Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
File: 4cf83881-74f7-4033-977b-362e08e8d6d2.roa (raw, json)
Hash identifier: WLhcSuuFC9r7oGFS/V1kFNICB0eIUEWX/JUpEVHnL24=
Subject key identifier: 74:55:29:45:F7:98:A6:61:4C:F3:1D:26:B4:5E:B3:CE:61:30:20:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C3B31BE0DB44BA4C6780074A98C6C5AEBD906D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
Signing time: Sat 24 Oct 2026 02:03:12 +0000
ROA not before: Sat 24 Oct 2026 02:03:12 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3b:31:be:0d:b4:4b:a4:c6:78:00:74:a9:8c:6c:5a:eb:d9:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:03:12 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=7b42777c0c5f514af18e622ed699dd369230723bee35b5035d4284c52225e480, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:c9:ab:a2:41:f0:f6:a3:00:27:5a:11:9c:
a8:90:91:15:d9:29:0e:1a:dc:50:5b:89:59:ef:5c:
a5:87:01:22:26:d9:7d:e0:d8:4d:3c:9a:d5:e3:70:
50:90:a8:ea:af:07:28:53:af:4d:66:4d:07:3d:60:
50:05:f2:9b:c0:04:59:15:74:bf:66:b6:24:ed:bf:
2e:4d:6f:89:c4:57:e8:bf:96:0f:86:45:0e:3f:0b:
85:90:39:be:9b:b7:63:1d:57:c3:82:b8:5f:66:33:
c9:bc:2e:55:51:13:1d:65:eb:2f:38:a2:21:bf:49:
fa:62:a5:49:08:e3:2a:91:6a:0f:bc:f2:c7:c6:96:
87:e7:55:71:af:fb:7a:26:ba:09:33:b2:91:e2:29:
13:82:c0:1d:13:ba:37:83:6d:eb:e7:e9:9a:2a:fd:
d8:f3:78:c9:81:8b:43:f4:c3:7f:76:49:43:d6:96:
e0:9b:d4:42:47:0b:cb:cf:66:cf:00:31:63:78:84:
15:39:2c:15:c5:66:59:0f:bd:7a:34:40:83:db:7e:
3e:55:e1:a0:cb:fe:73:8d:48:e8:fc:92:42:e5:a0:
7d:b3:6f:1c:6b:e8:7a:96:6e:10:5b:23:0f:90:ce:
e9:59:e1:ed:06:1f:83:a2:75:22:11:7a:40:2d:df:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:29:45:F7:98:A6:61:4C:F3:1D:26:B4:5E:B3:CE:61:30:20:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:840::/48
Signature Algorithm: sha256WithRSAEncryption
2c:66:10:a7:f8:24:64:f5:6c:73:cb:7c:80:7a:75:1d:21:9a:
53:8b:96:96:f8:9e:1d:d3:9f:c1:88:db:f1:89:fa:66:31:0f:
f8:2f:2f:91:9b:43:29:b3:84:5c:59:3b:22:ad:3e:8f:ba:d4:
bc:18:d4:56:df:69:51:15:f9:ab:bd:9b:4d:b7:80:0c:01:5b:
c2:e1:ff:c3:ef:93:d3:84:99:83:6b:de:a4:5d:e9:d3:9a:2d:
37:42:23:50:e5:31:ea:53:92:c7:50:5e:79:0a:bd:49:27:f5:
d1:42:50:0f:a7:60:0a:a5:df:eb:18:ea:f7:c0:ba:d3:39:17:
68:fa:cd:63:5d:d0:06:43:4e:a6:05:05:77:b5:df:7a:bb:cc:
a4:0d:b6:e9:0f:4b:aa:11:a1:d6:8b:7a:30:5a:99:86:a4:d1:
81:e8:93:03:db:af:7d:25:83:84:f0:03:b0:ee:33:5e:ef:50:
96:09:29:e7:69:d1:13:9d:3a:a7:ae:88:1f:90:43:dc:89:7b:
bc:e7:66:e9:7b:6e:cb:67:f6:f4:4e:e5:45:49:28:10:81:6a:
d0:61:ea:cf:43:90:a4:8e:e5:61:47:1e:f3:ad:7c:3b:a2:cb:
86:f8:53:93:07:85:3c:a2:f9:40:5e:a8:17:f3:74:14:77:fb:
2f:7b:ad:08
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUXDsxvg20S6TGeAB0qYxsWuvZBtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjQwMjAzMTJaFw0yNzAxMjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDdiNDI3NzdjMGM1ZjUxNGFmMThlNjIyZWQ2OTlkZDM2OTIzMDcyM2JlZTM1
YjUwMzVkNDI4NGM1MjIyNWU0ODAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANIJyauiQfD2owAnWhGcqJCRFdkpDhrcUFuJWe9cpYcBIibZfeDYTTya1eNw
UJCo6q8HKFOvTWZNBz1gUAXym8AEWRV0v2a2JO2/Lk1vicRX6L+WD4ZFDj8LhZA5
vpu3Yx1Xw4K4X2YzybwuVVETHWXrLziiIb9J+mKlSQjjKpFqD7zyx8aWh+dVca/7
eia6CTOykeIpE4LAHRO6N4Nt6+fpmir92PN4yYGLQ/TDf3ZJQ9aW4JvUQkcLy89m
zwAxY3iEFTksFcVmWQ+9ejRAg9t+PlXhoMv+c41I6PySQuWgfbNvHGvoepZuEFsj
D5DO6Vnh7QYfg6J1IhF6QC3fGysCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR0VSlF
95imYUzzHSa0XrPOYTAgzjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGNmODM4ODEtNzRmNy00MDMzLTk3N2ItMzYyZTA4ZThkNmQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HII
QDANBgkqhkiG9w0BAQsFAAOCAQEALGYQp/gkZPVsc8t8gHp1HSGaU4uWlvieHdOf
wYjb8Yn6ZjEP+C8vkZtDKbOEXFk7Iq0+j7rUvBjUVt9pURX5q72bTbeADAFbwuH/
w++T04SZg2vepF3p05otN0IjUOUx6lOSx1BeeQq9SSf10UJQD6dgCqXf6xjq98C6
0zkXaPrNY13QBkNOpgUFd7XfervMpA226Q9LqhGh1ot6MFqZhqTRgeiTA9uvfSWD
hPADsO4zXu9Qlgkp52nRE506p66IH5BD3Il7vOdm6Xtuy2f29E7lRUkoEIFq0GHq
z0OQpI7lYUce8618O6LLhvhTkweFPKL5QF6oF/N0FHf7L3utCA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 20:37:58 2026 by rpki-client