Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638eeae8-bbb1-409f-92d4-19bf7288c05f.roa
File: 638eeae8-bbb1-409f-92d4-19bf7288c05f.roa (raw, json)
Hash identifier: GX3RYAZzFG8ARfBIYKd/UMYGSaZWpc1D9+OWsjDZ1wg=
Subject key identifier: 53:82:F6:60:43:FE:8D:4F:30:3F:B4:90:AB:A7:B4:0B:71:D8:00:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C8FC71D7AE45B1AE0A2EE39D2CC25C98A46DFAF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638eeae8-bbb1-409f-92d4-19bf7288c05f.roa
Signing time: Thu 29 Oct 2026 01:02:18 +0000
ROA not before: Thu 29 Oct 2026 01:02:18 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8f:c7:1d:7a:e4:5b:1a:e0:a2:ee:39:d2:cc:25:c9:8a:46:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:18 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=e6d9fffe7dd68ec6318bcc025310b2e025bdcf211ebdf37702ff2eeeb116b1d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:07:13:7c:f2:25:2d:6c:a8:ab:bf:5d:6d:
82:51:c3:fc:09:2b:8a:6f:2b:ad:eb:06:c9:d7:d5:
34:5f:bb:0d:e7:ad:de:39:2e:34:89:6a:1c:b3:51:
28:49:66:1b:d2:f7:f0:0b:6d:ab:a9:29:bf:6a:e6:
ae:7a:d9:38:04:5d:6a:a0:c3:e8:97:fe:4e:8b:3c:
c5:bc:8e:5e:2d:9d:7d:ed:41:61:84:90:49:13:ed:
89:48:0e:8f:9d:3a:b2:ed:01:a9:3c:13:83:e4:87:
f3:c1:0d:c0:27:14:33:1b:b0:f3:e0:9b:fd:3c:eb:
89:6d:25:0e:5e:82:87:d0:4f:95:cf:a5:9b:e1:4e:
12:ca:53:28:76:43:78:b3:fe:de:97:fa:c6:8e:73:
cf:05:8f:77:c0:88:88:2c:f4:9d:f7:8a:3a:45:90:
bf:1c:db:0c:44:1a:75:21:cf:3a:19:32:89:94:1d:
81:6b:35:c5:dd:75:89:d9:c0:33:2e:e2:38:72:90:
a9:ef:78:6b:a2:4a:91:c9:1e:2a:8b:42:09:ec:f3:
26:92:53:5b:bd:6a:bc:13:09:22:40:53:31:a6:1b:
24:3f:9c:22:28:28:c5:5c:c9:9e:06:aa:10:50:44:
58:e3:1e:7b:d3:64:74:2f:f3:ec:01:9e:01:1f:d1:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:F6:60:43:FE:8D:4F:30:3F:B4:90:AB:A7:B4:0B:71:D8:00:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/638eeae8-bbb1-409f-92d4-19bf7288c05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:6000::/40
Signature Algorithm: sha256WithRSAEncryption
64:c7:22:ff:a5:20:18:21:bf:16:0f:d6:b6:85:95:97:3a:78:
e3:0b:7f:fe:97:01:33:b4:20:13:f4:96:aa:13:81:49:bd:cd:
5a:59:ad:61:b8:2f:ee:5c:b4:e5:5a:75:59:df:8d:99:fc:73:
8a:73:db:1e:8f:0e:00:b9:d4:1e:b6:33:11:50:14:33:77:68:
c2:f4:5b:ce:09:29:5f:ef:4f:b4:9c:65:af:c4:ec:94:fa:85:
03:53:3a:b2:27:7b:50:1b:91:71:0f:30:69:73:3b:18:2b:3e:
f5:1f:b8:eb:a3:6b:02:f2:a7:ce:df:e8:d2:40:82:c9:53:06:
1b:39:f5:77:3a:95:6a:62:f9:f3:9a:7e:99:73:7c:72:9e:07:
91:e6:62:9c:7c:98:ca:2b:d7:8c:bf:f8:f5:f0:49:7b:25:69:
24:ed:68:18:39:a5:36:6a:c8:d9:28:c6:06:e7:f8:90:2a:70:
12:97:0a:b9:be:e3:56:97:b5:46:41:41:cf:81:cf:60:9b:ae:
f0:a5:67:58:1a:09:87:ed:73:67:d1:76:5a:1e:26:22:88:0b:
75:34:1f:b4:d7:50:00:97:ca:7a:28:32:4d:3c:8b:dd:db:b5:
2f:1c:c1:df:e7:71:74:54:6f:08:1f:74:2e:62:e9:12:3b:7c:
4b:99:c5:11
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXI/HHXrkWxrgou450swlyYpG368wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjkwMTAyMThaFw0yNzAxMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQGU2ZDlmZmZlN2RkNjhlYzYzMThiY2MwMjUzMTBiMmUwMjViZGNmMjExZWJk
ZjM3NzAyZmYyZWVlYjExNmIxZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIoXBxN88iUtbKirv11tglHD/Akrim8rresGydfVNF+7Deet3jkuNIlqHLNR
KElmG9L38Attq6kpv2rmrnrZOARdaqDD6Jf+Tos8xbyOXi2dfe1BYYSQSRPtiUgO
j506su0BqTwTg+SH88ENwCcUMxuw8+Cb/TzriW0lDl6Ch9BPlc+lm+FOEspTKHZD
eLP+3pf6xo5zzwWPd8CIiCz0nfeKOkWQvxzbDEQadSHPOhkyiZQdgWs1xd11idnA
My7iOHKQqe94a6JKkckeKotCCezzJpJTW71qvBMJIkBTMaYbJD+cIigoxVzJngaq
EFBEWOMee9NkdC/z7AGeAR/RqC0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRTgvZg
Q/6NTzA/tJCrp7QLcdgAFjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjM4ZWVhZTgtYmJiMS00MDlmLTkyZDQtMTliZjcyODhjMDVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GJg
MA0GCSqGSIb3DQEBCwUAA4IBAQBkxyL/pSAYIb8WD9a2hZWXOnjjC3/+lwEztCAT
9JaqE4FJvc1aWa1huC/uXLTlWnVZ342Z/HOKc9sejw4AudQetjMRUBQzd2jC9FvO
CSlf70+0nGWvxOyU+oUDUzqyJ3tQG5FxDzBpczsYKz71H7jro2sC8qfO3+jSQILJ
UwYbOfV3OpVqYvnzmn6Zc3xyngeR5mKcfJjKK9eMv/j18El7JWkk7WgYOaU2asjZ
KMYG5/iQKnASlwq5vuNWl7VGQUHPgc9gm67wpWdYGgmH7XNn0XZaHiYiiAt1NB+0
11AAl8p6KDJNPIvd27UvHMHf53F0VG8IH3QuYukSO3xLmcUR
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:22:56 2026 by rpki-client