Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
File: 4cdfefba-9573-485f-8040-202e038ebf78.roa (raw, json)
Hash identifier: Qq8+oTSusxSve/a/myeNtRuf5RDW4aEOCpsJG2WwTF0=
Subject key identifier: 78:16:81:C5:57:CA:C6:3F:AF:CC:D5:02:EF:F5:BC:A4:1F:5E:7F:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 507ADB1CC13A486CB02BE2887F3E9115EEAF788C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
Signing time: Mon 26 Oct 2026 04:40:21 +0000
ROA not before: Mon 26 Oct 2026 04:40:21 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:7a:db:1c:c1:3a:48:6c:b0:2b:e2:88:7f:3e:91:15:ee:af:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:21 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=3a24752e5b4de64e84e125797cd8eef8c0e9d37ed0011b59c8578866ce6b9c78, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:26:6a:b6:5c:b0:ff:e2:75:4d:20:0b:1c:
9e:cf:b9:b0:3c:c5:7c:8a:23:a9:26:38:53:41:f9:
d1:02:e8:1b:c3:e8:8e:5d:29:76:3a:79:2c:87:78:
8c:68:08:99:61:8f:a4:44:fd:88:ea:cf:74:5b:2d:
4a:26:d6:1c:8a:ae:8c:33:8c:63:d7:63:12:e9:84:
94:75:53:2b:21:4c:3e:03:d5:27:ac:cc:1d:f7:e8:
ef:71:26:69:b1:a2:0c:1e:68:0c:c2:22:94:1a:da:
f2:f6:9a:d5:75:bc:a5:8b:d2:41:2d:28:5d:18:39:
e4:0d:c2:25:9e:70:81:e4:55:a4:db:b2:a4:84:86:
8e:35:1b:2e:76:2a:8b:d0:0c:bb:2c:fd:35:c1:21:
64:25:40:77:6a:4c:21:98:c3:43:25:59:89:c0:5d:
8f:0a:f5:bc:08:75:2a:5b:6d:05:d2:8b:b2:f9:dd:
23:82:16:b1:bb:4c:b2:05:43:10:88:d6:43:3b:90:
82:92:86:fa:e2:e8:2f:97:69:60:55:be:57:6e:07:
c6:da:88:89:22:f4:63:3a:06:5a:88:09:2c:40:6a:
55:14:61:23:55:4a:9b:a1:3e:3d:f2:60:5e:9d:a3:
4a:81:72:3e:8e:39:6f:c3:05:7b:c7:96:dc:94:4b:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:81:C5:57:CA:C6:3F:AF:CC:D5:02:EF:F5:BC:A4:1F:5E:7F:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cdfefba-9573-485f-8040-202e038ebf78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.8.0/21
Signature Algorithm: sha256WithRSAEncryption
78:b6:ff:6a:27:28:9e:91:53:e9:b9:52:8a:c5:7b:42:53:36:
7b:86:ed:7e:fa:62:92:8a:97:bb:be:ad:f7:d5:97:64:14:54:
a7:af:ad:1e:12:99:13:b0:b8:ea:be:c6:5d:f8:40:27:ee:f7:
6f:e6:73:0d:55:ad:71:38:62:8c:a8:9e:ed:83:74:aa:a2:d2:
ad:21:56:2d:1a:a7:a8:17:e9:45:8b:db:02:ec:b8:a7:cd:18:
81:66:dd:39:59:f1:e8:34:b5:df:f3:58:92:f2:44:d2:9b:a5:
f3:f7:b8:0e:12:d0:98:54:a2:64:40:b4:ac:98:d3:46:e6:a6:
c2:74:31:54:13:e7:9f:1c:15:e5:5a:75:0f:8b:ad:08:5d:b5:
50:39:4b:23:07:c9:93:ad:33:43:a2:ee:7e:a7:b3:24:e8:65:
45:d1:37:c4:44:f6:7f:0e:ef:48:39:41:f5:99:4a:2a:4d:1e:
bc:0c:9b:67:61:76:6f:05:12:00:19:52:19:85:23:ef:cd:e3:
5a:cf:5a:07:2d:a6:5f:05:27:07:1d:13:94:fe:0f:10:b0:d3:
45:e5:92:bb:04:78:17:e3:8e:f6:de:c6:12:af:a1:9c:4f:95:
79:af:c5:76:ff:16:de:78:62:03:47:61:47:a9:b6:7e:71:b4:
46:4b:8a:c8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUUHrbHME6SGywK+KIfz6RFe6veIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwMjFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDNhMjQ3NTJlNWI0ZGU2NGU4NGUxMjU3OTdjZDhlZWY4YzBlOWQzN2VkMDAx
MWI1OWM4NTc4ODY2Y2U2YjljNzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALuCJmq2XLD/4nVNIAscns+5sDzFfIojqSY4U0H50QLoG8Pojl0pdjp5LId4
jGgImWGPpET9iOrPdFstSibWHIqujDOMY9djEumElHVTKyFMPgPVJ6zMHffo73Em
abGiDB5oDMIilBra8vaa1XW8pYvSQS0oXRg55A3CJZ5wgeRVpNuypISGjjUbLnYq
i9AMuyz9NcEhZCVAd2pMIZjDQyVZicBdjwr1vAh1KlttBdKLsvndI4IWsbtMsgVD
EIjWQzuQgpKG+uLoL5dpYFW+V24HxtqIiSL0YzoGWogJLEBqVRRhI1VKm6E+PfJg
Xp2jSoFyPo45b8MFe8eW3JRLIQ8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR4FoHF
V8rGP6/M1QLv9bykH15/MTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGNkZmVmYmEtOTU3My00ODVmLTgwNDAtMjAyZTAzOGViZjc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099CDAN
BgkqhkiG9w0BAQsFAAOCAQEAeLb/aiconpFT6blSisV7QlM2e4btfvpikoqXu76t
99WXZBRUp6+tHhKZE7C46r7GXfhAJ+73b+ZzDVWtcThijKie7YN0qqLSrSFWLRqn
qBfpRYvbAuy4p80YgWbdOVnx6DS13/NYkvJE0pul8/e4DhLQmFSiZEC0rJjTRuam
wnQxVBPnnxwV5Vp1D4utCF21UDlLIwfJk60zQ6LufqezJOhlRdE3xET2fw7vSDlB
9ZlKKk0evAybZ2F2bwUSABlSGYUj783jWs9aBy2mXwUnBx0TlP4PELDTReWSuwR4
F+OO9t7GEq+hnE+Vea/Fdv8W3nhiA0dhR6m2fnG0RkuKyA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:18 2026 by rpki-client