Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
File: 613f885a-7f25-486b-9eff-fdd6b2c05b65.roa (raw, json)
Hash identifier: rSDuQDhNf4z5GziXaUlMx0lj0pX9ZdoOauXeD8H2GRY=
Subject key identifier: 46:86:A2:13:AE:D9:EC:7C:DE:0E:BB:6E:DF:54:C9:78:C9:CF:EE:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 220E689BA606875EF810DF7F08E738B20E181B35
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
Signing time: Mon 26 Oct 2026 05:31:02 +0000
ROA not before: Mon 26 Oct 2026 05:31:02 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:68:9b:a6:06:87:5e:f8:10:df:7f:08:e7:38:b2:0e:18:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:02 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1534849a4f6eba2da4d53e7c955b674c11610b3bf998e8d6f213b3e4b1d12148, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:77:6d:31:ea:14:c5:69:08:fb:28:87:8d:
13:10:1d:27:ef:e0:36:bf:78:73:0e:d4:80:73:43:
1f:8a:60:f9:5f:da:27:b4:7b:38:47:04:4f:48:3d:
59:c7:68:a5:17:23:9c:ea:ce:33:d8:e2:66:e8:44:
0e:3f:e5:42:1b:c0:05:20:d7:15:7c:5d:8f:88:a8:
13:e8:c6:d4:8e:f9:51:79:43:62:2f:a3:b6:37:8f:
d7:a6:a7:d0:67:cc:1b:72:41:29:2e:ff:3d:5c:18:
a7:9b:5c:cd:b0:4c:7a:6e:ff:86:f9:7b:2d:7c:79:
3c:f0:08:01:88:3b:99:f6:5b:6c:54:d8:be:7a:b7:
ef:8b:41:ca:50:76:fc:cd:8f:03:7f:ec:13:2b:cc:
4b:b5:b0:a8:a8:e1:5d:ed:b5:cc:d3:34:03:68:9a:
bb:37:0a:07:a1:ce:27:67:20:b1:f4:99:a0:e5:95:
5d:04:39:e9:60:66:e7:46:10:ac:2e:02:bd:85:cd:
86:5d:e5:54:36:9a:af:24:f4:17:2a:4c:3f:a4:8c:
42:ac:d7:c1:b9:2d:c7:fa:1f:cd:2b:3d:71:4d:7a:
f7:80:13:60:1f:e4:85:5b:78:ab:c2:11:1c:14:65:
c0:d8:f1:5a:2d:b0:52:58:7f:8b:f6:d5:46:75:b4:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:A2:13:AE:D9:EC:7C:DE:0E:BB:6E:DF:54:C9:78:C9:CF:EE:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/613f885a-7f25-486b-9eff-fdd6b2c05b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4080::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e1:fe:ae:f2:e9:95:c8:bf:6a:5b:07:18:7a:29:20:15:e7:
c9:c6:b8:e6:38:f7:ea:36:bb:10:fc:56:e1:5f:b5:01:7e:a1:
6c:8e:88:9f:3a:dc:e0:4a:49:c1:f9:3a:ae:6b:61:bc:86:5a:
c6:49:f0:7a:a6:fb:d2:46:01:c7:49:b5:0f:f1:84:a8:ef:f5:
42:7d:f9:ae:d2:b5:cf:ce:03:c9:da:f1:c7:05:78:7c:6e:bc:
af:5a:37:6d:6c:dc:55:18:27:0a:67:7a:05:f1:5a:f7:6c:ce:
8a:a7:05:30:0d:d6:14:d3:18:8e:88:03:7d:0c:ce:a8:d1:1c:
7a:be:2a:5d:e4:25:51:d6:e4:ed:21:04:d3:b1:a7:8f:e5:be:
ee:8d:b9:0f:df:f3:3f:a2:ac:f9:56:8e:f2:4c:9f:f4:22:e2:
30:48:1c:17:c6:c2:8b:70:f0:3c:f3:c0:0e:15:ea:ad:3a:d4:
1c:40:be:b9:05:7a:01:28:e0:9f:2b:a1:fa:f5:19:6a:99:e8:
b0:12:ea:e6:af:70:f3:b9:b5:d2:fe:c5:2a:b4:d4:41:3c:fe:
a8:50:1c:b1:b0:52:96:91:02:36:9f:0e:a6:e2:06:11:6e:ea:
ee:81:fc:39:82:ef:a3:e6:59:6f:38:f8:a0:c7:1c:27:6c:73:
d8:d3:ab:c2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUIg5om6YGh174EN9/COc4sg4YGzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMxMDJaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDE1MzQ4NDlhNGY2ZWJhMmRhNGQ1M2U3Yzk1NWI2NzRjMTE2MTBiM2JmOTk4
ZThkNmYyMTNiM2U0YjFkMTIxNDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI6sd20x6hTFaQj7KIeNExAdJ+/gNr94cw7UgHNDH4pg+V/aJ7R7OEcET0g9
WcdopRcjnOrOM9jiZuhEDj/lQhvABSDXFXxdj4ioE+jG1I75UXlDYi+jtjeP16an
0GfMG3JBKS7/PVwYp5tczbBMem7/hvl7LXx5PPAIAYg7mfZbbFTYvnq374tBylB2
/M2PA3/sEyvMS7WwqKjhXe21zNM0A2iauzcKB6HOJ2cgsfSZoOWVXQQ56WBm50YQ
rC4CvYXNhl3lVDaaryT0FypMP6SMQqzXwbktx/ofzSs9cU1694ATYB/khVt4q8IR
HBRlwNjxWi2wUlh/i/bVRnW0TLUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRGhqIT
rtnsfN4Ou27fVMl4yc/uLzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjEzZjg4NWEtN2YyNS00ODZiLTllZmYtZmRkNmIyYzA1YjY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA
gDANBgkqhkiG9w0BAQsFAAOCAQEAbuH+rvLplci/alsHGHopIBXnyca45jj36ja7
EPxW4V+1AX6hbI6Inzrc4EpJwfk6rmthvIZaxknweqb70kYBx0m1D/GEqO/1Qn35
rtK1z84DydrxxwV4fG68r1o3bWzcVRgnCmd6BfFa92zOiqcFMA3WFNMYjogDfQzO
qNEcer4qXeQlUdbk7SEE07Gnj+W+7o25D9/zP6Ks+VaO8kyf9CLiMEgcF8bCi3Dw
PPPADhXqrTrUHEC+uQV6ASjgnyuh+vUZapnosBLq5q9w87m10v7FKrTUQTz+qFAc
sbBSlpECNp8OpuIGEW7q7oH8OYLvo+ZZbzj4oMccJ2xz2NOrwg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:26 2026 by rpki-client