Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
File: 67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa (raw, json)
Hash identifier: 6en38pqgqbq9EiJzfn2Ej5wx58kVtOREojJsf/qVMkw=
Subject key identifier: 8F:90:22:63:23:AD:AA:95:53:F0:6D:31:25:3C:6F:05:86:31:BE:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 290A0EF7DAA797DBCEBABAD7E23A6BAA36EB3469
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
Signing time: Sun 18 Oct 2026 01:20:09 +0000
ROA not before: Sun 18 Oct 2026 01:20:09 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0a:0e:f7:da:a7:97:db:ce:ba:ba:d7:e2:3a:6b:aa:36:eb:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:09 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=febcbef4385911873e98161df85705f6e1fb424426e069c9e9646807d524312a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:89:9a:19:2e:6d:79:87:f7:a5:b7:95:2d:
a6:d1:b6:10:fe:78:58:fc:e5:73:d8:05:53:21:2c:
9e:8b:e8:d3:06:04:9d:90:a2:49:75:f5:6f:38:85:
c3:cb:ff:84:c2:9f:83:a7:f0:f0:90:e9:57:26:ed:
47:7b:f8:d0:44:69:60:d6:85:9f:fc:20:ec:00:d0:
44:48:09:bb:cd:31:23:f4:e5:18:3f:16:f4:10:a3:
f4:9e:96:7f:e1:83:f1:86:63:fd:08:5b:3a:d8:81:
f3:27:2f:64:f2:b1:75:f1:97:5e:ac:b5:f5:1a:02:
43:5d:d1:a6:d2:2e:aa:f7:16:bb:e6:b7:da:65:99:
ee:c6:66:ed:c7:8e:a4:a8:e2:7d:30:86:4b:b6:c1:
13:a7:34:f4:72:9c:c1:8f:04:ff:c6:db:ac:b1:d3:
f7:fd:8c:a4:2a:3c:f9:e9:37:12:92:64:24:af:92:
b8:84:08:5f:54:1c:28:81:2a:13:98:eb:26:aa:55:
77:87:78:d1:4b:55:1c:23:41:e2:41:d2:d6:68:86:
50:d3:1d:d1:19:eb:9e:88:eb:9c:a9:02:af:05:fb:
dd:44:c6:36:7e:62:a0:99:c5:b3:f0:11:3b:cc:8d:
1e:69:74:58:f8:11:b9:0d:4f:0f:70:62:94:cf:0f:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:22:63:23:AD:AA:95:53:F0:6D:31:25:3C:6F:05:86:31:BE:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:64:87:af:4b:3c:62:c3:72:22:32:87:5d:2f:f2:d2:00:e2:
f2:30:33:46:d9:3c:d1:f2:85:0d:b6:d3:44:97:ef:42:42:f1:
b2:a5:28:3f:8f:8a:43:6e:9b:31:be:64:0c:a1:b1:be:47:4c:
00:a0:a5:4f:89:b5:7b:96:fd:2c:00:0e:59:26:ac:95:3e:e0:
23:6d:03:8f:51:b8:44:d6:17:10:3b:34:e1:81:1f:60:97:47:
0b:7c:b5:a6:1d:59:d6:82:df:20:b8:95:a3:8d:77:e4:ad:67:
74:53:be:a0:49:97:94:c5:32:de:9f:3d:ed:ac:af:10:24:9c:
6e:10:01:b6:81:0c:c5:d9:51:10:cb:e2:86:c8:21:95:0f:6d:
bf:ca:d6:34:7b:82:66:9e:d9:fe:b6:b8:43:02:c2:68:ad:f8:
c8:7b:19:7b:cb:3a:48:24:61:62:15:e2:90:cf:43:b6:b4:dc:
85:c7:3e:98:f3:72:b2:20:40:99:fe:7b:31:91:d2:51:1b:88:
54:28:2a:ff:43:ee:ea:4f:06:fa:d5:e8:5c:da:7b:fb:fa:5b:
71:5d:70:41:e6:b3:f1:18:16:d6:2e:96:79:1c:bd:68:6d:0b:
34:bb:14:cc:e4:7a:f0:56:d9:7f:07:86:47:d9:ff:63:cb:6a:
54:31:c1:94
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKQoO99qnl9vOurrX4jprqjbrNGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTgwMTIwMDlaFw0yNzAxMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGZlYmNiZWY0Mzg1OTExODczZTk4MTYxZGY4NTcwNWY2ZTFmYjQyNDQyNmUw
NjljOWU5NjQ2ODA3ZDUyNDMxMmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALlUiZoZLm15h/elt5UtptG2EP54WPzlc9gFUyEsnovo0wYEnZCiSXX1bziF
w8v/hMKfg6fw8JDpVybtR3v40ERpYNaFn/wg7ADQREgJu80xI/TlGD8W9BCj9J6W
f+GD8YZj/QhbOtiB8ycvZPKxdfGXXqy19RoCQ13RptIuqvcWu+a32mWZ7sZm7ceO
pKjifTCGS7bBE6c09HKcwY8E/8bbrLHT9/2MpCo8+ek3EpJkJK+SuIQIX1QcKIEq
E5jrJqpVd4d40UtVHCNB4kHS1miGUNMd0RnrnojrnKkCrwX73UTGNn5ioJnFs/AR
O8yNHml0WPgRuQ1PD3BilM8P5F0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSPkCJj
I62qlVPwbTElPG8FhjG+ijAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjdhOTE5MTAtYTU3Yy00YTA0LThkN2ItNDA0YmNkNWZlY2YyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DBg
MA0GCSqGSIb3DQEBCwUAA4IBAQDDZIevSzxiw3IiModdL/LSAOLyMDNG2TzR8oUN
ttNEl+9CQvGypSg/j4pDbpsxvmQMobG+R0wAoKVPibV7lv0sAA5ZJqyVPuAjbQOP
UbhE1hcQOzThgR9gl0cLfLWmHVnWgt8guJWjjXfkrWd0U76gSZeUxTLenz3trK8Q
JJxuEAG2gQzF2VEQy+KGyCGVD22/ytY0e4Jmntn+trhDAsJorfjIexl7yzpIJGFi
FeKQz0O2tNyFxz6Y83KyIECZ/nsxkdJRG4hUKCr/Q+7qTwb61ehc2nv7+ltxXXBB
5rPxGBbWLpZ5HL1obQs0uxTM5HrwVtl/B4ZH2f9jy2pUMcGU
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:38 2026 by rpki-client