Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File: 44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier: PcHJUh3MuoVYvN4lpgi0kid8na+WyVG6whT2jIXF3rw=
Subject key identifier: 98:0D:1C:CF:9A:38:11:80:0F:2C:CA:61:CB:AC:5A:6F:AE:46:3F:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AD4A5A8DF8D4ABA5F398D91D06FF8C367E410E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time: Mon 26 Oct 2026 04:40:51 +0000
ROA not before: Mon 26 Oct 2026 04:40:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d4:a5:a8:df:8d:4a:ba:5f:39:8d:91:d0:6f:f8:c3:67:e4:10:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=faa712247488cf443fff1d423ff15f351a2d68cac31dd88702433efb77649c82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:85:2c:f5:5f:37:7b:78:1a:4d:1b:26:50:
25:bd:4e:96:dc:fb:4d:79:55:fb:12:03:94:19:ca:
57:59:be:62:79:45:ac:12:d3:64:33:55:d7:ac:e1:
14:54:8a:57:b1:3e:6c:b0:03:74:84:c6:a1:87:5d:
6c:57:84:4f:06:89:c9:2b:ec:b9:ba:79:d0:17:80:
3d:23:6e:3e:e3:20:3b:23:03:a5:d1:c9:1f:71:fb:
05:38:15:2b:67:9f:b7:f0:1e:1a:77:09:32:cd:d2:
5c:fd:fa:74:3c:f8:3f:18:d7:2a:83:58:33:10:92:
b1:2c:50:87:02:0a:e3:95:8e:be:51:2d:57:70:ec:
a5:4b:16:e2:e9:d8:96:b2:b1:67:47:fd:b5:1b:1f:
f7:8e:6b:e8:93:13:a9:44:00:45:59:25:64:35:46:
d8:9a:09:60:3b:77:53:24:20:ce:9b:c5:10:b7:40:
e9:66:b5:28:1e:57:ed:15:fc:b9:bd:4e:e4:3f:33:
24:0b:3a:7e:af:9b:3b:78:43:23:fc:3a:55:28:23:
ef:3e:a7:27:cd:11:c2:c2:34:fc:0a:c5:fa:29:b1:
aa:1f:01:31:cd:0a:68:8b:38:fa:5f:e6:6d:e8:bf:
e8:b9:d2:3f:f7:c1:cd:d8:e1:36:7b:bd:33:26:4b:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:1C:CF:9A:38:11:80:0F:2C:CA:61:CB:AC:5A:6F:AE:46:3F:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5040::/48
Signature Algorithm: sha256WithRSAEncryption
9b:0d:cc:51:9c:68:0c:35:da:ed:1f:31:23:41:6b:72:43:f9:
06:20:3f:df:f0:6e:82:b1:73:b6:80:9c:38:25:01:87:b0:1f:
8d:e4:1c:8a:30:dd:e1:f2:5f:3f:bc:38:fd:6c:c0:5e:89:97:
61:cb:b6:a7:ad:89:bf:a5:c9:b9:85:41:c7:35:d4:4f:32:d0:
da:5f:12:11:ac:c4:e2:77:61:de:59:ab:7f:2e:aa:54:ab:7d:
15:ef:db:a4:78:86:35:15:b1:7f:05:cf:3c:ad:6f:23:64:08:
9e:78:70:52:c9:72:fd:25:6d:26:b6:ae:80:75:2c:a1:aa:1a:
4c:64:07:f1:4f:81:54:87:9b:43:e2:b5:7d:02:6f:a8:9e:0d:
ce:1c:31:f0:08:20:18:52:1b:97:d7:bf:08:9a:7a:2b:29:0a:
a7:43:84:99:20:64:24:49:4e:a0:8c:d6:85:06:e0:9d:c3:76:
7f:a2:e5:e6:43:8b:9a:b2:3d:1d:e7:22:a8:e0:d8:59:25:9d:
63:1e:10:a4:c6:51:f3:14:56:39:fb:3d:16:3f:95:ea:fc:93:
b8:76:ed:d8:2e:f4:15:36:e2:ac:3f:2e:2c:4b:18:d2:e1:68:
93:f2:fd:2c:8e:06:0d:29:18:70:04:f1:77:95:41:37:32:e8:
14:45:44:b0
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUetSlqN+NSrpfOY2R0G/4w2fkEOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwNTFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGZhYTcxMjI0NzQ4OGNmNDQzZmZmMWQ0MjNmZjE1ZjM1MWEyZDY4Y2FjMzFk
ZDg4NzAyNDMzZWZiNzc2NDljODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIrBhSz1Xzd7eBpNGyZQJb1Oltz7TXlV+xIDlBnKV1m+YnlFrBLTZDNV16zh
FFSKV7E+bLADdITGoYddbFeETwaJySvsubp50BeAPSNuPuMgOyMDpdHJH3H7BTgV
K2eft/AeGncJMs3SXP36dDz4PxjXKoNYMxCSsSxQhwIK45WOvlEtV3DspUsW4unY
lrKxZ0f9tRsf945r6JMTqUQARVklZDVG2JoJYDt3UyQgzpvFELdA6Wa1KB5X7RX8
ub1O5D8zJAs6fq+bO3hDI/w6VSgj7z6nJ80RwsI0/ArF+imxqh8BMc0KaIs4+l/m
bei/6LnSP/fBzdjhNnu9MyZLF58CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSYDRzP
mjgRgA8symHLrFpvrkY/IzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDRiYjJmNzYtN2MxZS00MTFhLTg1ZjYtYjljZDFjNzdkNjBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAmw3MUZxoDDXa7R8xI0FrckP5BiA/3/BugrFz
toCcOCUBh7AfjeQcijDd4fJfP7w4/WzAXomXYcu2p62Jv6XJuYVBxzXUTzLQ2l8S
EazE4ndh3lmrfy6qVKt9Fe/bpHiGNRWxfwXPPK1vI2QInnhwUsly/SVtJraugHUs
oaoaTGQH8U+BVIebQ+K1fQJvqJ4Nzhwx8AggGFIbl9e/CJp6KykKp0OEmSBkJElO
oIzWhQbgncN2f6Ll5kOLmrI9HeciqODYWSWdYx4QpMZR8xRWOfs9Fj+V6vyTuHbt
2C70FTbirD8uLEsY0uFok/L9LI4GDSkYcATxd5VBNzLoFEVEsA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:47 2026 by rpki-client