Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
File: 6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa (raw, json)
Hash identifier: h9mN4R5Vxyo25Z6G5sULwdsiQL7rQDa5QcJIjo541fc=
Subject key identifier: 98:D4:00:B5:98:74:8F:B9:50:9B:F4:7B:72:85:69:F9:3D:A2:D9:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 714C7D207BDAC681D4E6EF0949D8E7170B2F946F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
Signing time: Sun 04 Oct 2026 00:30:15 +0000
ROA not before: Sun 04 Oct 2026 00:30:15 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4c:7d:20:7b:da:c6:81:d4:e6:ef:09:49:d8:e7:17:0b:2f:94:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:15 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=5d946094fafd0ec01db16be158e09c99efd59af851d44e2e9243ecc37a7f0c62, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:3a:22:23:9c:fd:bc:0e:ae:a5:ff:ad:0e:
f9:29:31:26:de:bd:d0:c7:c1:94:ef:5c:e5:60:a5:
64:dc:33:03:f0:a0:96:81:ac:c2:43:57:d8:a4:c8:
b0:b3:6c:5c:5e:d5:7a:4b:3c:85:b2:a7:b8:ea:6b:
d2:f6:54:fc:3b:40:5a:a8:9c:a4:c1:d0:85:e8:b2:
95:75:df:5f:1e:cd:26:41:36:7d:14:cc:ac:4f:90:
80:8d:81:a4:a0:9f:fe:45:2f:6e:3f:87:e8:ca:9b:
9e:1b:80:4d:c9:38:fc:2e:49:4a:09:ab:47:75:a5:
e7:0f:d0:b3:b4:5d:e0:1c:df:31:d7:b9:28:2d:05:
e1:10:43:4f:2d:b7:62:12:09:6c:2c:21:1c:7c:04:
38:61:07:38:04:a5:13:50:3e:5e:e2:3d:79:60:08:
6b:74:a1:a8:76:22:80:8e:04:d8:1e:42:5e:fb:ad:
9f:43:7f:ec:fe:55:0b:6f:a0:e1:95:27:e5:70:76:
86:c7:b4:aa:e2:d7:a6:11:2a:5d:ef:6c:00:9f:71:
f0:27:93:94:27:f3:e4:1c:4a:25:51:46:0f:33:fd:
1a:87:4d:e4:4a:52:ed:e0:23:26:bb:a8:be:b2:8d:
f3:8e:71:7d:37:f9:0f:af:3e:60:60:2c:f8:34:b7:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:00:B5:98:74:8F:B9:50:9B:F4:7B:72:85:69:F9:3D:A2:D9:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6027ce14-95d4-4f5a-9a58-52d26678ea8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
37:01:c4:23:5a:d6:cc:b1:76:bf:32:62:62:02:46:ca:c5:2f:
1d:ca:d6:b9:0f:4c:df:68:22:23:71:e9:39:14:e8:c0:c2:f9:
5b:79:5f:76:9d:12:ea:46:e3:4e:09:7b:8d:78:c1:37:56:70:
85:1f:cc:61:51:66:a2:40:0f:c9:39:bc:b4:57:d0:5d:4e:94:
fc:0c:80:39:1d:87:19:66:54:51:29:4b:b2:c4:72:7f:b0:bc:
49:75:a2:c6:22:6f:88:c7:1f:5a:05:bb:df:fb:77:9c:11:a5:
25:d0:35:d3:97:75:a8:49:ec:ed:b8:fd:4a:63:6a:f6:c1:5e:
ee:db:00:84:53:dc:b6:87:75:8a:df:dc:70:29:e7:d9:2e:c9:
38:e3:a5:3f:55:29:8c:34:e2:c8:22:0c:9c:65:a6:2a:e1:c5:
04:bf:a8:52:79:54:f4:fd:b3:7c:a2:af:32:39:ec:dc:23:51:
be:96:d3:a5:cb:eb:c7:2f:44:fa:4c:bf:99:ca:13:0c:05:82:
31:30:3b:47:b8:76:5c:87:c0:61:62:08:71:f2:70:ea:39:26:
74:f4:1e:4d:cd:43:de:cb:8a:68:2a:cf:dd:e1:6c:dc:e8:04:
82:3d:9a:83:77:6e:9d:e6:4f:cf:d4:ad:86:b1:c3:90:39:1f:
2d:7b:cd:12
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcUx9IHvaxoHU5u8JSdjnFwsvlG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDQwMDMwMTVaFw0yNzAxMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDVkOTQ2MDk0ZmFmZDBlYzAxZGIxNmJlMTU4ZTA5Yzk5ZWZkNTlhZjg1MWQ0
NGUyZTkyNDNlY2MzN2E3ZjBjNjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBfOiIjnP28Dq6l/60O+SkxJt690MfBlO9c5WClZNwzA/CgloGswkNX2KTI
sLNsXF7Veks8hbKnuOpr0vZU/DtAWqicpMHQheiylXXfXx7NJkE2fRTMrE+QgI2B
pKCf/kUvbj+H6MqbnhuATck4/C5JSgmrR3Wl5w/Qs7Rd4BzfMde5KC0F4RBDTy23
YhIJbCwhHHwEOGEHOASlE1A+XuI9eWAIa3ShqHYigI4E2B5CXvutn0N/7P5VC2+g
4ZUn5XB2hse0quLXphEqXe9sAJ9x8CeTlCfz5BxKJVFGDzP9GodN5EpS7eAjJruo
vrKN845xfTf5D68+YGAs+DS37/8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSY1AC1
mHSPuVCb9HtyhWn5PaLZADAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjAyN2NlMTQtOTVkNC00ZjVhLTlhNTgtNTJkMjY2NzhlYThmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G2A
gDANBgkqhkiG9w0BAQsFAAOCAQEANwHEI1rWzLF2vzJiYgJGysUvHcrWuQ9M32gi
I3HpORTowML5W3lfdp0S6kbjTgl7jXjBN1ZwhR/MYVFmokAPyTm8tFfQXU6U/AyA
OR2HGWZUUSlLssRyf7C8SXWixiJviMcfWgW73/t3nBGlJdA105d1qEns7bj9SmNq
9sFe7tsAhFPctod1it/ccCnn2S7JOOOlP1UpjDTiyCIMnGWmKuHFBL+oUnlU9P2z
fKKvMjns3CNRvpbTpcvrxy9E+ky/mcoTDAWCMTA7R7h2XIfAYWIIcfJw6jkmdPQe
Tc1D3suKaCrP3eFs3OgEgj2ag3duneZPz9SthrHDkDkfLXvNEg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:24 2026 by rpki-client