Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa
File: 3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa (raw, json)
Hash identifier: jZPRPZ9/aUI1WJmxYFXufKp65o6oKohamDv8B3BrTek=
Subject key identifier: DB:74:F2:3A:65:A4:58:EC:B7:15:9F:6F:F2:C0:38:3E:C1:4D:7B:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15BC3234F9539131E4A3C2E3C759F5992652D5F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa
Signing time: Mon 26 Oct 2026 05:31:09 +0000
ROA not before: Mon 26 Oct 2026 05:31:09 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bc:32:34:f9:53:91:31:e4:a3:c2:e3:c7:59:f5:99:26:52:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:09 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9d0d815a5166c2f67a129e80e3627dda377ff6b83c39e4115a8c337136ba8601, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:52:71:06:69:b3:bd:47:0e:52:65:9b:4c:
50:ac:fb:6a:09:44:c6:eb:f7:37:39:16:52:05:2d:
50:b9:fb:15:0c:1f:3c:d9:cb:05:c3:15:07:43:99:
7e:37:bc:46:9c:02:35:be:de:9a:0c:30:7e:5e:35:
b9:a0:fd:99:d0:08:dd:93:a2:ad:fd:fd:68:07:46:
d0:0b:90:b8:b8:29:21:43:99:3c:83:1e:9d:74:49:
52:b6:a0:5b:44:79:82:5a:75:f3:3d:6a:23:43:aa:
2f:77:fa:1d:d6:32:8c:00:5b:59:75:0b:69:2a:dc:
65:39:8f:5d:4a:af:f8:f1:f6:5c:12:e3:7b:99:d3:
96:4b:c6:64:5c:80:2b:0e:e1:4a:d9:e1:a3:b7:a4:
88:33:63:19:d9:4f:06:04:d0:43:4c:40:a8:58:5e:
01:2f:64:0c:53:1e:77:2a:2a:0f:cb:45:b8:b7:3c:
63:bb:13:c3:5e:1a:5c:ed:a4:bc:85:42:9a:29:9d:
eb:bc:1e:2d:71:64:0b:60:1e:b8:7b:30:3b:b6:99:
c4:89:42:cf:d2:1f:61:97:18:c2:95:93:dc:03:12:
48:71:66:7f:43:bc:11:d6:50:be:0b:15:83:1c:db:
b9:2d:db:b6:d1:16:ca:09:a5:1e:6d:e8:98:e1:fb:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:F2:3A:65:A4:58:EC:B7:15:9F:6F:F2:C0:38:3E:C1:4D:7B:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cf7ae9d-d863-4db2-9635-fb86479cf09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016::/38
Signature Algorithm: sha256WithRSAEncryption
30:b5:ae:27:4d:03:1c:88:ce:e2:14:62:c4:18:45:5e:c7:b2:
38:7c:2b:b2:f6:5b:41:ca:7e:49:44:0f:4e:f7:50:7c:d6:fe:
f8:16:94:e5:ce:2c:d6:04:ea:5b:87:fc:65:e5:76:76:de:87:
ff:bc:c2:f4:d1:76:d1:11:e8:e1:09:d1:e2:bd:a0:1f:b3:d3:
dc:0a:9a:5f:9f:d4:ff:a5:36:ce:55:74:d5:b2:58:97:c1:2e:
72:11:f4:b8:7c:11:e8:2a:e3:3d:c5:d8:bb:d1:2e:46:80:59:
d7:77:35:31:0c:fb:88:61:df:08:3e:5b:7a:e7:ac:18:d6:de:
dc:d8:f6:31:e6:95:e8:20:8b:56:45:59:f8:d5:5d:31:be:3a:
32:b1:90:d2:03:d5:2a:39:25:93:b2:55:20:09:3c:1d:a6:f8:
43:77:15:55:fe:9f:33:ad:ec:64:71:79:cb:ed:f8:2a:cf:6c:
10:43:8a:5e:34:cc:c1:d6:77:7b:3b:95:6c:21:48:2d:70:e7:
d0:a9:48:e9:3b:fd:e0:ed:2c:4c:48:7c:76:21:46:3c:d8:d7:
af:ca:37:a7:27:49:2d:6b:9b:f2:6a:ea:ef:70:ca:73:60:e0:
e8:6b:57:43:ec:2a:c1:26:74:19:a0:9a:26:65:d6:b5:3f:06:
85:da:2b:59
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFbwyNPlTkTHko8Ljx1n1mSZS1fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMxMDlaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDlkMGQ4MTVhNTE2NmMyZjY3YTEyOWU4MGUzNjI3ZGRhMzc3ZmY2YjgzYzM5
ZTQxMTVhOGMzMzcxMzZiYTg2MDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMErUnEGabO9Rw5SZZtMUKz7aglExuv3NzkWUgUtULn7FQwfPNnLBcMVB0OZ
fje8RpwCNb7emgwwfl41uaD9mdAI3ZOirf39aAdG0AuQuLgpIUOZPIMenXRJUrag
W0R5glp18z1qI0OqL3f6HdYyjABbWXULaSrcZTmPXUqv+PH2XBLje5nTlkvGZFyA
Kw7hStnho7ekiDNjGdlPBgTQQ0xAqFheAS9kDFMedyoqD8tFuLc8Y7sTw14aXO2k
vIVCmimd67weLXFkC2AeuHswO7aZxIlCz9IfYZcYwpWT3AMSSHFmf0O8EdZQvgsV
gxzbuS3bttEWygmlHm3omOH7CI0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTbdPI6
ZaRY7LcVn2/ywDg+wU17djAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2NmN2FlOWQtZDg2My00ZGIyLTk2MzUtZmI4NjQ3OWNmMDlhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYA
MA0GCSqGSIb3DQEBCwUAA4IBAQAwta4nTQMciM7iFGLEGEVex7I4fCuy9ltByn5J
RA9O91B81v74FpTlzizWBOpbh/xl5XZ23of/vML00XbREejhCdHivaAfs9PcCppf
n9T/pTbOVXTVsliXwS5yEfS4fBHoKuM9xdi70S5GgFnXdzUxDPuIYd8IPlt656wY
1t7c2PYx5pXoIItWRVn41V0xvjoysZDSA9UqOSWTslUgCTwdpvhDdxVV/p8zrexk
cXnL7fgqz2wQQ4peNMzB1nd7O5VsIUgtcOfQqUjpO/3g7SxMSHx2IUY82Nevyjen
J0kta5vyaurvcMpzYODoa1dD7CrBJnQZoJomZda1PwaF2itZ
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:48 2026 by rpki-client