Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
File: 60b690d0-a362-4547-bf57-d14f49f40869.roa (raw, json)
Hash identifier: OYWrFyXwmP8lXAuombApEO7VvZak4Vww2g6MsZXczOk=
Subject key identifier: 36:34:59:D6:5D:94:5A:ED:81:CB:72:7D:F3:16:58:DC:13:12:6C:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0490EF2D796DBEF73EC7E3F467F4C9DA8A28FACD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
Signing time: Mon 26 Oct 2026 04:40:51 +0000
ROA not before: Mon 26 Oct 2026 04:40:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:90:ef:2d:79:6d:be:f7:3e:c7:e3:f4:67:f4:c9:da:8a:28:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=559608327ed4f1af6de3f5feb835e6dbddb627edaa4c605c87a6036249dee684, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:27:4e:6e:5e:cf:45:30:e4:b3:16:b7:56:
8e:90:17:0f:4d:1a:be:4b:bb:d8:80:82:7b:7c:b6:
7b:31:71:98:b0:cf:81:e2:07:44:78:19:42:f1:30:
1b:64:6c:d1:b7:d7:37:70:5f:0c:2b:fc:af:63:8f:
4f:c2:dc:08:8d:f5:1a:34:2e:4b:cc:36:e3:75:db:
55:69:13:9e:ab:b1:c2:ec:d1:bd:67:b5:da:ab:04:
56:97:ed:2a:37:de:6d:dc:e4:20:e6:3d:b1:dc:23:
ed:1b:3d:4c:d3:5c:f8:a7:ae:e7:fb:44:24:26:09:
cd:0d:2c:55:9d:5e:cb:b2:4b:3f:46:d8:d6:86:e4:
a2:cf:84:65:21:89:61:93:00:69:e9:d5:58:b8:51:
b8:76:30:41:72:c3:7c:52:88:fd:86:4b:cf:cd:c1:
f4:1d:8e:94:41:5c:db:84:25:ce:4a:03:77:ad:21:
f9:43:83:f2:13:30:6b:72:95:45:bc:ee:c6:b0:72:
d0:97:26:1c:7e:4e:00:b4:a0:31:86:f7:09:e8:71:
8a:0a:bb:d1:86:4f:ca:a7:73:ce:13:ab:d4:96:d4:
ad:91:c2:16:9e:f4:97:b9:8e:00:05:f3:0f:f4:94:
a2:37:db:0d:e7:1b:e1:3e:45:54:8a:5a:20:d1:c8:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:34:59:D6:5D:94:5A:ED:81:CB:72:7D:F3:16:58:DC:13:12:6C:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:400::/38
Signature Algorithm: sha256WithRSAEncryption
77:70:8e:0f:95:29:d1:4c:35:15:c2:32:68:6d:87:1a:ca:2b:
c1:19:c3:27:6d:47:78:71:03:05:16:24:3f:90:10:96:14:68:
5e:52:66:cf:35:74:21:26:f0:8a:04:44:02:e6:42:73:f1:80:
02:7a:0a:75:c7:32:8c:77:cb:00:76:7f:dd:51:54:b0:90:41:
f0:36:07:40:18:62:f0:4c:70:04:54:22:96:30:ac:77:25:6d:
b7:3d:e9:8a:ed:6e:60:02:7a:c3:e8:ef:56:56:79:4a:28:da:
20:11:bf:71:c2:29:ec:9c:81:54:39:f9:18:ca:93:c4:f6:01:
14:77:1e:ff:07:61:78:0b:c2:2a:50:1c:48:a1:9d:9f:45:6c:
4e:d4:bb:53:2f:37:8c:30:be:c0:15:b4:20:74:58:fa:fb:0d:
4d:27:99:df:58:2c:e1:39:45:ac:94:be:1a:3a:79:e7:e8:e7:
e4:eb:91:db:b9:39:68:da:c2:db:80:2b:a5:23:bc:c7:5f:ff:
2e:da:0f:5e:76:fa:01:f3:09:4b:87:48:97:7f:92:bc:f2:e4:
b9:fb:fb:24:74:54:43:5c:cf:55:7e:b4:e8:19:af:65:ec:73:
e3:d4:2a:6b:17:85:5a:b6:28:fd:79:f4:41:10:37:09:b6:94:
2b:ea:a9:de
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBJDvLXltvvc+x+P0Z/TJ2ooo+s0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwNTFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDU1OTYwODMyN2VkNGYxYWY2ZGUzZjVmZWI4MzVlNmRiZGRiNjI3ZWRhYTRj
NjA1Yzg3YTYwMzYyNDlkZWU2ODQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANejJ05uXs9FMOSzFrdWjpAXD00avku72ICCe3y2ezFxmLDPgeIHRHgZQvEw
G2Rs0bfXN3BfDCv8r2OPT8LcCI31GjQuS8w243XbVWkTnquxwuzRvWe12qsEVpft
KjfebdzkIOY9sdwj7Rs9TNNc+Keu5/tEJCYJzQ0sVZ1ey7JLP0bY1obkos+EZSGJ
YZMAaenVWLhRuHYwQXLDfFKI/YZLz83B9B2OlEFc24QlzkoDd60h+UOD8hMwa3KV
RbzuxrBy0JcmHH5OALSgMYb3Cehxigq70YZPyqdzzhOr1JbUrZHCFp70l7mOAAXz
D/SUojfbDecb4T5FVIpaINHIxKECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ2NFnW
XZRa7YHLcn3zFljcExJsyjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjBiNjkwZDAtYTM2Mi00NTQ3LWJmNTctZDE0ZjQ5ZjQwODY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BgE
MA0GCSqGSIb3DQEBCwUAA4IBAQB3cI4PlSnRTDUVwjJobYcayivBGcMnbUd4cQMF
FiQ/kBCWFGheUmbPNXQhJvCKBEQC5kJz8YACegp1xzKMd8sAdn/dUVSwkEHwNgdA
GGLwTHAEVCKWMKx3JW23PemK7W5gAnrD6O9WVnlKKNogEb9xwinsnIFUOfkYypPE
9gEUdx7/B2F4C8IqUBxIoZ2fRWxO1LtTLzeMML7AFbQgdFj6+w1NJ5nfWCzhOUWs
lL4aOnnn6Ofk65HbuTlo2sLbgCulI7zHX/8u2g9edvoB8wlLh0iXf5K88uS5+/sk
dFRDXM9VfrToGa9l7HPj1CprF4Vatij9efRBEDcJtpQr6qne
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:27:16 2026 by rpki-client