Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4acf0832-9da4-483e-a1fe-5f9bb3498979.roa
File: 4acf0832-9da4-483e-a1fe-5f9bb3498979.roa (raw, json)
Hash identifier: C3u/oCPx7xheVbJznZxMNgNx/kxeUz+zXipUREUpDj0=
Subject key identifier: 03:C1:FF:59:C9:DD:E6:A2:82:EB:45:83:88:CB:AE:24:E2:10:20:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F9153F9D69342ACF5A33294CFA538469B07139F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4acf0832-9da4-483e-a1fe-5f9bb3498979.roa
Signing time: Thu 08 Oct 2026 17:24:33 +0000
ROA not before: Thu 08 Oct 2026 17:24:33 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:91:53:f9:d6:93:42:ac:f5:a3:32:94:cf:a5:38:46:9b:07:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:33 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=b9d2a7e33d62c49268f78c236975e0a1bdd6da5ec2b23be2d2fb49413246d476, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:65:39:81:ed:95:82:1a:ba:8e:0d:93:38:
69:5a:7a:ee:0b:20:f2:c8:22:cc:9c:5e:d7:67:11:
4d:46:19:ee:ac:67:65:f3:c3:3d:72:7f:0c:4a:a1:
2e:7b:23:3c:6e:c2:c4:a9:83:b5:8f:8c:c7:0e:a7:
0c:90:96:34:cb:43:ad:4f:a6:08:ee:42:0e:08:18:
c9:04:8f:c6:67:4b:3e:97:4a:54:04:3c:0e:16:44:
ad:02:77:83:85:66:a8:a1:09:0d:16:ec:f2:0d:a6:
85:91:30:a0:ec:04:f5:3f:3b:90:91:ce:9c:63:46:
49:6a:a3:32:b3:6e:db:5b:94:03:d0:e9:41:fe:7e:
f7:07:ac:2f:22:7f:cc:e0:9d:3d:cb:49:64:04:81:
b1:54:30:14:99:e7:b7:73:4a:8f:2f:36:45:1a:e3:
5e:8e:c0:9c:6a:e4:af:f4:5e:ca:42:48:a1:83:13:
96:4b:2b:39:8a:92:7e:b8:92:c0:61:f3:1b:23:d4:
ad:fa:2f:6a:47:76:0d:0a:25:60:00:d1:06:f6:d4:
54:b7:1a:61:bb:76:ce:f9:c2:94:41:c5:21:c9:6b:
a0:ac:54:38:ca:8e:55:c9:c2:7a:15:e7:79:2f:e8:
e4:1d:32:17:cc:49:38:fe:cc:5b:d6:22:cb:da:a9:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:FF:59:C9:DD:E6:A2:82:EB:45:83:88:CB:AE:24:E2:10:20:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4acf0832-9da4-483e-a1fe-5f9bb3498979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:2000::/40
Signature Algorithm: sha256WithRSAEncryption
91:85:a3:9a:09:63:ba:b2:22:42:c8:21:a5:83:d2:c0:69:c0:
2a:b5:00:f7:af:44:4b:29:b5:57:6a:02:a2:48:cd:ce:c0:2b:
3e:13:00:70:53:d7:0f:65:f5:10:d2:5a:bd:3a:05:1f:b8:a6:
50:b7:c1:fc:dd:d3:db:65:60:cd:99:7b:30:4e:32:bf:db:f3:
a8:8d:1c:3c:74:67:55:cd:37:18:cf:63:4d:d4:ac:33:2a:34:
a6:32:38:de:83:38:ec:81:9e:e4:f3:4a:a0:c0:ed:c8:cc:82:
50:f2:66:b5:2e:36:02:7f:c3:c1:fb:5d:4c:c9:04:fa:34:5d:
67:94:78:33:0f:ac:6a:f5:1e:ac:48:70:f6:fe:63:3a:58:12:
e3:1c:85:56:8b:fe:81:d4:d3:1d:88:8b:25:bd:60:62:b0:95:
16:14:48:1b:87:c4:80:57:08:da:87:4d:5b:85:96:3f:01:94:
26:f3:26:13:e6:cb:6e:43:4f:a6:ff:37:ab:ef:c0:31:6e:e8:
b6:7b:29:d8:ac:25:47:5f:ee:39:20:4b:f3:7b:e9:cf:1d:a8:
27:0c:68:f1:c5:7e:de:96:3c:3c:fc:de:e1:3c:df:f2:04:e8:
33:f8:43:13:34:77:e7:e5:a7:fd:f0:08:f3:e1:7a:cf:e2:b4:
a4:bc:82:1e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUX5FT+daTQqz1ozKUz6U4RpsHE58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDgxNzI0MzNaFw0yNzAxMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5ZDJhN2UzM2Q2MmM0OTI2OGY3OGMyMzY5NzVlMGExYmRkNmRhNWVjMmIy
M2JlMmQyZmI0OTQxMzI0NmQ0NzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOXwZTmB7ZWCGrqODZM4aVp67gsg8sgizJxe12cRTUYZ7qxnZfPDPXJ/DEqh
LnsjPG7CxKmDtY+Mxw6nDJCWNMtDrU+mCO5CDggYyQSPxmdLPpdKVAQ8DhZErQJ3
g4VmqKEJDRbs8g2mhZEwoOwE9T87kJHOnGNGSWqjMrNu21uUA9DpQf5+9wesLyJ/
zOCdPctJZASBsVQwFJnnt3NKjy82RRrjXo7AnGrkr/ReykJIoYMTlksrOYqSfriS
wGHzGyPUrfovakd2DQolYADRBvbUVLcaYbt2zvnClEHFIclroKxUOMqOVcnCehXn
eS/o5B0yF8xJOP7MW9Yiy9qpahECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQDwf9Z
yd3mooLrRYOIy64k4hAgKDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGFjZjA4MzItOWRhNC00ODNlLWExZmUtNWY5YmIzNDk4OTc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GAg
MA0GCSqGSIb3DQEBCwUAA4IBAQCRhaOaCWO6siJCyCGlg9LAacAqtQD3r0RLKbVX
agKiSM3OwCs+EwBwU9cPZfUQ0lq9OgUfuKZQt8H83dPbZWDNmXswTjK/2/OojRw8
dGdVzTcYz2NN1KwzKjSmMjjegzjsgZ7k80qgwO3IzIJQ8ma1LjYCf8PB+11MyQT6
NF1nlHgzD6xq9R6sSHD2/mM6WBLjHIVWi/6B1NMdiIslvWBisJUWFEgbh8SAVwja
h01bhZY/AZQm8yYT5stuQ0+m/zer78Axbui2eynYrCVHX+45IEvze+nPHagnDGjx
xX7eljw8/N7hPN/yBOgz+EMTNHfn5af98Ajz4XrP4rSkvIIe
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:32:53 2026 by rpki-client