Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
File: 4ee4d823-9869-449e-9541-10a647125e4a.roa (raw, json)
Hash identifier: TSHu7fQN2DoHBVBYgS2UXw+mEQhmhOOUKTn6+f2gPPY=
Subject key identifier: 5A:8A:99:2E:0C:BF:6D:E9:98:AD:3B:C1:3B:59:E9:8F:BE:C8:AB:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C5FE0E48B731B6B8976DE5AC5B01C473ED0616E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
Signing time: Mon 26 Oct 2026 05:20:06 +0000
ROA not before: Mon 26 Oct 2026 05:20:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5f:e0:e4:8b:73:1b:6b:89:76:de:5a:c5:b0:1c:47:3e:d0:61:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e6c5fc15871c30ca0a8f2a607aec45a2e0bac7873443979ba6821503622814cc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:5c:b0:2c:f7:72:b2:f2:c6:90:83:db:a5:
2f:f3:8b:8a:63:f7:28:11:25:c2:92:c1:38:fa:e3:
5d:a5:5a:b6:96:41:50:5f:56:bb:e7:83:8c:69:46:
48:8f:36:c4:2f:09:1d:41:5d:19:5d:1b:05:86:99:
3d:ce:87:3a:0e:ce:7f:32:8f:93:b8:06:ad:8c:92:
bd:d3:7d:91:23:8d:da:09:59:d2:5b:0e:93:c5:9a:
4e:c5:42:ac:7f:c5:0f:8f:a5:b3:e4:f8:73:f8:1f:
80:78:cf:8d:8f:84:05:fd:e9:be:7e:f8:b6:af:00:
05:a5:a3:39:be:73:0c:28:3e:6a:37:ea:ff:c0:cb:
50:1e:b9:cf:e7:ec:1e:fc:0f:f2:04:d5:ae:c6:a2:
d2:82:4b:45:23:f4:44:bc:c8:e3:0d:b6:97:51:0b:
48:50:5c:df:8d:ee:d3:87:2c:10:1c:9e:90:5c:65:
ab:9b:2f:cf:16:7c:87:c0:19:26:fc:aa:d8:ea:89:
44:34:9c:9d:4c:b0:47:89:be:18:33:0c:f3:db:18:
e8:5a:4b:36:48:a2:f5:42:af:17:67:df:53:a3:52:
7b:ac:59:e6:20:28:30:bb:05:09:57:ca:2c:a4:a0:
a4:96:66:c5:56:a1:2a:90:e4:54:54:f9:73:06:a6:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:99:2E:0C:BF:6D:E9:98:AD:3B:C1:3B:59:E9:8F:BE:C8:AB:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
69:12:c4:f3:e5:db:c2:99:4f:85:cc:10:85:15:4e:57:48:59:
a6:3b:c5:ae:9f:04:d4:7c:27:0e:69:c3:21:33:15:21:85:d5:
72:cd:2c:2d:96:15:02:38:ec:d6:c8:60:e1:c8:01:b4:8c:c3:
53:33:5a:45:d6:7b:9a:5f:1d:db:4e:7b:69:7b:0a:97:be:7b:
b1:85:18:0b:de:16:ea:8d:9d:b0:9e:85:c4:44:19:4d:b5:22:
1d:10:2c:b2:b5:91:e0:47:07:ff:a8:0f:74:94:5e:6c:fb:8b:
d1:ff:17:31:e1:5f:7a:b4:7d:4d:e5:c4:ac:e5:b7:95:43:4a:
d5:41:aa:10:a7:f6:51:53:a9:b4:2c:0c:83:39:5d:eb:c9:bf:
d3:5f:e5:89:f3:b7:5e:71:63:a5:75:3c:22:ef:4d:bb:14:62:
57:7c:f6:72:52:61:d8:c5:97:62:10:40:21:64:e3:a7:30:6d:
5f:87:a8:60:6e:c8:ea:6b:4d:30:24:8a:33:b5:6a:fa:fd:3d:
e1:20:e4:65:f3:72:27:ec:5b:a4:9f:99:7f:17:71:f5:32:6f:
b8:48:0c:75:8c:84:72:9f:50:6d:b4:51:30:76:3d:a7:8f:36:
d5:31:57:16:32:4d:92:4c:ec:ed:b0:52:1f:0e:74:83:26:d6:
6a:0a:7f:46
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHF/g5ItzG2uJdt5axbAcRz7QYW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIwMDZaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU2YzVmYzE1ODcxYzMwY2EwYThmMmE2MDdhZWM0NWEyZTBiYWM3ODczNDQz
OTc5YmE2ODIxNTAzNjIyODE0Y2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMZJXLAs93Ky8saQg9ulL/OLimP3KBElwpLBOPrjXaVatpZBUF9Wu+eDjGlG
SI82xC8JHUFdGV0bBYaZPc6HOg7OfzKPk7gGrYySvdN9kSON2glZ0lsOk8WaTsVC
rH/FD4+ls+T4c/gfgHjPjY+EBf3pvn74tq8ABaWjOb5zDCg+ajfq/8DLUB65z+fs
HvwP8gTVrsai0oJLRSP0RLzI4w22l1ELSFBc343u04csEByekFxlq5svzxZ8h8AZ
Jvyq2OqJRDScnUywR4m+GDMM89sY6FpLNkii9UKvF2ffU6NSe6xZ5iAoMLsFCVfK
LKSgpJZmxVahKpDkVFT5cwamde0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRaipku
DL9t6ZitO8E7WemPvsirCTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGVlNGQ4MjMtOTg2OS00NDllLTk1NDEtMTBhNjQ3MTI1ZTRhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H/A
MA0GCSqGSIb3DQEBCwUAA4IBAQBpEsTz5dvCmU+FzBCFFU5XSFmmO8WunwTUfCcO
acMhMxUhhdVyzSwtlhUCOOzWyGDhyAG0jMNTM1pF1nuaXx3bTntpewqXvnuxhRgL
3hbqjZ2wnoXERBlNtSIdECyytZHgRwf/qA90lF5s+4vR/xcx4V96tH1N5cSs5beV
Q0rVQaoQp/ZRU6m0LAyDOV3ryb/TX+WJ87decWOldTwi7027FGJXfPZyUmHYxZdi
EEAhZOOnMG1fh6hgbsjqa00wJIoztWr6/T3hIORl83In7Fukn5l/F3H1Mm+4SAx1
jIRyn1BttFEwdj2njzbVMVcWMk2STOztsFIfDnSDJtZqCn9G
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:43:51 2026 by rpki-client