Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67e16787-2c44-4c84-b368-825fd03be323.roa
File: 67e16787-2c44-4c84-b368-825fd03be323.roa (raw, json)
Hash identifier: OKlTRU69LjTlmdmt5BApEicnVU5k7PaOwR0/jZ4TIxs=
Subject key identifier: 86:6B:6C:95:6A:7F:02:F8:49:32:BB:6F:41:30:CB:B4:35:9D:EA:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6937F3C8E3F9BA017F22213C3BE3FD4DDC6C3084
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67e16787-2c44-4c84-b368-825fd03be323.roa
Signing time: Thu 08 Oct 2026 17:24:42 +0000
ROA not before: Thu 08 Oct 2026 17:24:42 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:37:f3:c8:e3:f9:ba:01:7f:22:21:3c:3b:e3:fd:4d:dc:6c:30:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:42 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=a952c35cc129703afbde682fce4d4bfb444a4f27d844a3fd1c90029a263c14a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:fb:7e:74:cf:41:ea:1e:2c:dc:5c:63:6c:
ba:eb:a0:e7:b3:1c:22:f7:29:ae:7c:f1:2f:cc:61:
a2:4e:71:55:ad:69:26:9c:d4:71:d0:ca:25:83:49:
88:50:b4:ed:bd:7d:1d:c5:f9:38:0b:29:3a:e2:cb:
4b:ba:14:c7:bd:05:53:a1:b8:43:75:22:f7:71:25:
c2:cf:7f:f4:85:58:c2:2b:f9:16:ba:19:cf:81:03:
1b:7d:dd:8f:8d:3b:33:8b:81:49:89:f4:39:ff:d9:
e7:52:ae:8e:b9:ee:44:92:bd:a2:de:d6:9a:4f:e3:
b4:05:07:78:a3:4f:93:9c:51:17:b9:84:4a:32:6b:
e7:66:5b:15:8b:14:e8:fa:64:48:62:d7:2c:95:03:
92:07:16:bd:53:d2:a7:6b:71:06:c0:64:72:dc:2e:
ca:1d:bb:2a:23:e6:ab:81:ef:52:6d:d2:f7:63:40:
6e:f1:8c:e6:c3:48:2c:99:5d:c4:55:85:ea:97:f3:
a0:04:07:74:15:71:95:20:d0:8f:cb:1e:e9:72:0f:
82:3b:ec:b9:34:35:df:bc:23:f7:03:fe:03:7f:8f:
17:fb:10:88:99:50:ca:9a:e5:56:9b:ea:58:1c:e0:
e4:39:96:f4:02:d0:ac:2c:49:84:24:f0:09:b0:4f:
f1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:6C:95:6A:7F:02:F8:49:32:BB:6F:41:30:CB:B4:35:9D:EA:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67e16787-2c44-4c84-b368-825fd03be323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:6000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:c7:01:24:cf:5c:c9:ec:96:05:d3:61:50:c8:7c:e0:93:3f:
aa:77:20:22:29:b9:00:3f:4f:f9:2a:ee:f9:64:b6:86:35:52:
72:d6:4b:58:66:21:6b:94:88:9b:3f:e0:06:ca:cd:23:1e:bf:
81:46:f9:98:ac:a3:17:62:b3:8e:04:e2:18:a5:06:39:bf:c9:
9b:76:fb:0d:0b:10:56:6c:a7:fa:16:fc:d6:ce:6a:32:a1:96:
e6:df:c5:ef:46:c0:1b:54:33:57:a0:26:49:10:23:69:f8:15:
5d:1e:9a:f8:34:f4:1c:42:ea:97:5f:f7:a2:58:88:34:3a:6d:
f0:af:c7:63:ea:1a:b9:c1:80:22:4e:cd:9d:62:ea:ae:aa:0e:
86:0e:e4:8b:da:8e:d0:f7:3b:82:17:2a:be:6d:b8:ff:9e:36:
2e:28:24:24:63:6f:98:78:be:0e:50:ef:0f:7c:62:03:fc:30:
45:5d:09:9b:4e:99:b1:25:d1:cf:a4:f8:d5:4f:1c:fd:40:a3:
ee:fe:d4:7d:a6:0f:44:6f:08:b6:3d:db:37:8e:73:f5:c9:eb:
06:53:ad:6f:1e:1f:59:da:49:45:a8:ad:e0:21:72:e3:ab:60:
b0:23:f3:3d:63:18:da:84:8a:a3:21:6b:9d:49:d1:1c:db:e7:
06:b7:a5:66
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaTfzyOP5ugF/IiE8O+P9TdxsMIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDgxNzI0NDJaFw0yNzAxMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGE5NTJjMzVjYzEyOTcwM2FmYmRlNjgyZmNlNGQ0YmZiNDQ0YTRmMjdkODQ0
YTNmZDFjOTAwMjlhMjYzYzE0YTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9R+350z0HqHizcXGNsuuug57McIvcprnzxL8xhok5xVa1pJpzUcdDKJYNJ
iFC07b19HcX5OAspOuLLS7oUx70FU6G4Q3Ui93Elws9/9IVYwiv5FroZz4EDG33d
j407M4uBSYn0Of/Z51KujrnuRJK9ot7Wmk/jtAUHeKNPk5xRF7mESjJr52ZbFYsU
6PpkSGLXLJUDkgcWvVPSp2txBsBkctwuyh27KiPmq4HvUm3S92NAbvGM5sNILJld
xFWF6pfzoAQHdBVxlSDQj8se6XIPgjvsuTQ137wj9wP+A3+PF/sQiJlQyprlVpvq
WBzg5DmW9ALQrCxJhCTwCbBP8c8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSGa2yV
an8C+Ekyu29BMMu0NZ3qkjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjdlMTY3ODctMmM0NC00Yzg0LWIzNjgtODI1ZmQwM2JlMzIzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GFg
MA0GCSqGSIb3DQEBCwUAA4IBAQCfxwEkz1zJ7JYF02FQyHzgkz+qdyAiKbkAP0/5
Ku75ZLaGNVJy1ktYZiFrlIibP+AGys0jHr+BRvmYrKMXYrOOBOIYpQY5v8mbdvsN
CxBWbKf6FvzWzmoyoZbm38XvRsAbVDNXoCZJECNp+BVdHpr4NPQcQuqXX/eiWIg0
Om3wr8dj6hq5wYAiTs2dYuquqg6GDuSL2o7Q9zuCFyq+bbj/njYuKCQkY2+YeL4O
UO8PfGID/DBFXQmbTpmxJdHPpPjVTxz9QKPu/tR9pg9Ebwi2Pds3jnP1yesGU61v
Hh9Z2klFqK3gIXLjq2CwI/M9YxjahIqjIWudSdEc2+cGt6Vm
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:33:28 2026 by rpki-client