Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
File: 41abc6c7-a6fb-4666-b503-a8a0784797a1.roa (raw, json)
Hash identifier: 5RyJyKoYqSGFiVbVTkFQKbNGFJfvilKYnNhNn6ONAdw=
Subject key identifier: 19:1E:5C:73:0F:B8:10:80:E2:B3:03:B3:6E:CD:56:B1:3C:F2:D2:36
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BCCD1D06BE098409FE54562208391439FA8AECD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
Signing time: Mon 26 Oct 2026 05:30:28 +0000
ROA not before: Mon 26 Oct 2026 05:30:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cc:d1:d0:6b:e0:98:40:9f:e5:45:62:20:83:91:43:9f:a8:ae:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c4d7d965cb0630efad35a66d0349d093a8c43a466fa8f059b4a1099074a6d764, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:09:f7:77:56:83:37:41:25:64:44:5b:f5:
d2:cc:6c:50:01:80:38:5b:bd:58:60:58:ac:3c:d2:
e3:54:4b:9a:81:0e:3b:40:e7:12:b2:fa:fc:d4:6c:
26:0c:a3:04:3b:bb:68:42:8e:a1:54:68:58:2c:07:
ef:1d:67:cd:a4:d1:91:bf:18:d1:51:cf:eb:60:36:
59:3e:bb:49:90:6a:15:4a:c9:48:30:59:b7:8b:0d:
52:fa:cd:6f:a2:0a:e2:5f:0a:a6:c9:f7:04:11:b7:
a5:30:a3:1d:2f:90:9b:05:2d:d9:f2:14:6e:64:14:
49:91:33:7c:bd:77:d7:5b:c2:10:49:3f:5d:06:91:
52:de:f6:17:38:90:54:b9:4e:19:b8:62:c0:60:aa:
b0:fc:ac:46:88:74:c0:83:eb:c7:85:13:d3:e0:55:
fb:11:c4:85:a5:9b:48:b6:91:02:0e:6d:36:ff:29:
ac:7f:6d:f0:76:a7:0d:af:78:74:90:3b:ac:c7:28:
a9:36:bd:e8:89:8a:87:3d:9b:c7:d3:d2:34:0c:5d:
f8:b9:29:78:fb:dc:45:22:34:38:c6:05:eb:b1:24:
b9:9a:2c:07:71:d6:14:1b:fb:28:fe:45:c6:11:90:
8e:ad:00:26:4b:1a:da:d7:02:aa:8b:87:27:07:a9:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:5C:73:0F:B8:10:80:E2:B3:03:B3:6E:CD:56:B1:3C:F2:D2:36
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/41abc6c7-a6fb-4666-b503-a8a0784797a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8000::/40
Signature Algorithm: sha256WithRSAEncryption
9a:98:3c:48:c0:2a:45:f4:c6:c8:52:14:dc:05:f9:76:06:83:
31:d8:d9:9d:34:ae:d1:21:bb:c1:93:90:d8:3c:c0:79:54:8e:
a3:94:de:d6:be:6f:10:af:01:75:70:f0:ba:f2:6d:1b:3f:2e:
b4:15:6c:31:84:41:fe:73:c8:b7:59:f4:58:34:b1:73:52:f9:
e9:98:bf:78:54:72:88:47:2c:c4:e1:4d:aa:63:3e:d3:24:3a:
c1:ef:b2:a3:ad:6f:ab:c8:fd:9c:43:f0:21:50:90:6d:a1:ed:
72:1c:6d:fe:b6:67:63:53:f8:3e:65:87:60:4d:e0:e7:e1:4f:
a7:cc:e4:8c:ec:c0:56:46:c1:a8:e3:49:8f:29:f3:c5:1f:57:
83:70:94:69:3f:19:e1:81:7c:90:54:1d:31:c3:72:e0:67:60:
ec:1a:f6:26:6d:b4:5f:e9:9c:16:52:83:5a:f4:74:27:f7:87:
e9:50:30:9d:ae:0f:88:a8:d9:8a:c0:96:42:85:37:11:65:0e:
2d:4d:2d:53:fe:c3:53:2c:9d:0f:72:6c:fc:1a:a4:6f:6e:93:
66:07:42:9e:7f:19:f1:60:e3:62:fd:57:2f:58:7d:67:e1:fc:
57:e1:2b:76:cc:0a:e0:c0:78:5e:e2:21:b2:03:b6:e9:14:b6:
53:a6:53:85
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUa8zR0GvgmECf5UViIIORQ5+ors0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwMjhaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGM0ZDdkOTY1Y2IwNjMwZWZhZDM1YTY2ZDAzNDlkMDkzYThjNDNhNDY2ZmE4
ZjA1OWI0YTEwOTkwNzRhNmQ3NjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKegCfd3VoM3QSVkRFv10sxsUAGAOFu9WGBYrDzS41RLmoEOO0DnErL6/NRs
JgyjBDu7aEKOoVRoWCwH7x1nzaTRkb8Y0VHP62A2WT67SZBqFUrJSDBZt4sNUvrN
b6IK4l8Kpsn3BBG3pTCjHS+QmwUt2fIUbmQUSZEzfL1311vCEEk/XQaRUt72FziQ
VLlOGbhiwGCqsPysRoh0wIPrx4UT0+BV+xHEhaWbSLaRAg5tNv8prH9t8HanDa94
dJA7rMcoqTa96ImKhz2bx9PSNAxd+LkpePvcRSI0OMYF67EkuZosB3HWFBv7KP5F
xhGQjq0AJksa2tcCqouHJwepC9sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQZHlxz
D7gQgOKzA7NuzVaxPPLSNjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDFhYmM2YzctYTZmYi00NjY2LWI1MDMtYThhMDc4NDc5N2ExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ACA
MA0GCSqGSIb3DQEBCwUAA4IBAQCamDxIwCpF9MbIUhTcBfl2BoMx2NmdNK7RIbvB
k5DYPMB5VI6jlN7Wvm8QrwF1cPC68m0bPy60FWwxhEH+c8i3WfRYNLFzUvnpmL94
VHKIRyzE4U2qYz7TJDrB77KjrW+ryP2cQ/AhUJBtoe1yHG3+tmdjU/g+ZYdgTeDn
4U+nzOSM7MBWRsGo40mPKfPFH1eDcJRpPxnhgXyQVB0xw3LgZ2DsGvYmbbRf6ZwW
UoNa9HQn94fpUDCdrg+IqNmKwJZChTcRZQ4tTS1T/sNTLJ0Pcmz8GqRvbpNmB0Ke
fxnxYONi/VcvWH1n4fxX4St2zArgwHhe4iGyA7bpFLZTplOF
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:42 2026 by rpki-client