Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
File: 290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa (raw, json)
Hash identifier: yPFvXyWVJtCIyO2z6gNK6h77S3uO6emItxCnPB+9+z8=
Subject key identifier: 85:99:ED:D7:99:E0:A0:84:8B:37:A4:CA:EE:59:90:49:CE:64:1D:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59D406C60B1BA90062616DADE02078F8EA2ECCBE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
Signing time: Mon 26 Oct 2026 05:02:35 +0000
ROA not before: Mon 26 Oct 2026 05:02:35 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d4:06:c6:0b:1b:a9:00:62:61:6d:ad:e0:20:78:f8:ea:2e:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:02:35 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=d04dc51fe1010efaf7e2a6a015e6a1601a5e03b61b2fbef9dc1a8f2ef6eb1de2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:13:6e:55:74:28:f9:a9:dc:9b:3f:9b:a1:
97:e8:7f:4c:59:d4:f5:d0:44:11:eb:4f:ed:3f:be:
cc:95:4a:0a:f4:5d:27:ff:1b:64:5c:db:0e:41:94:
b3:38:4c:5e:10:a9:62:1a:d2:7e:17:06:25:42:ed:
0b:0b:53:9c:0f:90:2c:e6:2b:0c:20:55:51:2c:7e:
12:a7:12:9d:4c:a4:c4:83:a4:34:1c:7d:75:65:45:
63:14:41:41:37:db:f0:4e:8f:e0:39:fc:8b:08:bc:
9d:ea:8e:17:23:56:64:22:90:e6:50:88:55:52:31:
95:47:53:d8:86:22:4d:25:9b:cd:e0:45:a4:98:4e:
4b:70:9a:e1:91:cb:ea:a8:01:62:67:17:25:9a:3e:
7a:55:70:6e:2e:d7:62:02:d3:04:c9:1c:c8:bd:18:
6f:68:4d:be:fd:f1:66:fe:a9:09:a5:a7:42:1f:1f:
67:2e:f1:1e:6f:5b:d7:c4:90:72:2d:dd:61:fa:4c:
11:74:e1:32:58:9e:9c:58:7b:f8:77:df:c9:5f:73:
06:3f:2f:65:ab:38:af:06:74:c9:eb:4f:d2:3e:1a:
d9:04:3a:24:b6:e0:e4:37:e9:64:17:e8:7f:8a:8a:
e5:6a:bd:06:78:8b:e9:ee:13:8c:38:6c:fa:52:cd:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:99:ED:D7:99:E0:A0:84:8B:37:A4:CA:EE:59:90:49:CE:64:1D:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/36
Signature Algorithm: sha256WithRSAEncryption
1d:b6:7c:ee:87:84:46:92:01:54:3e:be:6f:ff:00:75:1d:76:
ea:34:63:4e:84:95:0e:97:31:2e:a7:69:86:0f:e5:26:2e:5b:
4f:03:8e:96:f4:81:fd:b9:15:ba:1d:e8:1b:60:b3:b0:b9:b1:
3a:15:c6:ab:8b:14:0c:59:78:4b:33:02:df:cf:0b:b2:aa:25:
42:84:3e:fb:80:b7:88:a2:eb:45:46:d4:db:04:4f:5d:ce:0c:
27:fc:0f:d1:80:23:f5:20:52:df:3f:29:ad:f1:71:eb:bd:e8:
ab:b3:7b:72:0b:4b:65:4d:71:fb:10:70:33:51:ff:27:04:d2:
00:e7:3e:69:5d:a8:0e:d5:b7:d7:9e:fc:05:88:11:ce:68:c9:
ac:6d:55:ea:a6:ec:9b:ed:3a:cb:5d:fb:36:8b:2e:4d:05:19:
91:eb:39:2b:b1:63:32:9e:f8:74:78:30:f4:fd:0f:d8:7e:ab:
6b:b3:8e:0c:76:44:15:a1:88:f5:38:d6:ed:33:79:88:40:19:
58:9f:82:21:e9:7b:4b:04:28:15:ef:3d:88:ff:f6:e4:1c:0d:
97:ae:78:de:22:d9:ae:53:19:d8:12:44:52:f8:3b:24:b9:44:
ab:2b:ca:2e:cf:5a:0e:1b:62:be:62:34:40:5b:61:63:fa:7c:
85:20:2b:a0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWdQGxgsbqQBiYW2t4CB4+OouzL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTAyMzVaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQwNGRjNTFmZTEwMTBlZmFmN2UyYTZhMDE1ZTZhMTYwMWE1ZTAzYjYxYjJm
YmVmOWRjMWE4ZjJlZjZlYjFkZTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJq6E25VdCj5qdybP5uhl+h/TFnU9dBEEetP7T++zJVKCvRdJ/8bZFzbDkGU
szhMXhCpYhrSfhcGJULtCwtTnA+QLOYrDCBVUSx+EqcSnUykxIOkNBx9dWVFYxRB
QTfb8E6P4Dn8iwi8neqOFyNWZCKQ5lCIVVIxlUdT2IYiTSWbzeBFpJhOS3Ca4ZHL
6qgBYmcXJZo+elVwbi7XYgLTBMkcyL0Yb2hNvv3xZv6pCaWnQh8fZy7xHm9b18SQ
ci3dYfpMEXThMlienFh7+HffyV9zBj8vZas4rwZ0yetP0j4a2QQ6JLbg5DfpZBfo
f4qK5Wq9BniL6e4TjDhs+lLN0e0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSFme3X
meCghIs3pMruWZBJzmQdTDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjkwZTY3YzctN2I3NS00YjlkLWFiYzYtMGMzZWMzNGMxNTI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CsA
MA0GCSqGSIb3DQEBCwUAA4IBAQAdtnzuh4RGkgFUPr5v/wB1HXbqNGNOhJUOlzEu
p2mGD+UmLltPA46W9IH9uRW6HegbYLOwubE6FcarixQMWXhLMwLfzwuyqiVChD77
gLeIoutFRtTbBE9dzgwn/A/RgCP1IFLfPymt8XHrveirs3tyC0tlTXH7EHAzUf8n
BNIA5z5pXagO1bfXnvwFiBHOaMmsbVXqpuyb7TrLXfs2iy5NBRmR6zkrsWMynvh0
eDD0/Q/Yfqtrs44MdkQVoYj1ONbtM3mIQBlYn4Ih6XtLBCgV7z2I//bkHA2Xrnje
ItmuUxnYEkRS+DskuUSrK8ouz1oOG2K+YjRAW2Fj+nyFICug
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:19 2026 by rpki-client