Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
File: 275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa (raw, json)
Hash identifier: CfZIIYpgKB7vq2CVhKtWVyAcDBjMM9i/tWUF8Mkjihc=
Subject key identifier: 3E:18:05:13:EC:50:79:23:51:D9:78:A9:FB:47:CD:B6:7B:CA:C5:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 26DD21870946A644DC68995B886308EBFD93F699
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
Signing time: Fri 09 Oct 2026 01:30:45 +0000
ROA not before: Fri 09 Oct 2026 01:30:45 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:dd:21:87:09:46:a6:44:dc:68:99:5b:88:63:08:eb:fd:93:f6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:45 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=df85a2f72c7224f3e050402532b189aaa73c70e690ee4cbd8b725f02219abbc5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:95:e3:26:6d:bf:f5:36:c8:59:fc:c7:5e:
b4:94:ce:99:2d:8d:bf:36:49:54:29:83:3d:c1:fe:
6b:2c:31:a2:87:e9:42:fd:36:1a:7c:75:50:39:4b:
aa:28:e7:e6:8e:56:99:1c:3b:28:81:13:d0:e5:19:
d9:9a:5c:a4:63:a9:16:54:cc:ac:d7:1c:45:d2:9e:
dd:06:62:82:3e:ee:58:c7:c9:13:c4:e4:ac:fc:e1:
29:51:4d:e7:2c:3f:54:4f:44:d5:93:f1:56:47:b9:
ba:3c:ae:2d:e0:bb:c2:d8:2a:9c:8e:95:c8:f2:d9:
61:7d:07:1a:a4:f0:ab:c1:d2:0a:9a:ef:a0:44:7e:
7c:22:76:4a:01:48:39:56:09:09:23:be:cb:7f:b2:
c2:63:79:f7:44:b6:2d:7f:5a:7a:20:9e:e8:28:95:
35:5f:59:b5:f5:a6:31:35:17:ee:52:41:55:02:23:
bd:e3:4f:5a:33:cc:aa:d6:33:c6:cb:30:b6:e5:7b:
50:fe:48:70:7e:e1:84:f1:1e:13:a0:89:c8:84:2b:
a2:7a:39:d7:46:87:c1:31:72:22:16:a2:89:37:20:
1f:83:a5:a9:8f:00:5d:d3:f4:61:73:b5:89:c9:51:
29:d0:3d:65:44:64:a1:ca:f0:e0:dd:d5:86:a0:9e:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:18:05:13:EC:50:79:23:51:D9:78:A9:FB:47:CD:B6:7B:CA:C5:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4040::/48
Signature Algorithm: sha256WithRSAEncryption
0e:25:2f:3d:ff:82:91:4e:50:fa:2d:93:48:17:f3:1f:a3:c4:
c0:f7:15:70:15:6a:bd:17:b4:7c:29:12:e0:6f:a2:08:9e:37:
62:e4:c4:15:96:6e:6b:94:8f:e4:21:23:7c:07:57:15:6b:d3:
74:c1:1c:5f:cc:66:72:2d:f7:00:13:d4:f8:f6:b1:74:e1:f9:
d2:7b:9e:6a:ad:1f:e7:28:33:68:31:3a:62:20:4f:7c:7b:09:
dd:0a:24:a4:42:24:3e:1b:dd:68:55:89:83:1f:08:34:75:c2:
56:58:40:bf:3b:12:97:52:61:3b:9d:88:48:53:d1:92:5e:d1:
f2:9e:44:e1:fa:61:a6:24:00:bf:0f:b3:14:d5:38:67:47:d6:
6e:b9:0e:67:e5:6b:e3:3d:d3:c0:b8:30:b1:9f:1a:59:55:f7:
85:35:80:4e:b5:65:26:eb:ba:4f:3e:30:44:93:b1:f4:1f:80:
06:67:44:3e:7f:8b:d9:27:ad:35:68:82:89:3b:81:cd:be:4f:
8f:ed:34:c4:46:85:e4:97:99:02:59:eb:5e:58:f7:30:ad:f0:
d8:db:a7:bb:86:1c:f1:9d:86:34:4e:65:e7:76:d0:e0:a4:11:
5f:08:14:7c:fc:99:7b:13:90:d4:8f:4e:56:e2:78:71:12:98:
e0:a8:09:44
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUJt0hhwlGpkTcaJlbiGMI6/2T9pkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTMwNDVaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQGRmODVhMmY3MmM3MjI0ZjNlMDUwNDAyNTMyYjE4OWFhYTczYzcwZTY5MGVl
NGNiZDhiNzI1ZjAyMjE5YWJiYzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJaXleMmbb/1NshZ/MdetJTOmS2NvzZJVCmDPcH+aywxoofpQv02Gnx1UDlL
qijn5o5WmRw7KIET0OUZ2ZpcpGOpFlTMrNccRdKe3QZigj7uWMfJE8TkrPzhKVFN
5yw/VE9E1ZPxVke5ujyuLeC7wtgqnI6VyPLZYX0HGqTwq8HSCprvoER+fCJ2SgFI
OVYJCSO+y3+ywmN590S2LX9aeiCe6CiVNV9ZtfWmMTUX7lJBVQIjveNPWjPMqtYz
xsswtuV7UP5IcH7hhPEeE6CJyIQrono510aHwTFyIhaiiTcgH4OlqY8AXdP0YXO1
iclRKdA9ZURkocrw4N3VhqCeJ88CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ+GAUT
7FB5I1HZeKn7R822e8rF3jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mjc1YjVhY2ItYWYxYi00NWMxLThkMmMtZWU4NGUxNzA2OWMxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA
QDANBgkqhkiG9w0BAQsFAAOCAQEADiUvPf+CkU5Q+i2TSBfzH6PEwPcVcBVqvRe0
fCkS4G+iCJ43YuTEFZZua5SP5CEjfAdXFWvTdMEcX8xmci33ABPU+PaxdOH50nue
aq0f5ygzaDE6YiBPfHsJ3QokpEIkPhvdaFWJgx8INHXCVlhAvzsSl1JhO52ISFPR
kl7R8p5E4fphpiQAvw+zFNU4Z0fWbrkOZ+Vr4z3TwLgwsZ8aWVX3hTWATrVlJuu6
Tz4wRJOx9B+ABmdEPn+L2SetNWiCiTuBzb5Pj+00xEaF5JeZAlnrXlj3MK3w2Nun
u4Yc8Z2GNE5l53bQ4KQRXwgUfPyZexOQ1I9OVuJ4cRKY4KgJRA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:33:34 2026 by rpki-client