Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
File: 5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa (raw, json)
Hash identifier: E0sVMGmcFgxzDvIbpjwPZvKyZWerjOEVU80C1vNVJDw=
Subject key identifier: B5:19:FE:0A:29:DA:70:A2:B6:84:1A:CF:5F:B7:7A:8E:24:25:0F:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50C7406CBDBF5D41AA4BF250E08DDD0F5BD4BFD6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
Signing time: Sun 04 Oct 2026 00:30:16 +0000
ROA not before: Sun 04 Oct 2026 00:30:16 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c7:40:6c:bd:bf:5d:41:aa:4b:f2:50:e0:8d:dd:0f:5b:d4:bf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:16 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=3250a381578cbd3de14ab19bfa496473c5627fc41850647fd3c2f2a71c748c7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a4:59:4c:1d:8a:31:01:f2:13:31:dd:83:7e:
92:25:b7:cb:b6:2d:2a:1e:d5:ce:24:ba:66:4b:fa:
e0:8e:2e:40:91:4a:03:a4:72:c7:71:5c:08:84:28:
29:6a:7f:5f:73:1f:a5:08:b2:33:e0:d1:03:7b:ad:
e5:55:8c:a4:7d:8f:5f:fc:51:4b:3d:d2:3a:14:ac:
05:ca:12:6f:fd:c3:96:09:c4:f0:90:09:51:3b:b5:
f9:01:c3:e3:d2:db:64:bc:b6:18:b4:46:43:aa:27:
67:45:3f:07:e6:07:7a:17:e5:42:47:ad:66:d7:39:
d1:b9:34:52:76:3e:76:ce:a2:cf:d6:54:cd:69:c9:
ff:32:22:66:2b:6e:13:5d:6f:c6:34:e9:b6:e0:7a:
4a:4d:8f:c3:df:ea:c9:81:bb:c4:4a:c0:d1:34:ac:
d2:cb:82:d1:8f:ca:5c:40:e6:3f:75:6b:71:e2:4d:
06:32:8e:3f:e3:ae:c5:6d:61:5b:24:18:c0:79:5f:
d8:e1:c3:69:e4:0c:9d:de:64:75:ae:93:13:ba:33:
b8:13:f8:2f:ce:fb:c1:6b:13:ec:27:4d:3d:49:9c:
ce:64:eb:17:d8:eb:6f:3a:91:7b:d6:27:4c:a8:7b:
89:76:29:43:6d:82:04:13:0e:ac:98:7c:01:13:1c:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:FE:0A:29:DA:70:A2:B6:84:1A:CF:5F:B7:7A:8E:24:25:0F:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
a9:20:16:7d:8a:2c:1e:18:e7:49:b5:c1:3f:7c:e3:c6:4e:6c:
4d:4d:fc:c5:ea:dd:ef:2e:f5:e3:26:ed:a1:5e:7a:8d:c5:55:
db:e8:6f:21:34:b8:7d:18:d7:19:a8:0f:fd:0a:74:aa:2f:7d:
71:9b:a4:50:b1:3d:79:4b:3e:9b:84:0f:6c:5d:0b:57:03:7c:
d5:4e:a0:df:9d:80:d4:d9:98:a0:4f:98:d1:83:13:8c:8d:f3:
5a:a6:30:97:84:72:6a:d5:81:6f:0c:f4:ce:46:9e:c6:c1:38:
e1:12:5f:cd:8b:8a:ef:cf:c6:bb:23:b0:42:3d:eb:f7:1a:4a:
f6:42:eb:fd:a5:e5:af:26:72:dc:f7:0f:20:b6:a3:ee:6e:b2:
2d:3c:11:b1:fc:ba:61:86:1b:d8:6c:38:98:bf:a9:e1:19:e8:
4f:ef:3a:99:cc:c9:6f:47:1e:9b:67:ec:82:b5:70:70:41:68:
b7:a0:4e:93:49:d9:2f:18:e5:65:c6:da:54:d2:20:59:8a:c1:
22:ea:91:54:1c:21:87:f0:01:02:d9:35:3e:b8:88:51:1c:0c:
a8:67:ad:f0:95:05:3e:ea:f3:fc:16:a8:74:50:af:a0:d5:61:
24:83:8a:c3:a7:3d:5b:7c:fe:fc:3b:a4:62:0c:9c:38:73:92:
a4:b3:68:72
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUMdAbL2/XUGqS/JQ4I3dD1vUv9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDQwMDMwMTZaFw0yNzAxMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDMyNTBhMzgxNTc4Y2JkM2RlMTRhYjE5YmZhNDk2NDczYzU2MjdmYzQxODUw
NjQ3ZmQzYzJmMmE3MWM3NDhjN2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOukWUwdijEB8hMx3YN+kiW3y7YtKh7VziS6Zkv64I4uQJFKA6Ryx3FcCIQo
KWp/X3MfpQiyM+DRA3ut5VWMpH2PX/xRSz3SOhSsBcoSb/3DlgnE8JAJUTu1+QHD
49LbZLy2GLRGQ6onZ0U/B+YHehflQketZtc50bk0UnY+ds6iz9ZUzWnJ/zIiZitu
E11vxjTptuB6Sk2Pw9/qyYG7xErA0TSs0suC0Y/KXEDmP3VrceJNBjKOP+OuxW1h
WyQYwHlf2OHDaeQMnd5kda6TE7ozuBP4L877wWsT7CdNPUmczmTrF9jrbzqRe9Yn
TKh7iXYpQ22CBBMOrJh8ARMcsXsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS1Gf4K
KdpworaEGs9ft3qOJCUPyzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWNjYTdjNzMtN2E4Mi00M2ZjLTgxYWEtNjU3YWUwYjBiYzMwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G2A
gDANBgkqhkiG9w0BAQsFAAOCAQEAqSAWfYosHhjnSbXBP3zjxk5sTU38xerd7y71
4ybtoV56jcVV2+hvITS4fRjXGagP/Qp0qi99cZukULE9eUs+m4QPbF0LVwN81U6g
352A1NmYoE+Y0YMTjI3zWqYwl4RyatWBbwz0zkaexsE44RJfzYuK78/GuyOwQj3r
9xpK9kLr/aXlryZy3PcPILaj7m6yLTwRsfy6YYYb2Gw4mL+p4RnoT+86mczJb0ce
m2fsgrVwcEFot6BOk0nZLxjlZcbaVNIgWYrBIuqRVBwhh/ABAtk1PriIURwMqGet
8JUFPurz/BaodFCvoNVhJIOKw6c9W3z+/DukYgycOHOSpLNocg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:46:44 2026 by rpki-client