Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
File: 57b964c4-07ca-4501-bd01-5cb8936846cc.roa (raw, json)
Hash identifier: K4AurBohPB242YEqwg5Z8PwGi4nAkDxg6kwIoTuLX4E=
Subject key identifier: F1:68:6A:81:D7:55:A4:48:99:44:40:57:D4:69:EC:16:DB:F7:0C:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AF944A06E0B076406C4ACD626FB374E39B9EF71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
Signing time: Mon 26 Oct 2026 05:20:20 +0000
ROA not before: Mon 26 Oct 2026 05:20:20 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f9:44:a0:6e:0b:07:64:06:c4:ac:d6:26:fb:37:4e:39:b9:ef:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:20 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2d5b597adba7e8d3867ff94d7b353f0697cfe0d984256aeb557d3c6d5db17983, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:1d:22:ac:c3:2d:00:fd:59:7e:d6:4d:00:
aa:b5:10:00:c2:c1:a4:de:c7:82:cd:6f:af:f2:ec:
70:eb:1f:df:92:62:ff:19:fe:c3:85:4b:fd:c2:c8:
2e:38:60:97:8f:4a:4f:78:6d:1a:14:02:6e:94:13:
a1:ee:a7:87:4e:30:6c:cf:03:24:3c:c8:8e:04:78:
78:e5:99:47:aa:1f:24:f5:6c:c1:20:09:46:96:5d:
4c:25:e1:da:33:20:d9:64:8c:12:d5:fc:e4:05:f0:
4b:84:6e:42:e4:f2:b0:bc:e1:0b:4d:a8:aa:98:f2:
a2:40:0f:b0:bb:0a:55:f0:b0:ec:a4:8a:62:66:e2:
1b:e8:ae:f0:a8:93:d7:ce:4b:10:1a:32:ee:cd:99:
67:56:fa:9f:14:32:24:62:e2:51:19:97:99:e7:e1:
66:c2:b8:90:10:78:f1:4b:3a:05:0e:11:25:71:32:
e2:0e:5e:d2:d5:9b:23:69:ad:fa:4f:29:d4:34:e4:
b1:e8:ac:09:78:31:2d:31:7b:1b:f9:27:fb:b2:7e:
ba:15:be:18:86:f6:28:30:1e:c5:f4:42:da:b6:52:
0d:c8:06:3b:c9:b8:d7:b0:ca:f7:b8:cf:c0:30:21:
c1:01:7f:79:9d:a2:88:48:8d:5d:bc:ca:1e:dd:6a:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:6A:81:D7:55:A4:48:99:44:40:57:D4:69:EC:16:DB:F7:0C:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/57b964c4-07ca-4501-bd01-5cb8936846cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:32:40:87:66:7b:fe:ea:61:47:42:db:a1:84:c2:17:76:8b:
97:73:ce:0c:fa:1b:5a:99:f1:9c:9d:6d:64:0e:8b:5d:1d:ec:
15:01:4b:dd:c8:7b:e5:30:c2:10:69:77:a7:d1:ca:a9:57:dd:
1d:a8:89:94:07:0c:66:2b:ed:56:d4:d9:ae:72:18:95:9e:ea:
87:a5:a9:5b:6e:d2:37:c6:1c:3e:e2:c8:42:2e:e7:8b:1f:ac:
c3:60:0a:4e:bb:86:20:12:92:6e:4c:19:3a:97:28:27:dd:f7:
37:cd:9a:c7:76:de:29:c5:7a:3e:a5:c9:2c:d1:54:f8:6f:c1:
3f:17:64:46:93:59:d7:80:bf:65:19:31:c0:6b:41:77:16:7d:
8d:a8:2e:71:dc:3a:02:e9:20:7f:72:c9:d3:7c:79:9f:75:8c:
6e:05:e2:33:1e:f0:3a:3a:4a:54:30:d5:98:41:b1:0b:a7:09:
be:df:9f:9d:3b:af:13:17:20:7a:bd:ec:8b:1a:ff:a4:e3:2f:
f1:bb:d0:2e:ae:1a:f1:0e:94:27:a1:43:58:c4:b2:bf:f1:7c:
7c:a8:e1:07:c1:58:24:38:7c:7f:3d:d4:80:ee:b3:9c:7e:aa:
d3:32:5a:4e:c1:c6:fc:3d:a5:6e:05:21:59:80:c0:d2:5a:9a:
8f:ca:f4:af
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOvlEoG4LB2QGxKzWJvs3Tjm573EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIwMjBaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDJkNWI1OTdhZGJhN2U4ZDM4NjdmZjk0ZDdiMzUzZjA2OTdjZmUwZDk4NDI1
NmFlYjU1N2QzYzZkNWRiMTc5ODMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALk7HSKswy0A/Vl+1k0AqrUQAMLBpN7Hgs1vr/LscOsf35Ji/xn+w4VL/cLI
Ljhgl49KT3htGhQCbpQToe6nh04wbM8DJDzIjgR4eOWZR6ofJPVswSAJRpZdTCXh
2jMg2WSMEtX85AXwS4RuQuTysLzhC02oqpjyokAPsLsKVfCw7KSKYmbiG+iu8KiT
185LEBoy7s2ZZ1b6nxQyJGLiURmXmefhZsK4kBB48Us6BQ4RJXEy4g5e0tWbI2mt
+k8p1DTkseisCXgxLTF7G/kn+7J+uhW+GIb2KDAexfRC2rZSDcgGO8m417DK97jP
wDAhwQF/eZ2iiEiNXbzKHt1qLW0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTxaGqB
11WkSJlEQFfUaewW2/cMajAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTdiOTY0YzQtMDdjYS00NTAxLWJkMDEtNWNiODkzNjg0NmNjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+w
MA0GCSqGSIb3DQEBCwUAA4IBAQB7MkCHZnv+6mFHQtuhhMIXdouXc84M+htamfGc
nW1kDotdHewVAUvdyHvlMMIQaXen0cqpV90dqImUBwxmK+1W1NmuchiVnuqHpalb
btI3xhw+4shCLueLH6zDYApOu4YgEpJuTBk6lygn3fc3zZrHdt4pxXo+pcks0VT4
b8E/F2RGk1nXgL9lGTHAa0F3Fn2NqC5x3DoC6SB/csnTfHmfdYxuBeIzHvA6OkpU
MNWYQbELpwm+35+dO68TFyB6veyLGv+k4y/xu9AurhrxDpQnoUNYxLK/8Xx8qOEH
wVgkOHx/PdSA7rOcfqrTMlpOwcb8PaVuBSFZgMDSWpqPyvSv
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:22 2026 by rpki-client