Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4304a130-e9d1-47a4-8ecf-5d755740a478.roa
File: 4304a130-e9d1-47a4-8ecf-5d755740a478.roa (raw, json)
Hash identifier: 1zWhmtjaLUCU57BQH1PI3PMgRRGgyCPzBsoi+AT4QGM=
Subject key identifier: 97:16:4C:92:BE:08:4F:E8:02:B3:F2:8F:FB:9B:34:8C:EE:ED:D4:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 663BDDA6866B6B6E774AE5A70EACFB01C17A7C2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4304a130-e9d1-47a4-8ecf-5d755740a478.roa
Signing time: Mon 26 Oct 2026 05:20:43 +0000
ROA not before: Mon 26 Oct 2026 05:20:43 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3b:dd:a6:86:6b:6b:6e:77:4a:e5:a7:0e:ac:fb:01:c1:7a:7c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:43 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=ad5fb8424aab01b0458ddff9642d8dd99e401c6b8bc0327f7a5ddee6b27c5eac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:98:cb:d9:06:93:64:10:73:20:1d:90:97:
eb:a0:d8:21:d9:b7:17:ec:10:9a:ae:b9:57:7f:ab:
30:84:c0:81:15:e9:b7:dc:fa:bc:e5:c0:47:1c:5b:
0b:1b:4e:1e:a8:b0:c0:ab:ea:86:4e:83:2b:23:7a:
aa:47:55:c1:06:73:2e:96:31:61:9f:71:d6:16:a5:
bb:29:6e:20:1d:3d:b0:9d:04:b3:88:02:58:37:7d:
04:ad:36:8c:51:83:42:1d:bd:ae:63:7f:06:2b:45:
a0:ca:90:83:2e:a3:32:a2:fd:00:69:ae:43:4c:cb:
b7:ae:99:98:84:95:49:60:a5:66:98:b2:a3:08:ca:
83:43:ec:1a:a9:a4:b1:40:16:c6:24:e6:43:7d:f6:
09:70:e1:33:ae:be:0d:f7:0e:29:4c:57:f6:08:b9:
9c:ad:cd:db:6c:a8:23:80:c7:17:73:83:f3:de:85:
15:47:98:00:01:12:12:13:08:5e:15:c5:81:bf:f8:
e4:5e:67:3e:d8:dd:a2:ea:24:fa:bb:81:10:1c:73:
ff:cd:bf:5e:ae:82:b3:2b:e3:80:ae:a9:da:7f:10:
e0:c7:6d:1e:84:1e:17:11:c0:c4:f8:5e:f5:e7:b6:
8f:69:0f:13:e9:0f:74:64:bb:43:24:1c:b8:af:ef:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:4C:92:BE:08:4F:E8:02:B3:F2:8F:FB:9B:34:8C:EE:ED:D4:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4304a130-e9d1-47a4-8ecf-5d755740a478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
60:51:ea:28:40:89:b2:6c:10:5a:6b:b4:b4:d1:ec:6b:c0:17:
17:18:22:d8:02:c0:0e:be:16:b3:6a:28:2e:ba:2d:e4:21:a4:
38:80:3d:bc:22:87:0e:65:78:cf:87:b9:bc:e9:80:49:d9:57:
1e:53:e9:25:a1:4d:ef:a1:d4:ad:94:e8:83:e6:8b:e2:fb:58:
9d:c8:84:7e:16:35:99:7c:b1:0e:78:95:dd:24:13:c0:81:01:
45:eb:fb:49:a0:04:23:7a:1a:04:7e:a3:4b:e3:a0:c7:38:0f:
75:b7:bd:ac:20:8f:ad:af:65:29:23:df:02:8e:96:57:1d:0e:
ce:07:2f:4b:4f:2a:c7:4b:bd:1c:37:a6:d1:64:9d:64:0f:7f:
75:ae:c3:4d:c8:ee:6e:21:e0:c9:53:e0:16:1e:b0:0b:c9:6a:
56:2e:e4:1b:21:fd:56:40:c7:78:90:1d:c5:d2:95:80:f6:8e:
6e:97:7f:1e:d6:e0:42:29:e7:cf:2f:cf:21:a4:55:fd:f1:63:
da:cf:81:83:04:12:fa:6f:7f:76:e8:bf:c1:3b:b3:ad:4b:26:
ce:6a:7b:15:32:4d:45:6f:8a:f0:6d:09:b8:71:d7:14:d3:0b:
a5:72:e4:ba:40:08:21:57:bc:3d:70:73:67:94:86:3c:32:ae:
05:1b:6b:bd
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZjvdpoZra253SuWnDqz7AcF6fC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIwNDNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGFkNWZiODQyNGFhYjAxYjA0NThkZGZmOTY0MmQ4ZGQ5OWU0MDFjNmI4YmMw
MzI3ZjdhNWRkZWU2YjI3YzVlYWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOTPmMvZBpNkEHMgHZCX66DYIdm3F+wQmq65V3+rMITAgRXpt9z6vOXARxxb
CxtOHqiwwKvqhk6DKyN6qkdVwQZzLpYxYZ9x1haluyluIB09sJ0Es4gCWDd9BK02
jFGDQh29rmN/BitFoMqQgy6jMqL9AGmuQ0zLt66ZmISVSWClZpiyowjKg0PsGqmk
sUAWxiTmQ332CXDhM66+DfcOKUxX9gi5nK3N22yoI4DHF3OD896FFUeYAAESEhMI
XhXFgb/45F5nPtjdouok+ruBEBxz/82/Xq6CsyvjgK6p2n8Q4MdtHoQeFxHAxPhe
9ee2j2kPE+kPdGS7QyQcuK/vEbECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSXFkyS
vghP6AKz8o/7mzSM7u3UtTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDMwNGExMzAtZTlkMS00N2E0LThlY2YtNWQ3NTU3NDBhNDc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
4DANBgkqhkiG9w0BAQsFAAOCAQEAYFHqKECJsmwQWmu0tNHsa8AXFxgi2ALADr4W
s2ooLrot5CGkOIA9vCKHDmV4z4e5vOmASdlXHlPpJaFN76HUrZTog+aL4vtYnciE
fhY1mXyxDniV3SQTwIEBRev7SaAEI3oaBH6jS+OgxzgPdbe9rCCPra9lKSPfAo6W
Vx0OzgcvS08qx0u9HDem0WSdZA9/da7DTcjubiHgyVPgFh6wC8lqVi7kGyH9VkDH
eJAdxdKVgPaObpd/HtbgQinnzy/PIaRV/fFj2s+BgwQS+m9/dui/wTuzrUsmzmp7
FTJNRW+K8G0JuHHXFNMLpXLkukAIIVe8PXBzZ5SGPDKuBRtrvQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 19:50:35 2026 by rpki-client