Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50b60672-d484-48a0-9016-474bafea8912.roa
File: 50b60672-d484-48a0-9016-474bafea8912.roa (raw, json)
Hash identifier: Xw9FtoaU1yUGgG7A3zR3XXgjZibx5+rjwcj5FpTgQTo=
Subject key identifier: 21:10:91:C1:69:1B:08:C8:5F:20:8D:88:71:46:1E:06:28:A4:E6:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BF3A32B6CA6B8170F4017BD99317CC2E12289D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50b60672-d484-48a0-9016-474bafea8912.roa
Signing time: Mon 26 Oct 2026 04:50:25 +0000
ROA not before: Mon 26 Oct 2026 04:50:25 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f3:a3:2b:6c:a6:b8:17:0f:40:17:bd:99:31:7c:c2:e1:22:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:25 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1433d1bef0f494b310d26ab46cd9ff8ba764c1a075fee0e6ff5c0a84da2998c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:e1:2a:76:96:ec:8d:7f:3e:91:83:1e:1b:
c1:78:4f:29:e2:51:fa:97:4c:d2:de:4c:f2:88:d3:
91:2d:d7:c4:77:6f:df:e4:6e:d6:3b:07:e4:4c:64:
73:a1:ef:7c:bd:08:71:e3:60:26:65:1b:ba:a9:4c:
28:01:18:32:bd:88:1e:d5:f1:c9:ef:a8:9c:85:f8:
57:4f:7a:bf:57:a2:99:de:f0:86:37:bd:31:04:0b:
fe:c6:06:ca:f6:e4:de:3b:f5:f5:50:a3:a9:76:f7:
77:9c:48:04:ae:74:fd:81:eb:a0:08:9b:02:6b:ff:
19:48:76:83:b1:89:62:45:55:36:3e:e4:64:33:61:
af:0f:d8:73:3e:8b:10:20:2a:24:bc:93:c3:56:1f:
22:26:c6:90:75:37:c2:41:6d:0d:13:ae:dd:7f:fd:
66:2b:1a:43:35:02:66:d3:30:e0:ff:21:f8:5f:c2:
bf:d1:65:17:42:5b:77:6e:c0:5d:78:1a:77:78:42:
9e:10:1b:44:8d:2a:8b:22:17:c5:ae:03:8f:2e:b2:
ad:a6:49:70:cb:06:6e:40:fd:c3:86:db:ab:0d:4c:
48:84:c9:be:dc:5b:91:cc:67:78:06:8f:a5:10:fa:
7d:96:2e:8b:9a:01:91:db:c9:97:92:f0:93:ec:76:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:91:C1:69:1B:08:C8:5F:20:8D:88:71:46:1E:06:28:A4:E6:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/50b60672-d484-48a0-9016-474bafea8912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016::/36
Signature Algorithm: sha256WithRSAEncryption
72:85:a7:00:21:8a:80:a4:48:8f:17:dd:9b:9e:83:71:83:65:
37:39:30:76:70:d6:c6:5d:33:2c:f7:62:ed:51:cb:40:f2:d1:
f4:3f:ce:49:f6:65:7d:56:80:89:c9:23:d1:0f:94:94:e9:f7:
b3:d3:16:ff:56:15:c8:46:e5:7e:3b:cb:53:c0:5a:f8:a8:de:
2e:db:03:50:9a:33:7b:cb:26:f8:bb:ca:dc:f0:48:92:c9:fd:
2b:d6:40:ac:c8:ba:f4:81:2d:29:d0:f6:38:66:95:71:1b:0c:
65:2d:0a:d4:ff:82:4d:20:8f:23:21:f9:ec:b6:65:a6:9f:1e:
9d:20:24:c3:c1:f0:0f:08:90:2f:b7:cd:d7:f5:78:c5:05:f8:
f5:db:25:29:18:22:e6:91:28:68:df:26:3b:49:3f:2a:8c:30:
12:87:b8:02:74:c9:f5:af:40:83:49:c2:55:c2:98:40:dc:18:
fa:af:ca:eb:f8:7a:6a:0a:18:5d:67:22:96:c6:06:c1:4f:b1:
8b:10:63:1f:6c:46:d9:71:05:b1:2f:48:e3:f0:4c:b0:35:27:
65:36:10:60:fb:09:b9:d5:fd:a6:11:02:76:7d:34:da:e4:f0:
98:8e:c8:c1:51:5d:cd:ec:d4:5a:70:67:54:d7:ee:18:b5:a8:
00:2f:4f:ed
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUe/OjK2ymuBcPQBe9mTF8wuEiidUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwMjVaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0MzNkMWJlZjBmNDk0YjMxMGQyNmFiNDZjZDlmZjhiYTc2NGMxYTA3NWZl
ZTBlNmZmNWMwYTg0ZGEyOTk4YzIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdc4Sp2luyNfz6Rgx4bwXhPKeJR+pdM0t5M8ojTkS3XxHdv3+Ru1jsH5Exk
c6HvfL0IceNgJmUbuqlMKAEYMr2IHtXxye+onIX4V096v1eimd7whje9MQQL/sYG
yvbk3jv19VCjqXb3d5xIBK50/YHroAibAmv/GUh2g7GJYkVVNj7kZDNhrw/Ycz6L
ECAqJLyTw1YfIibGkHU3wkFtDROu3X/9ZisaQzUCZtMw4P8h+F/Cv9FlF0Jbd27A
XXgad3hCnhAbRI0qiyIXxa4Djy6yraZJcMsGbkD9w4bbqw1MSITJvtxbkcxneAaP
pRD6fZYui5oBkdvJl5Lwk+x2ARMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhEJHB
aRsIyF8gjYhxRh4GKKTmYDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTBiNjA2NzItZDQ4NC00OGEwLTkwMTYtNDc0YmFmZWE4OTEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BYA
MA0GCSqGSIb3DQEBCwUAA4IBAQByhacAIYqApEiPF92bnoNxg2U3OTB2cNbGXTMs
92LtUctA8tH0P85J9mV9VoCJySPRD5SU6fez0xb/VhXIRuV+O8tTwFr4qN4u2wNQ
mjN7yyb4u8rc8EiSyf0r1kCsyLr0gS0p0PY4ZpVxGwxlLQrU/4JNII8jIfnstmWm
nx6dICTDwfAPCJAvt83X9XjFBfj12yUpGCLmkSho3yY7ST8qjDASh7gCdMn1r0CD
ScJVwphA3Bj6r8rr+HpqChhdZyKWxgbBT7GLEGMfbEbZcQWxL0jj8EywNSdlNhBg
+wm51f2mEQJ2fTTa5PCYjsjBUV3N7NRacGdU1+4YtagAL0/t
-----END CERTIFICATE-----
Generated at Sun Nov 1 12:41:29 2026 by rpki-client