Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa
File: 3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa (raw, json)
Hash identifier: cB7+yS6tGvWMSPm4cHWumIoNeHDqwfic0Ae0oeV1xuk=
Subject key identifier: EB:7B:ED:72:A2:1B:06:30:60:D7:3E:26:91:FC:8E:63:33:5E:F0:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DF3F03DBF0CC54CC9C84F762BE793E19B4DE42A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa
Signing time: Fri 09 Oct 2026 01:30:34 +0000
ROA not before: Fri 09 Oct 2026 01:30:34 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f3:f0:3d:bf:0c:c5:4c:c9:c8:4f:76:2b:e7:93:e1:9b:4d:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:34 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=2a3c1766d599c73bf877e4ad820d86731a371ddce80c075b65f1e76892e69f7f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:43:47:8c:50:37:e4:00:19:09:7a:e7:44:
26:7d:11:b0:c4:17:99:d4:0c:ae:84:8e:10:05:26:
2e:40:d2:46:92:ed:38:ef:34:f9:96:e2:e8:4b:83:
b3:b7:c2:db:35:3f:5c:d2:3a:50:2e:dc:b3:39:cd:
0f:bd:41:d7:2c:4a:16:b6:a2:d5:d7:d2:72:48:dc:
ae:ef:e7:39:fc:7c:a6:4d:55:84:90:30:c9:dc:20:
f2:08:e3:de:04:5a:74:cf:6f:75:ca:fa:05:22:75:
ed:23:ce:37:05:24:c3:e2:74:fe:18:8f:43:0e:05:
3d:dc:ce:08:e8:d8:13:6d:a5:72:f6:7d:a4:5f:a3:
25:d4:4a:bb:7e:5c:a9:c3:96:da:b1:14:eb:f1:f0:
c3:28:49:01:c8:d8:d9:b5:27:50:6f:1e:40:ed:b9:
a9:73:23:c0:3c:f8:44:16:01:d0:4e:58:f4:ea:74:
80:a0:83:72:37:f8:c7:a9:af:b4:30:d8:ef:78:b3:
f1:19:fe:9d:65:6f:77:81:1c:b3:ae:d8:d8:a1:23:
88:b3:0d:1f:c6:17:e5:eb:7d:33:df:33:d8:60:ef:
4e:c4:12:fe:61:f6:5d:3e:aa:6d:b9:a7:55:42:2d:
3e:20:a3:f5:4e:d1:af:a6:69:38:3d:d3:ab:d1:15:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:ED:72:A2:1B:06:30:60:D7:3E:26:91:FC:8E:63:33:5E:F0:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3c090733-ba38-4e9b-8c30-18a0916ca5a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4080::/48
Signature Algorithm: sha256WithRSAEncryption
38:9c:ae:95:b8:81:6f:d1:ab:67:f8:01:d9:08:77:84:b4:14:
f2:3d:80:0b:10:fc:94:fa:7f:db:d0:d6:ac:46:3a:76:ec:ae:
9f:3f:20:58:fe:71:00:57:c2:d7:9e:a5:d5:46:6e:7c:9a:b7:
c3:d3:e0:2b:96:cd:a4:af:84:1e:be:1c:8f:d8:4d:bd:25:04:
a6:e2:a9:2f:4b:9c:ae:5b:bf:31:c2:31:87:eb:d0:5b:9c:45:
b1:5c:59:f9:63:51:ea:3a:f0:7c:8e:4c:f8:d9:38:2a:b6:5e:
07:b8:2e:e5:c5:65:b4:74:d7:c8:b0:a1:98:cc:58:c5:db:cc:
a3:1f:ac:59:ba:1b:c4:6d:cb:e4:8d:4b:b1:54:d1:7b:cf:78:
72:13:a5:e2:e4:ba:d1:4b:5f:b4:bd:a2:c9:a2:b1:b2:a7:ed:
2b:ed:65:b2:22:81:46:2b:73:07:75:e0:16:79:01:fc:9c:6e:
25:18:82:5a:28:00:4c:2b:ff:78:b0:65:c4:7a:e6:74:86:cc:
9e:9b:57:9b:91:4b:29:78:0d:06:7b:40:0f:f5:7a:17:e2:32:
42:cf:db:d3:61:25:ec:3d:1c:7f:a5:32:ce:1e:fd:59:5d:7c:
25:ed:c8:4c:e0:ce:5c:2a:53:d6:98:1f:95:64:a5:a5:2e:17:
bc:12:23:07
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDfPwPb8MxUzJyE92K+eT4ZtN5CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTMwMzRaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDJhM2MxNzY2ZDU5OWM3M2JmODc3ZTRhZDgyMGQ4NjczMWEzNzFkZGNlODBj
MDc1YjY1ZjFlNzY4OTJlNjlmN2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdOQ0eMUDfkABkJeudEJn0RsMQXmdQMroSOEAUmLkDSRpLtOO80+Zbi6EuD
s7fC2zU/XNI6UC7csznND71B1yxKFrai1dfSckjcru/nOfx8pk1VhJAwydwg8gjj
3gRadM9vdcr6BSJ17SPONwUkw+J0/hiPQw4FPdzOCOjYE22lcvZ9pF+jJdRKu35c
qcOW2rEU6/HwwyhJAcjY2bUnUG8eQO25qXMjwDz4RBYB0E5Y9Op0gKCDcjf4x6mv
tDDY73iz8Rn+nWVvd4Ecs67Y2KEjiLMNH8YX5et9M98z2GDvTsQS/mH2XT6qbbmn
VUItPiCj9U7Rr6ZpOD3Tq9EVp+0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTre+1y
ohsGMGDXPiaR/I5jM17w6jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2MwOTA3MzMtYmEzOC00ZTliLThjMzAtMThhMDkxNmNhNWE1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GpA
gDANBgkqhkiG9w0BAQsFAAOCAQEAOJyulbiBb9GrZ/gB2Qh3hLQU8j2ACxD8lPp/
29DWrEY6duyunz8gWP5xAFfC156l1UZufJq3w9PgK5bNpK+EHr4cj9hNvSUEpuKp
L0ucrlu/McIxh+vQW5xFsVxZ+WNR6jrwfI5M+Nk4KrZeB7gu5cVltHTXyLChmMxY
xdvMox+sWbobxG3L5I1LsVTRe894chOl4uS60UtftL2iyaKxsqftK+1lsiKBRitz
B3XgFnkB/JxuJRiCWigATCv/eLBlxHrmdIbMnptXm5FLKXgNBntAD/V6F+IyQs/b
02El7D0cf6Uyzh79WV18Je3ITODOXCpT1pgflWSlpS4XvBIjBw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:35:14 2026 by rpki-client