Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File: 5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier: pSrKIkkb/q07pWn5JEzS4eMv/cYAmidXzaDpRBiAzKU=
Subject key identifier: A5:0F:9A:48:F9:03:7F:DF:9D:36:BE:79:4B:85:F2:66:10:46:1A:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52C556BF52E64C3CFEE96B4FFF33EA5BBD1A65C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time: Mon 26 Oct 2026 04:50:24 +0000
ROA not before: Mon 26 Oct 2026 04:50:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c5:56:bf:52:e6:4c:3c:fe:e9:6b:4f:ff:33:ea:5b:bd:1a:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=65d8e57a6704b2e5457abca9f63d2f28ba7a6c3b0d8eefa8f0bec7adb76ae815, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:c8:6f:48:42:30:c4:92:dc:bd:97:50:ad:
49:f0:47:b6:1f:df:e8:8b:b5:d0:2a:7e:5d:92:a5:
8f:ea:1a:8c:69:62:0f:0e:f6:10:59:15:42:60:c5:
ae:2a:44:69:f5:1d:e6:03:d8:d8:e7:1f:0a:05:5f:
a3:d8:3c:76:5c:d0:f5:4f:3c:8d:9b:ed:75:8f:ed:
1a:59:e1:eb:cf:5a:5a:42:fd:67:56:87:20:72:71:
88:e7:29:b8:1b:ab:68:2b:be:12:de:a7:7c:0b:0c:
ed:b5:5b:e4:23:03:6a:85:0b:38:ec:d0:18:e3:0a:
cc:30:45:b9:cc:83:8c:cc:f3:9c:97:85:4d:76:de:
3e:ec:cd:61:17:a2:bf:50:6c:1a:d5:5c:0a:8c:16:
f0:0a:9c:e9:2f:89:0a:43:3d:4b:16:99:82:ed:33:
fe:7d:8e:cd:56:4c:41:98:00:c6:aa:05:fb:9c:f6:
de:8b:53:19:0c:eb:64:6f:11:3f:5e:2f:32:12:9f:
bb:32:5b:b6:32:0b:09:20:f7:8f:87:d1:7e:dc:cc:
6b:b7:6e:cc:8a:e8:e6:56:55:f5:cf:9c:1b:2b:67:
5c:c6:25:1a:96:50:52:1f:fd:33:36:52:86:34:96:
6a:a6:05:7a:44:fe:03:01:4c:bd:b5:7e:2f:00:54:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:9A:48:F9:03:7F:DF:9D:36:BE:79:4B:85:F2:66:10:46:1A:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:c000::/40
Signature Algorithm: sha256WithRSAEncryption
4e:81:65:6b:b0:d3:d2:b5:e9:ba:e0:11:8c:81:e4:77:6a:0f:
91:ec:4a:1c:e3:d0:ca:76:cc:a3:de:f1:43:db:b8:65:1f:fe:
09:6a:7b:29:90:cc:8a:0a:00:23:1b:ca:59:3e:2b:bd:61:2f:
cc:08:f7:0e:41:88:dc:85:07:b2:a4:15:8f:25:24:b1:92:57:
6a:5b:7d:a8:a8:c5:d3:f8:41:19:38:04:2b:0a:c1:54:63:4b:
e7:1a:7e:d3:43:79:ac:15:c7:d6:8e:1f:d0:4a:f7:46:b9:63:
db:f6:12:55:a2:ad:79:bc:25:d3:a1:5f:10:4f:b4:e2:d0:f2:
61:07:05:60:c6:fc:0d:a1:75:c9:45:0e:29:8c:9a:9e:d7:b5:
3f:b3:36:fd:fe:78:df:dd:8a:44:ce:da:af:46:28:e5:01:ea:
2c:da:6a:a6:1f:61:fa:cc:a9:45:0f:4b:96:28:78:50:b4:64:
1c:61:0b:6a:82:c0:fc:85:47:ac:5f:7d:56:52:2c:b1:ec:b0:
e9:03:cb:21:87:72:e9:7d:c4:17:74:a3:91:96:2a:18:c5:73:
3a:58:b8:c0:70:30:a7:8b:65:8a:ca:4e:e8:ea:54:53:e9:d2:
db:cb:6f:61:3d:36:99:29:1f:77:75:a6:c9:0c:ec:e2:b4:3a:
22:df:28:19
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUsVWv1LmTDz+6WtP/zPqW70aZcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwMjRaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDY1ZDhlNTdhNjcwNGIyZTU0NTdhYmNhOWY2M2QyZjI4YmE3YTZjM2IwZDhl
ZWZhOGYwYmVjN2FkYjc2YWU4MTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfDyG9IQjDEkty9l1CtSfBHth/f6Iu10Cp+XZKlj+oajGliDw72EFkVQmDF
ripEafUd5gPY2OcfCgVfo9g8dlzQ9U88jZvtdY/tGlnh689aWkL9Z1aHIHJxiOcp
uBuraCu+Et6nfAsM7bVb5CMDaoULOOzQGOMKzDBFucyDjMzznJeFTXbePuzNYRei
v1BsGtVcCowW8Aqc6S+JCkM9SxaZgu0z/n2OzVZMQZgAxqoF+5z23otTGQzrZG8R
P14vMhKfuzJbtjILCSD3j4fRftzMa7duzIro5lZV9c+cGytnXMYlGpZQUh/9MzZS
hjSWaqYFekT+AwFMvbV+LwBUfLECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSlD5pI
+QN/3502vnlLhfJmEEYaCjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTc2N2UzNTYtMjMxYi00Yjg3LTk4YWItYzQ5NmRjYzJkNTNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DbA
MA0GCSqGSIb3DQEBCwUAA4IBAQBOgWVrsNPStem64BGMgeR3ag+R7Eoc49DKdsyj
3vFD27hlH/4JanspkMyKCgAjG8pZPiu9YS/MCPcOQYjchQeypBWPJSSxkldqW32o
qMXT+EEZOAQrCsFUY0vnGn7TQ3msFcfWjh/QSvdGuWPb9hJVoq15vCXToV8QT7Ti
0PJhBwVgxvwNoXXJRQ4pjJqe17U/szb9/njf3YpEztqvRijlAeos2mqmH2H6zKlF
D0uWKHhQtGQcYQtqgsD8hUesX31WUiyx7LDpA8shh3LpfcQXdKORlioYxXM6WLjA
cDCni2WKyk7o6lRT6dLby29hPTaZKR93dabJDOzitDoi3ygZ
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:47:13 2026 by rpki-client