Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
File: 1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json)
Hash identifier: mp/GBIxvIwH9tnAnb+O3mRhiz9oC6XaFJnQhcR/GRGw=
Subject key identifier: 53:86:7A:8D:85:0C:55:26:A8:0A:CE:E1:D6:B0:81:E8:E0:89:51:C1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D81B241A8E2192442BFC3714DE75E5D722E1AD8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
Signing time: Mon 26 Oct 2026 05:30:29 +0000
ROA not before: Mon 26 Oct 2026 05:30:29 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:81:b2:41:a8:e2:19:24:42:bf:c3:71:4d:e7:5e:5d:72:2e:1a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:29 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=81c97afc3c95ffd4a83cf46b42096d1e8431d4d5f7c484713b92f06e438c339a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:35:fc:3d:00:87:a7:03:a9:35:8a:e0:83:
13:04:4d:f9:16:b7:10:0a:2f:9d:22:39:70:1f:42:
09:43:b7:c2:2e:19:f0:ad:e9:fb:9f:c7:93:d9:d3:
b6:31:4f:fc:64:a3:f9:0e:f2:a9:cd:dd:c4:6d:eb:
ba:4a:52:9a:54:25:ca:60:75:f5:ca:44:94:18:a6:
29:34:3d:3e:b3:35:44:f9:59:90:2a:7c:25:bb:2a:
61:a8:d5:75:b1:64:37:30:47:68:8c:08:a5:1a:f7:
cf:b6:32:13:e4:ba:41:35:cc:5e:93:b8:67:cc:4e:
ea:07:1e:76:4b:f3:59:36:73:d5:b8:02:c6:fd:39:
df:45:0d:fa:11:80:1a:2a:f8:b7:23:c0:d3:05:b1:
72:dd:50:57:6f:81:c5:fa:21:78:c8:0f:b9:85:1c:
0e:16:0a:d8:d2:db:62:df:c8:32:dc:55:01:f7:eb:
53:f0:39:0e:b4:44:aa:67:c2:f6:a9:de:3a:53:a5:
2d:cf:9c:d6:7e:4d:0c:21:66:16:7b:69:b9:66:2f:
a1:4f:ab:38:2b:06:1d:26:cd:30:d0:4e:26:ba:5f:
40:e2:f7:f5:41:b0:37:5f:7d:b4:00:31:e9:fd:35:
6a:a3:26:42:85:59:33:71:02:49:10:3a:81:83:d7:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:7A:8D:85:0C:55:26:A8:0A:CE:E1:D6:B0:81:E8:E0:89:51:C1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8080::/48
Signature Algorithm: sha256WithRSAEncryption
2a:15:61:ef:ad:56:80:f2:23:2d:75:78:9e:cf:0b:85:56:12:
ab:8b:55:62:b1:55:07:91:28:d0:8a:da:88:86:b4:ba:71:8d:
c9:da:8f:02:4c:00:56:bb:16:b0:f4:ae:34:69:d6:05:28:a8:
30:12:73:97:5f:28:66:3c:5b:07:7a:46:3f:1d:9b:1a:d6:d8:
05:c1:1c:e0:2d:f7:f8:9c:59:b6:b4:27:25:98:92:fe:87:7d:
dd:13:f4:d0:e4:a1:7d:2a:7e:87:d1:98:c1:1c:03:73:b3:88:
e8:1b:62:76:36:be:a6:94:00:63:43:c0:17:26:0c:e3:c5:fc:
31:84:7e:aa:38:45:21:cc:3f:1d:c9:ef:88:80:8e:dd:14:73:
48:66:f6:c7:f9:80:fc:87:60:aa:72:9e:a1:bc:b6:bb:92:ba:
69:79:ab:98:3c:bb:66:a4:31:d1:f2:54:25:ab:7a:8d:98:91:
7c:c7:b0:34:fc:c5:d7:42:27:e1:9e:0b:21:30:93:1b:25:fb:
20:6e:b2:e1:50:b4:cb:37:c5:85:a0:c7:6e:53:6f:a6:5a:3a:
90:e1:2e:ca:0e:b2:50:e1:89:5e:b7:2d:ed:e8:fd:61:80:b0:
10:b3:19:e9:b8:7b:2f:b3:17:df:8e:40:1f:82:a3:e7:73:2d:
d2:34:72:89
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfYGyQajiGSRCv8NxTedeXXIuGtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwMjlaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDgxYzk3YWZjM2M5NWZmZDRhODNjZjQ2YjQyMDk2ZDFlODQzMWQ0ZDVmN2M0
ODQ3MTNiOTJmMDZlNDM4YzMzOWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI7aNfw9AIenA6k1iuCDEwRN+Ra3EAovnSI5cB9CCUO3wi4Z8K3p+5/Hk9nT
tjFP/GSj+Q7yqc3dxG3rukpSmlQlymB19cpElBimKTQ9PrM1RPlZkCp8JbsqYajV
dbFkNzBHaIwIpRr3z7YyE+S6QTXMXpO4Z8xO6gcedkvzWTZz1bgCxv0530UN+hGA
Gir4tyPA0wWxct1QV2+BxfoheMgPuYUcDhYK2NLbYt/IMtxVAffrU/A5DrREqmfC
9qneOlOlLc+c1n5NDCFmFntpuWYvoU+rOCsGHSbNMNBOJrpfQOL39UGwN199tAAx
6f01aqMmQoVZM3ECSRA6gYPXCB0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRThnqN
hQxVJqgKzuHWsIHo4IlRwTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWE4ZDllMTQtY2ZhOS00NDAwLWFmYTgtYjhjMGQ5ZWVlNGU0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA
gDANBgkqhkiG9w0BAQsFAAOCAQEAKhVh761WgPIjLXV4ns8LhVYSq4tVYrFVB5Eo
0IraiIa0unGNydqPAkwAVrsWsPSuNGnWBSioMBJzl18oZjxbB3pGPx2bGtbYBcEc
4C33+JxZtrQnJZiS/od93RP00OShfSp+h9GYwRwDc7OI6Btidja+ppQAY0PAFyYM
48X8MYR+qjhFIcw/HcnviICO3RRzSGb2x/mA/IdgqnKeoby2u5K6aXmrmDy7ZqQx
0fJUJat6jZiRfMewNPzF10In4Z4LITCTGyX7IG6y4VC0yzfFhaDHblNvplo6kOEu
yg6yUOGJXrct7ej9YYCwELMZ6bh7L7MX345AH4Kj53Mt0jRyiQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:51:48 2026 by rpki-client