Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa
File: 68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa (raw, json)
Hash identifier: wEpuUADws6XM2zIDcmysaTrg0fcH9WiC4eIfgEtIiNg=
Subject key identifier: 04:FE:0E:F8:6D:91:E3:D1:7D:1D:B7:C7:94:90:1C:B3:DD:FA:0F:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EA269950823C4E6C7ACFC040251BD1FA9EF6367
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa
Signing time: Sun 11 Oct 2026 15:08:11 +0000
ROA not before: Sun 11 Oct 2026 15:08:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a2:69:95:08:23:c4:e6:c7:ac:fc:04:02:51:bd:1f:a9:ef:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=4b0829c299577489f0e6ea171dcc708d7b791c46c373c6ffa260ea7b5b5762f6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:ec:2f:e8:35:05:81:80:24:a2:0f:7b:20:
13:ee:16:55:16:08:5f:74:ed:f3:48:93:a7:00:e6:
49:6c:02:17:aa:92:79:39:c4:4d:a1:f3:cc:e0:e6:
b4:af:84:9a:f5:aa:56:ce:e0:91:01:e3:4c:1b:83:
22:a1:b5:14:5c:44:64:7b:58:40:6d:69:b6:96:5c:
22:e6:a5:51:6a:3f:fe:af:b5:eb:68:23:38:e4:b1:
6e:a1:00:00:74:31:4f:15:e8:dd:c2:ad:80:3d:56:
88:76:ea:90:3b:cd:b9:5d:81:b4:92:41:2e:35:42:
3e:bc:16:43:cd:19:a6:66:00:c8:72:56:2c:b1:43:
24:ed:48:ff:02:6a:80:90:7c:3d:d6:92:18:1c:10:
c5:be:19:15:ce:95:18:af:ba:f8:7d:7b:60:6d:2d:
07:dc:4d:c9:fd:0b:02:97:95:e0:b7:4e:dd:e9:cb:
b8:37:62:32:ad:f2:7d:8c:f6:1e:32:26:ad:4f:f0:
21:32:66:ab:9d:3a:ff:5b:63:30:c9:87:58:4b:eb:
df:38:ab:29:80:43:63:f1:e8:c2:3b:74:8f:0e:92:
6b:7b:91:55:4a:80:e6:66:56:5e:6c:d8:7a:8a:45:
11:47:66:77:c8:67:8b:40:8f:eb:8e:f4:7f:63:d0:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:0E:F8:6D:91:E3:D1:7D:1D:B7:C7:94:90:1C:B3:DD:FA:0F:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/68b6fd3e-e06c-4456-bd88-6e8d9ce92b22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c000::/40
Signature Algorithm: sha256WithRSAEncryption
36:54:4d:8c:5d:28:1e:85:49:d0:fa:5a:3b:63:71:79:8a:0d:
15:ab:db:7e:1b:33:55:df:17:36:ca:2d:23:07:48:34:d4:0c:
6c:2e:f7:ab:0e:3b:c7:e2:a9:82:a4:bf:2b:2c:c4:ee:87:81:
93:e7:3f:2b:3b:e0:d7:77:b4:88:f2:70:71:b1:63:70:f9:7d:
4f:6a:17:b6:73:d5:6c:fc:18:7f:78:f7:cc:ed:64:4a:2c:e3:
82:a5:c4:e5:8c:00:3a:00:bf:52:cc:04:42:f6:e4:03:cd:bc:
e8:33:ea:7a:cc:42:78:20:49:50:2e:9f:ff:c7:98:7b:89:64:
59:e0:f7:55:76:08:aa:f5:0b:5b:30:29:b0:b2:f9:93:f0:09:
3e:69:15:ff:f6:3e:e7:06:8b:c0:df:13:a9:e9:d7:8e:d3:3f:
1a:bc:bb:58:84:36:e2:85:c7:74:95:75:ab:3c:16:d0:e0:4c:
b3:d7:1f:18:d8:5b:76:06:c0:38:cd:3f:19:08:8c:30:5b:f9:
ce:b3:55:87:96:b1:ab:48:b1:52:18:20:d1:a8:78:39:35:f3:
89:3b:12:b4:84:5c:0a:1c:d5:8b:34:c0:95:96:1e:23:3f:38:
48:1f:70:0a:23:4c:d2:d2:21:06:b6:fe:a0:86:12:bf:38:e3:
f1:96:52:c9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHqJplQgjxObHrPwEAlG9H6nvY2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTA4MTFaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDRiMDgyOWMyOTk1Nzc0ODlmMGU2ZWExNzFkY2M3MDhkN2I3OTFjNDZjMzcz
YzZmZmEyNjBlYTdiNWI1NzYyZjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/n7C/oNQWBgCSiD3sgE+4WVRYIX3Tt80iTpwDmSWwCF6qSeTnETaHzzODm
tK+EmvWqVs7gkQHjTBuDIqG1FFxEZHtYQG1ptpZcIualUWo//q+162gjOOSxbqEA
AHQxTxXo3cKtgD1WiHbqkDvNuV2BtJJBLjVCPrwWQ80ZpmYAyHJWLLFDJO1I/wJq
gJB8PdaSGBwQxb4ZFc6VGK+6+H17YG0tB9xNyf0LApeV4LdO3enLuDdiMq3yfYz2
HjImrU/wITJmq506/1tjMMmHWEvr3zirKYBDY/Howjt0jw6Sa3uRVUqA5mZWXmzY
eopFEUdmd8hni0CP6470f2PQTckCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQE/g74
bZHj0X0dt8eUkByz3foPazAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjhiNmZkM2UtZTA2Yy00NDU2LWJkODgtNmU4ZDljZTkyYjIyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HLA
MA0GCSqGSIb3DQEBCwUAA4IBAQA2VE2MXSgehUnQ+lo7Y3F5ig0Vq9t+GzNV3xc2
yi0jB0g01AxsLverDjvH4qmCpL8rLMTuh4GT5z8rO+DXd7SI8nBxsWNw+X1Pahe2
c9Vs/Bh/ePfM7WRKLOOCpcTljAA6AL9SzARC9uQDzbzoM+p6zEJ4IElQLp//x5h7
iWRZ4PdVdgiq9QtbMCmwsvmT8Ak+aRX/9j7nBovA3xOp6deO0z8avLtYhDbihcd0
lXWrPBbQ4Eyz1x8Y2Ft2BsA4zT8ZCIwwW/nOs1WHlrGrSLFSGCDRqHg5NfOJOxK0
hFwKHNWLNMCVlh4jPzhIH3AKI0zS0iEGtv6ghhK/OOPxllLJ
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:30 2026 by rpki-client