Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
File: 4dc2c958-c749-4f2f-a83c-b419f7f45487.roa (raw, json)
Hash identifier: IO7l4ceJbBZl+MBpgxfkzSLRQUP9RIst+MOGn427BUk=
Subject key identifier: 49:99:AF:0A:8E:82:C9:C7:F0:DB:B9:C6:FF:F6:44:D6:A8:28:62:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5263A9D86FD53BE7A05A79A38CACB76808F277D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
Signing time: Mon 26 Oct 2026 05:10:19 +0000
ROA not before: Mon 26 Oct 2026 05:10:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:63:a9:d8:6f:d5:3b:e7:a0:5a:79:a3:8c:ac:b7:68:08:f2:77:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=99ff4039a5b3979a5771958724fc047d5bcedf28e15c08b830fe90f402d9d9d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:4e:cf:66:8f:4c:4f:74:b9:d6:75:eb:35:
1e:6d:ac:c2:58:16:d9:ee:d8:9e:55:27:02:3f:15:
05:55:26:90:dd:58:e1:0d:ae:95:d4:ee:bd:fc:3e:
e6:09:70:c6:e8:52:ec:81:1d:9f:70:92:25:d5:a3:
fe:2e:69:c5:85:43:36:b9:7e:41:a9:58:1c:0d:13:
bb:fb:1f:35:7b:7a:43:bf:b4:95:9d:5f:03:76:f1:
f5:00:01:26:40:e6:07:4a:44:7f:6b:87:b4:f3:b4:
af:99:05:1f:df:11:22:22:83:1e:d3:6a:a1:14:6f:
91:7d:32:d2:dc:09:27:0c:ad:5a:d0:33:60:b5:bb:
74:0e:f7:5a:3b:3c:86:b9:f6:f6:0c:ad:3b:cf:61:
ed:66:f1:9a:3e:92:5f:37:85:89:8f:39:5d:ff:59:
ba:3a:8a:3e:a8:46:94:31:04:ac:0d:7c:44:b3:48:
59:b5:be:15:d6:f3:92:73:1b:65:6b:d1:96:c6:41:
b8:ae:0f:f5:cb:fd:34:e3:a8:44:42:62:37:77:e7:
f2:d1:3c:fa:8a:02:2b:ef:f0:c1:4b:c1:70:43:80:
c8:f8:49:cf:1c:5e:df:33:64:74:18:bc:b9:b6:cc:
68:c9:f4:aa:e1:1a:bb:66:72:3c:01:6b:c7:76:1d:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:AF:0A:8E:82:C9:C7:F0:DB:B9:C6:FF:F6:44:D6:A8:28:62:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dc2c958-c749-4f2f-a83c-b419f7f45487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
0a:9f:dd:dc:80:67:36:cf:56:6e:99:d1:e5:24:e1:c9:d3:17:
10:80:10:0e:04:d0:12:44:a7:0b:c4:10:76:5c:d8:e9:29:93:
08:ca:a3:4a:5d:52:93:5d:93:e4:d1:8d:04:aa:0f:09:51:8a:
0d:01:20:e2:50:09:f6:a1:b6:cc:4f:31:66:1a:72:18:8e:9c:
66:7c:1e:b1:e1:37:bf:62:af:6c:50:c7:b4:c2:c0:15:f2:72:
d7:95:4a:28:97:72:77:7c:f4:ae:73:b7:46:d5:d4:14:c7:d1:
b0:44:2c:6f:3a:b8:df:d0:df:08:10:b0:07:8b:d1:72:52:f2:
e1:b1:de:05:f1:b2:37:c8:04:57:59:14:f9:fb:55:ed:90:5b:
d3:cf:0d:a4:d2:c8:b2:70:dd:45:27:d8:9a:8b:7d:ce:cc:d3:
90:87:c0:76:cb:19:82:03:4c:3d:e7:bb:3a:73:91:2c:26:21:
1b:1d:10:51:cf:6f:71:42:7e:7e:3b:09:cc:2b:75:09:45:80:
d5:90:ed:bd:6e:02:95:5c:2d:f8:5c:33:4f:15:ce:2a:81:8b:
b1:bd:3a:60:3f:dc:a0:c6:4c:98:6a:b4:c7:d6:4c:4a:72:ab:
90:f6:e2:0d:1b:e1:49:c8:d9:d4:34:62:07:70:f8:39:29:ae:
11:ad:dc:4f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUmOp2G/VO+egWnmjjKy3aAjyd9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTEwMTlaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDk5ZmY0MDM5YTViMzk3OWE1NzcxOTU4NzI0ZmMwNDdkNWJjZWRmMjhlMTVj
MDhiODMwZmU5MGY0MDJkOWQ5ZDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOMdTs9mj0xPdLnWdes1Hm2swlgW2e7YnlUnAj8VBVUmkN1Y4Q2uldTuvfw+
5glwxuhS7IEdn3CSJdWj/i5pxYVDNrl+QalYHA0Tu/sfNXt6Q7+0lZ1fA3bx9QAB
JkDmB0pEf2uHtPO0r5kFH98RIiKDHtNqoRRvkX0y0twJJwytWtAzYLW7dA73Wjs8
hrn29gytO89h7Wbxmj6SXzeFiY85Xf9ZujqKPqhGlDEErA18RLNIWbW+FdbzknMb
ZWvRlsZBuK4P9cv9NOOoREJiN3fn8tE8+ooCK+/wwUvBcEOAyPhJzxxe3zNkdBi8
ubbMaMn0quEau2ZyPAFrx3YdSJ8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRJma8K
joLJx/Dbucb/9kTWqChiIjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGRjMmM5NTgtYzc0OS00ZjJmLWE4M2MtYjQxOWY3ZjQ1NDg3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hrg
MA0GCSqGSIb3DQEBCwUAA4IBAQAKn93cgGc2z1ZumdHlJOHJ0xcQgBAOBNASRKcL
xBB2XNjpKZMIyqNKXVKTXZPk0Y0Eqg8JUYoNASDiUAn2obbMTzFmGnIYjpxmfB6x
4Te/Yq9sUMe0wsAV8nLXlUool3J3fPSuc7dG1dQUx9GwRCxvOrjf0N8IELAHi9Fy
UvLhsd4F8bI3yARXWRT5+1XtkFvTzw2k0siycN1FJ9iai33OzNOQh8B2yxmCA0w9
57s6c5EsJiEbHRBRz29xQn5+OwnMK3UJRYDVkO29bgKVXC34XDNPFc4qgYuxvTpg
P9ygxkyYarTH1kxKcquQ9uING+FJyNnUNGIHcPg5Ka4RrdxP
-----END CERTIFICATE-----
Generated at Sat Oct 31 16:39:42 2026 by rpki-client