Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
File: 46510026-3bc6-4802-9977-5875dcaffcac.roa (raw, json)
Hash identifier: 8BQOvdudPrQEknAnNFy3UQzEwfrEx2x3IBy9LJUthdQ=
Subject key identifier: CB:91:1C:77:C6:A9:48:2A:21:8B:1F:02:76:B3:D7:8A:68:10:CC:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EAE1D5BE7F6CEBBF073E5CA010E2C41E697375B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
Signing time: Thu 22 Oct 2026 03:50:05 +0000
ROA not before: Thu 22 Oct 2026 03:50:05 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ae:1d:5b:e7:f6:ce:bb:f0:73:e5:ca:01:0e:2c:41:e6:97:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 03:50:05 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=10521e9053c519f98ddd7ceac7f01ff7eef6ada8c64f84d9549bb10c3921e1f8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:00:49:ee:cf:36:55:e9:42:7d:04:26:65:
0d:72:27:52:ea:d1:8a:be:74:58:8f:50:0f:bb:eb:
0e:9f:b1:9e:e5:29:f6:ca:15:f0:88:2c:1d:b4:b5:
4a:9a:59:d1:a0:47:cd:fd:0a:e8:de:34:1a:25:d4:
f2:b3:2d:33:dd:9b:06:bf:d9:aa:92:18:1d:35:9b:
59:82:5e:1e:a2:06:f1:ad:4b:c9:94:92:90:6f:2d:
20:c8:1c:d8:6c:f3:78:9c:db:04:98:7f:28:8e:1b:
02:12:fb:a8:a0:9c:99:9d:23:ba:78:69:26:ea:f4:
90:0a:34:5e:c1:e5:3b:c2:00:1f:c1:6d:67:86:3c:
b0:31:4b:61:7f:74:4b:20:63:1c:21:42:b7:ee:d6:
d3:68:ab:cd:f3:29:23:b3:c8:d4:76:38:45:b6:00:
71:8d:5a:61:82:14:3d:de:79:17:a6:da:13:2b:b4:
df:6c:f6:c3:b0:f1:e6:27:d7:06:93:0f:38:48:e3:
90:1d:0c:ae:f9:c4:bb:1d:2b:90:d1:e2:d4:f5:97:
5a:88:32:66:a1:40:2b:6c:24:5c:43:28:de:f1:6e:
b0:3c:d6:e6:75:3f:05:bc:bc:5c:ba:c9:fe:86:f5:
fe:b6:c9:1e:2f:4f:62:ed:18:26:57:3e:08:97:80:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:91:1C:77:C6:A9:48:2A:21:8B:1F:02:76:B3:D7:8A:68:10:CC:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
77:f7:97:17:77:5d:80:44:38:6e:97:64:18:72:45:a2:99:bf:
2b:a1:cd:dc:66:52:cf:c6:d4:65:f9:33:af:14:66:1f:3b:51:
94:99:8d:df:9f:20:ce:67:ea:e4:53:31:71:d4:83:21:2b:b1:
b0:02:2c:2c:61:11:17:76:51:98:d0:d6:e0:46:c2:37:41:60:
76:85:91:3b:1b:7c:93:11:3c:11:69:43:9c:0a:66:d8:3b:c5:
77:8f:3f:66:73:1c:40:0c:dd:73:17:63:45:d1:43:98:14:1e:
7e:88:7c:99:51:c9:27:6d:17:70:8d:3d:d7:a2:67:10:be:c9:
04:03:4d:c7:05:a7:04:d6:8a:e8:9a:e3:29:d7:43:9f:74:a2:
ac:54:43:96:f6:3a:11:cf:52:ae:0d:85:02:cb:b8:a2:5b:4f:
35:ed:26:f4:b9:43:f1:e1:81:20:5e:52:3a:90:e7:bb:61:ca:
ac:d2:2d:e6:86:d6:70:d9:c4:8f:83:bd:a8:f4:a0:08:77:2c:
12:76:ee:32:e2:06:02:de:8b:74:4b:96:7c:70:b3:7b:85:65:
f2:04:da:6a:14:07:69:58:3b:76:c8:4f:6e:25:77:6a:d1:17:
45:1b:0b:74:4e:58:a3:f2:cb:44:7d:7c:9e:fe:d8:51:d7:b1:
19:c6:ca:ea
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDq4dW+f2zrvwc+XKAQ4sQeaXN1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjIwMzUwMDVaFw0yNzAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDEwNTIxZTkwNTNjNTE5Zjk4ZGRkN2NlYWM3ZjAxZmY3ZWVmNmFkYThjNjRm
ODRkOTU0OWJiMTBjMzkyMWUxZjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALicAEnuzzZV6UJ9BCZlDXInUurRir50WI9QD7vrDp+xnuUp9soV8IgsHbS1
SppZ0aBHzf0K6N40GiXU8rMtM92bBr/ZqpIYHTWbWYJeHqIG8a1LyZSSkG8tIMgc
2GzzeJzbBJh/KI4bAhL7qKCcmZ0junhpJur0kAo0XsHlO8IAH8FtZ4Y8sDFLYX90
SyBjHCFCt+7W02irzfMpI7PI1HY4RbYAcY1aYYIUPd55F6baEyu032z2w7Dx5ifX
BpMPOEjjkB0MrvnEux0rkNHi1PWXWogyZqFAK2wkXEMo3vFusDzW5nU/Bby8XLrJ
/ob1/rbJHi9PYu0YJlc+CJeAGDECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTLkRx3
xqlIKiGLHwJ2s9eKaBDM6DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDY1MTAwMjYtM2JjNi00ODAyLTk5NzctNTg3NWRjYWZmY2FjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DWg
MA0GCSqGSIb3DQEBCwUAA4IBAQB395cXd12ARDhul2QYckWimb8roc3cZlLPxtRl
+TOvFGYfO1GUmY3fnyDOZ+rkUzFx1IMhK7GwAiwsYREXdlGY0NbgRsI3QWB2hZE7
G3yTETwRaUOcCmbYO8V3jz9mcxxADN1zF2NF0UOYFB5+iHyZUcknbRdwjT3XomcQ
vskEA03HBacE1oromuMp10OfdKKsVEOW9joRz1KuDYUCy7iiW0817Sb0uUPx4YEg
XlI6kOe7Ycqs0i3mhtZw2cSPg72o9KAIdywSdu4y4gYC3ot0S5Z8cLN7hWXyBNpq
FAdpWDt2yE9uJXdq0RdFGwt0Tlij8stEfXye/thR17EZxsrq
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:39:32 2026 by rpki-client