Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier: bkbAztj5+rsAC7NPOoTZgm5lhEJfiOrP/bOyZAyqsI0=
Subject key identifier: 71:29:79:F9:8C:FA:6E:54:2D:83:6E:84:BF:D4:CE:6B:D9:E6:4F:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D6C26AE2D0927002E82F7CCD33FB6B170DE27D0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time: Mon 26 Oct 2026 05:30:11 +0000
ROA not before: Mon 26 Oct 2026 05:30:11 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6c:26:ae:2d:09:27:00:2e:82:f7:cc:d3:3f:b6:b1:70:de:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:11 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e418c3237f8593219eadcdc784bd87515636d7664088b02128e31a8422a94bc0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:93:96:ef:41:46:76:c2:7e:a2:18:10:0d:
ea:70:d2:33:08:e2:4e:9d:1d:b9:ec:eb:aa:f4:e8:
50:50:f1:a1:ef:21:2b:80:92:15:b2:f8:15:d1:e7:
b8:7c:23:3d:8c:6d:03:12:f4:7d:a0:dd:71:e2:0d:
05:2e:ff:9f:96:57:79:f6:ed:ed:59:2c:48:9b:ff:
0b:a9:c0:72:99:0e:a5:64:a7:17:6a:e3:1c:2e:99:
fd:e3:4c:71:7f:d7:8d:e8:3a:07:7b:9b:1c:71:b7:
16:23:f3:20:da:fb:1b:b5:18:ef:55:ef:36:35:98:
8f:69:ee:0e:4d:4c:0c:f3:1c:6a:3c:11:a7:a8:50:
93:d3:7f:52:04:2a:9c:0f:15:c8:48:31:8e:1e:58:
08:76:f1:45:b2:d6:8a:ab:db:91:3f:04:81:03:58:
97:fc:79:f6:54:89:6d:02:7b:5b:2c:d0:09:dc:dd:
c7:e1:a6:f3:d3:b1:29:7c:59:6c:f0:73:1b:70:81:
97:b3:55:e7:ea:91:48:c0:ee:b9:dd:49:3c:9a:d0:
dc:f5:26:70:f4:e1:cd:98:6d:98:8d:19:a0:58:a4:
c7:c2:a2:35:ff:71:93:7a:78:71:5f:ae:ee:05:ee:
c0:13:a0:87:50:7f:19:99:bb:fb:88:0e:dc:20:9b:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:29:79:F9:8C:FA:6E:54:2D:83:6E:84:BF:D4:CE:6B:D9:E6:4F:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:800::/38
Signature Algorithm: sha256WithRSAEncryption
a2:7b:9c:a8:6e:5f:82:a8:b2:2e:d9:a4:8d:2e:1a:14:2b:36:
78:1b:c6:73:00:05:d6:9c:83:6c:35:a5:17:aa:52:8a:40:92:
e5:ee:0d:6a:9a:ba:b0:d6:ac:4a:83:80:be:f7:fb:28:b9:6e:
02:a6:7b:c2:62:33:d1:b8:98:99:9f:05:fd:aa:8f:ff:a4:3e:
00:28:a4:4f:56:e5:99:cb:6f:9c:d6:5c:d5:a8:19:84:96:f6:
0d:91:1a:e4:cc:fd:8e:85:dc:ba:7d:79:18:02:30:87:78:c2:
5c:12:a8:e3:2d:ab:e7:c7:91:11:3e:39:95:8b:05:96:af:ae:
af:6a:8e:aa:d3:66:eb:b5:8a:bf:06:ac:c7:b7:09:db:09:79:
64:b5:e5:0e:fb:97:cc:75:51:b4:18:98:63:75:d6:8a:48:f9:
36:3d:9f:61:53:ca:62:9f:39:48:84:75:da:f9:b0:fa:86:d4:
78:55:10:5f:dc:ce:6d:7e:9a:76:64:bf:b0:7e:64:eb:ad:89:
99:5d:08:f3:6c:7b:62:a6:06:4c:98:85:2c:b6:bb:ef:3e:3a:
3d:f9:46:a4:d6:e7:d6:8c:8f:c8:4f:08:e9:e7:db:86:12:17:
45:76:04:fa:98:08:ac:7e:4d:ee:10:0f:7b:d1:ac:c2:32:e2:
6b:7e:ed:ee
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTWwmri0JJwAugvfM0z+2sXDeJ9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwMTFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU0MThjMzIzN2Y4NTkzMjE5ZWFkY2RjNzg0YmQ4NzUxNTYzNmQ3NjY0MDg4
YjAyMTI4ZTMxYTg0MjJhOTRiYzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7Hk5bvQUZ2wn6iGBAN6nDSMwjiTp0duezrqvToUFDxoe8hK4CSFbL4FdHn
uHwjPYxtAxL0faDdceINBS7/n5ZXefbt7VksSJv/C6nAcpkOpWSnF2rjHC6Z/eNM
cX/Xjeg6B3ubHHG3FiPzINr7G7UY71XvNjWYj2nuDk1MDPMcajwRp6hQk9N/UgQq
nA8VyEgxjh5YCHbxRbLWiqvbkT8EgQNYl/x59lSJbQJ7WyzQCdzdx+Gm89OxKXxZ
bPBzG3CBl7NV5+qRSMDuud1JPJrQ3PUmcPThzZhtmI0ZoFikx8KiNf9xk3p4cV+u
7gXuwBOgh1B/GZm7+4gO3CCbri8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRxKXn5
jPpuVC2DboS/1M5r2eZPizAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI
MA0GCSqGSIb3DQEBCwUAA4IBAQCie5yobl+CqLIu2aSNLhoUKzZ4G8ZzAAXWnINs
NaUXqlKKQJLl7g1qmrqw1qxKg4C+9/souW4CpnvCYjPRuJiZnwX9qo//pD4AKKRP
VuWZy2+c1lzVqBmElvYNkRrkzP2Ohdy6fXkYAjCHeMJcEqjjLavnx5ERPjmViwWW
r66vao6q02brtYq/BqzHtwnbCXlkteUO+5fMdVG0GJhjddaKSPk2PZ9hU8pinzlI
hHXa+bD6htR4VRBf3M5tfpp2ZL+wfmTrrYmZXQjzbHtipgZMmIUstrvvPjo9+Uak
1ufWjI/ITwjp59uGEhdFdgT6mAisfk3uEA970azCMuJrfu3u
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:21 2026 by rpki-client