:
fc:51:fe:b6:c5:95:54:eb:8f:24:7d:d8:4e:71:b6:d4:36:80:
b0:5e:a6:8e:e6:1e:27:83:e4:d2:3c:c7:81:69:c0:0f:b4:01:
8a:b6:85:e8:cd:c3:9c:b5:65:d2:e3:61:54:8b:f1:73:9c:af:
85:98:30:4d:fc:da:3a:2a:68:8f:29:64:08:84:03:39:51:92:
83:ec:96:7c:8b:55:6a:4e:b0:78:e4:1d:14:dc:46:b8:9f:8b:
17:0a:fa:b4:11:61:b2:31:69:3f:57:09:8a:44:09:c8:f6:c4:
0f:3f:7b:7e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQt4V+gUTt/nfZ1loma3oktGVAJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjMwMTUwMDZaFw0yNzAxMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDRlNzdhOTFjNmQ3MjhjYTBlMDc4ZmQwOTE2NjU2MWM3NDFmYmU0MzU0ODhh
NzU5OGM1NjFmYzMzNDhiZjNmMWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKGxbNoBZps4SNwjs8065rMGiK/ICE3f/hksJSw+U8Ro5N9PtTr95HBfPTbv
AyG01p1yyLU+SAcdn8wMsMgTuV7MvHPv5ZRskREfx9w0MeCorU3ErUKV1O/fxDSM
eGMwlTDVrpJddyb+4YVdq6gT/CBuIs4koomb9vcVo7OJaKKNWUdw2hAQijYwd3JQ
4Sy8nNrGUWYGbFhvM1jq/XBHWDlp9qloMZFqVFfZwQvg9wVgTQ9cFh4lHTS3v5ni
i3EAAUj753Ry4w2BqrQ9+jLXQFqit6qqp7ObeKoiHkxqw6S7lujjfYhbUpC0LJg6
9iGIzRfuUAQg60+ty/GdShQB0dkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR6lyF6
O1tfnxvoMwM++WSwRtbCKTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTEzZTU1ZmQtOTUzMS00NzAwLWJjZGMtNWFiZTlhODA2YjQxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HYI
MA0GCSqGSIb3DQEBCwUAA4IBAQA/qZAwC/TgsUzHfTnpf09GZwmK+9NvnwHf2GuK
MpXs1Ygpby6ujuRtE4Es4I0bzvBXOy1KKLRea2+6m9cEDKiXUbDjp7bgeU4aiXeK
5dc3BeBauIj3bGZUmElwZkPmM1ksKndgjE0M1j+M9jpGH2DEjRL+Ff5ab7OtOUIN
p2OEG0PO5YNlnMudbUibShGSHkn8Uf62xZVU648kfdhOcbbUNoCwXqaO5h4ng+TS
PMeBacAPtAGKtoXozcOctWXS42FUi/FznK+FmDBN/No6KmiPKWQIhAM5UZKD7JZ8
i1VqTrB45B0U3Ea4n4sXCvq0EWGyMWk/VwmKRAnI9sQPP3t+
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:12 2026 by rpki-client