Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
File: 16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa (raw, json)
Hash identifier: u5nwjqCupPktsVsUOxjrJmI0gFjFZtxBD+z8Y9aJCzI=
Subject key identifier: D9:23:F9:2A:E4:31:04:D4:47:38:D2:74:84:A2:27:F5:78:5F:72:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 046FEBCC414518F5DB113B3F298EDDFE3E57F9BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
Signing time: Mon 26 Oct 2026 05:10:52 +0000
ROA not before: Mon 26 Oct 2026 05:10:52 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6f:eb:cc:41:45:18:f5:db:11:3b:3f:29:8e:dd:fe:3e:57:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:52 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=aa44b8b54b58e249d8e77eb579997d2cbc08e334bbc9c7083c5ad7e96b238c9c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:6b:29:e1:4e:22:a3:c4:4a:7a:e4:82:82:
aa:8b:79:17:59:01:1d:9e:b1:e3:d6:4b:fc:27:81:
54:1a:a5:07:ce:48:07:99:48:8f:a8:19:11:20:92:
4e:ce:bd:7f:0c:cf:1d:fc:cf:68:53:e3:85:7c:47:
29:2a:78:94:f1:d2:58:64:c3:de:68:a6:28:29:84:
48:2d:6b:eb:c1:c5:15:a7:f0:94:2c:a1:05:39:52:
b6:ad:41:b8:bf:e2:39:fb:ab:cb:8a:b5:29:5c:38:
fb:c4:d2:64:a8:d6:c3:ba:af:30:be:1e:7f:71:e0:
73:9a:66:9c:f2:50:ba:96:b7:a9:97:41:e5:79:a1:
84:34:1b:bf:89:4b:10:83:b7:59:67:e9:5e:38:16:
fa:ea:c5:37:8e:82:cf:1e:9e:0c:92:da:2d:62:e7:
f0:3c:15:32:4e:54:f5:b4:1b:27:5a:10:19:dd:2d:
c3:30:47:44:fc:f0:26:e9:41:7d:2d:62:31:91:18:
f0:08:7a:d2:24:9f:21:e6:88:e6:28:49:42:44:02:
09:cf:e8:30:61:78:e8:0b:af:f7:c5:39:ca:26:70:
a3:27:32:80:5a:49:f3:1d:d4:f8:b1:09:75:bb:0c:
f3:87:5f:22:eb:5e:a4:2d:31:eb:a1:90:16:68:c7:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:23:F9:2A:E4:31:04:D4:47:38:D2:74:84:A2:27:F5:78:5F:72:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:b000::/40
Signature Algorithm: sha256WithRSAEncryption
95:1c:35:b0:7f:fb:58:12:69:ad:53:69:ac:c5:69:82:19:b0:
d0:02:25:a0:3f:72:88:4d:1d:45:43:df:6d:9f:6f:d3:5b:19:
ac:51:70:d3:93:53:8c:0e:3b:ea:49:fe:32:d3:1e:95:c3:f6:
70:0e:7a:b9:36:16:df:4b:f5:6b:5d:ba:5d:bc:8c:99:1f:5c:
58:98:4f:85:fe:05:f5:b9:16:90:53:a3:70:6c:9f:4b:a7:d8:
dc:11:14:d8:e6:f5:cd:86:74:ba:b8:f0:e3:e6:39:8f:c1:cc:
8c:f4:9c:0b:b7:4c:9e:4a:52:b5:9b:04:17:4a:55:7c:9d:42:
6d:d4:71:c1:5c:f7:b8:37:df:3b:fc:6b:04:b0:05:e2:57:21:
50:de:18:5a:a0:8e:b6:d7:be:e2:18:59:af:59:79:07:f7:f4:
89:8d:00:30:31:fd:04:e0:40:de:02:6a:c7:24:91:c7:c7:12:
23:80:26:73:c0:52:82:a9:3b:72:5c:20:e1:ad:37:50:0e:fa:
71:20:b2:24:00:66:a9:7b:03:25:f0:20:df:d1:17:bd:ab:47:
be:11:97:9a:70:e6:de:e5:e4:a3:bf:c4:33:18:91:df:aa:d4:
69:4a:a8:93:b8:a9:0b:6f:a7:fd:e6:9c:39:fd:c4:40:08:48:
b1:13:84:35
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBG/rzEFFGPXbETs/KY7d/j5X+bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTEwNTJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGFhNDRiOGI1NGI1OGUyNDlkOGU3N2ViNTc5OTk3ZDJjYmMwOGUzMzRiYmM5
YzcwODNjNWFkN2U5NmIyMzhjOWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJm3aynhTiKjxEp65IKCqot5F1kBHZ6x49ZL/CeBVBqlB85IB5lIj6gZESCS
Ts69fwzPHfzPaFPjhXxHKSp4lPHSWGTD3mimKCmESC1r68HFFafwlCyhBTlStq1B
uL/iOfury4q1KVw4+8TSZKjWw7qvML4ef3Hgc5pmnPJQupa3qZdB5XmhhDQbv4lL
EIO3WWfpXjgW+urFN46Czx6eDJLaLWLn8DwVMk5U9bQbJ1oQGd0twzBHRPzwJulB
fS1iMZEY8Ah60iSfIeaI5ihJQkQCCc/oMGF46Auv98U5yiZwoycygFpJ8x3U+LEJ
dbsM84dfIutepC0x66GQFmjHwF8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTZI/kq
5DEE1Ec40nSEoif1eF9yOzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTZlODNkODktOWMyOS00ZDcwLTlkMWQtODVlNGRjN2UzZDZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hiw
MA0GCSqGSIb3DQEBCwUAA4IBAQCVHDWwf/tYEmmtU2msxWmCGbDQAiWgP3KITR1F
Q99tn2/TWxmsUXDTk1OMDjvqSf4y0x6Vw/ZwDnq5NhbfS/VrXbpdvIyZH1xYmE+F
/gX1uRaQU6NwbJ9Lp9jcERTY5vXNhnS6uPDj5jmPwcyM9JwLt0yeSlK1mwQXSlV8
nUJt1HHBXPe4N987/GsEsAXiVyFQ3hhaoI62177iGFmvWXkH9/SJjQAwMf0E4EDe
AmrHJJHHxxIjgCZzwFKCqTtyXCDhrTdQDvpxILIkAGapewMl8CDf0Re9q0e+EZea
cObe5eSjv8QzGJHfqtRpSqiTuKkLb6f95pw5/cRACEixE4Q1
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:39 2026 by rpki-client