Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
File: 6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa (raw, json)
Hash identifier: uCSl4i+1EqUNNLVn9WXywFBuHtOpJh0Jf1e9hlSijLI=
Subject key identifier: B9:0C:77:2E:B4:32:53:B3:3A:31:73:AE:0A:5C:C7:91:B8:AA:40:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E53624502F62726A4F6911C39F2123A1A52E5AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
Signing time: Fri 09 Oct 2026 01:30:34 +0000
ROA not before: Fri 09 Oct 2026 01:30:34 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:53:62:45:02:f6:27:26:a4:f6:91:1c:39:f2:12:3a:1a:52:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:34 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=71556bb22f55f4bd9fe2268a767868c8b4e7700252c663ecfcfd07a59c23072f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:61:f2:65:e1:76:9e:fc:a4:7e:60:9b:bc:
b8:65:e8:18:ca:f5:cd:38:88:5f:39:21:97:3d:21:
f1:f2:09:60:89:aa:60:db:77:ee:f2:e5:9c:90:97:
81:d4:d4:f3:d4:21:ce:94:43:2d:60:30:4d:88:62:
5c:f0:a5:f5:49:67:4e:56:cf:f4:ac:e9:ac:33:79:
6c:f1:03:6d:67:94:b9:67:f3:96:88:55:85:83:7e:
20:dc:58:b5:64:40:bc:08:87:6b:df:02:9d:a5:6b:
a1:c8:63:16:90:fe:95:bb:4f:82:95:ad:83:2f:b1:
35:2c:0f:cc:a4:57:57:22:79:66:5f:a4:00:0a:77:
67:ab:3f:84:55:33:fb:c6:07:04:49:c5:16:10:4e:
c0:2f:a6:91:fc:83:ad:4a:3b:1c:eb:6f:03:1e:e9:
c6:fe:0f:97:87:8c:09:48:94:3f:49:43:09:12:db:
3b:0f:f1:52:92:a4:60:25:cb:63:0b:a2:f2:98:81:
e6:e1:ee:cf:7c:10:c7:29:68:f1:74:b4:54:fe:bd:
6a:22:78:29:22:fc:1f:10:90:d2:48:e9:70:6d:db:
a1:82:c7:8f:4e:b8:41:dd:d8:84:74:1b:a6:4d:f0:
00:04:a4:33:84:85:00:02:f3:3c:3b:25:14:e6:dd:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:77:2E:B4:32:53:B3:3A:31:73:AE:0A:5C:C7:91:B8:AA:40:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8020::/48
Signature Algorithm: sha256WithRSAEncryption
8c:a8:a2:63:dc:ae:67:a2:df:8b:f8:c4:78:fd:7a:9e:fe:ae:
5f:e8:6b:21:67:3d:09:ee:7f:05:34:89:7d:c5:2b:0c:11:17:
5a:8c:f0:31:01:ca:e4:a0:9b:b2:90:de:eb:71:6e:14:3e:ae:
da:e7:a7:a3:8d:6a:d7:fb:af:25:77:cd:1f:c8:51:31:e9:c2:
8f:f6:53:cf:11:b0:12:94:cc:55:88:fb:d2:7a:1c:50:ce:d0:
53:27:fa:9d:39:4f:f3:24:1c:13:6f:b9:7c:d4:ce:6b:3e:a0:
4d:fe:e2:f2:48:b6:fc:42:be:8b:7f:b7:9a:6a:d9:6f:de:0d:
b1:ea:6d:75:a8:96:5f:00:86:52:8e:14:48:cd:d5:1f:2e:61:
11:01:69:77:1c:a2:c5:2a:26:95:49:9d:fc:a0:b6:a1:22:61:
44:0a:33:38:ac:6a:5d:47:8c:be:28:70:39:40:a9:b4:de:65:
f3:55:ea:13:f4:b3:db:50:78:eb:2b:9b:12:07:52:39:00:28:
74:27:5d:6f:b0:ba:f1:b0:7f:e2:ae:9b:1d:f8:83:2e:1c:02:
d8:80:d4:f3:a7:ec:c4:f3:0b:dd:44:11:30:dc:b9:46:50:05:
b6:cf:ff:c6:1b:8d:5a:ba:63:d2:e0:d7:8a:0f:2e:49:97:04:
6a:1d:8d:65
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTlNiRQL2Jyak9pEcOfISOhpS5a8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTMwMzRaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDcxNTU2YmIyMmY1NWY0YmQ5ZmUyMjY4YTc2Nzg2OGM4YjRlNzcwMDI1MmM2
NjNlY2ZjZmQwN2E1OWMyMzA3MmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOI2YfJl4Xae/KR+YJu8uGXoGMr1zTiIXzkhlz0h8fIJYImqYNt37vLlnJCX
gdTU89QhzpRDLWAwTYhiXPCl9UlnTlbP9KzprDN5bPEDbWeUuWfzlohVhYN+INxY
tWRAvAiHa98CnaVrochjFpD+lbtPgpWtgy+xNSwPzKRXVyJ5Zl+kAAp3Z6s/hFUz
+8YHBEnFFhBOwC+mkfyDrUo7HOtvAx7pxv4Pl4eMCUiUP0lDCRLbOw/xUpKkYCXL
Ywui8piB5uHuz3wQxylo8XS0VP69aiJ4KSL8HxCQ0kjpcG3boYLHj064Qd3YhHQb
pk3wAASkM4SFAALzPDslFObdSIECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS5DHcu
tDJTszoxc64KXMeRuKpA4TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmIzNjRhN2EtY2UyMy00ODE0LThiZmEtMWMyMzI0MmE3M2U4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GqA
IDANBgkqhkiG9w0BAQsFAAOCAQEAjKiiY9yuZ6Lfi/jEeP16nv6uX+hrIWc9Ce5/
BTSJfcUrDBEXWozwMQHK5KCbspDe63FuFD6u2ueno41q1/uvJXfNH8hRMenCj/ZT
zxGwEpTMVYj70nocUM7QUyf6nTlP8yQcE2+5fNTOaz6gTf7i8ki2/EK+i3+3mmrZ
b94NseptdaiWXwCGUo4USM3VHy5hEQFpdxyixSomlUmd/KC2oSJhRAozOKxqXUeM
vihwOUCptN5l81XqE/Sz21B46yubEgdSOQAodCddb7C68bB/4q6bHfiDLhwC2IDU
86fsxPML3UQRMNy5RlAFts//xhuNWrpj0uDXig8uSZcEah2NZQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:15 2026 by rpki-client