Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
File: 7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa (raw, json)
Hash identifier: ehMUF74VOf7dFyCSH/VaOS9zmSW6bGteeFvFSW3vKPg=
Subject key identifier: 29:18:7A:CC:7E:4F:95:AE:34:E0:23:CF:F3:4B:85:0A:DE:4E:F5:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0736F3A1C879BB52DEBA4AEEC8A1309BC6361FF5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
Signing time: Sun 04 Oct 2026 00:30:41 +0000
ROA not before: Sun 04 Oct 2026 00:30:41 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:36:f3:a1:c8:79:bb:52:de:ba:4a:ee:c8:a1:30:9b:c6:36:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 4 00:30:41 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=211f3d5e6225f272fad8009b8ad1c3ed9c490e4cfeb702629d42884a9502c6da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:d7:d4:fd:59:44:02:8b:07:2f:97:83:a9:
69:9b:3c:6a:17:78:e7:c7:b9:9a:e1:d1:21:a9:cb:
a1:10:ed:10:65:bc:d3:09:68:b5:64:60:5d:bf:fb:
ba:de:16:5b:48:7b:90:26:a4:a6:df:d4:c1:65:b9:
6b:98:e8:a9:fd:a5:08:eb:60:61:a5:ca:89:a6:29:
39:c6:58:b1:6c:80:d0:10:ba:ba:81:b9:ef:bc:90:
4a:f6:70:6d:a8:22:60:dd:7e:10:03:4d:70:a8:f7:
d4:0f:38:81:20:69:b2:45:07:24:42:a3:74:43:5c:
64:d7:a3:a0:6e:30:8d:5a:ff:bb:08:22:d1:f3:ed:
44:46:c8:13:ac:fa:1d:ac:b6:96:61:7d:b3:db:a6:
ad:12:08:ff:eb:5a:97:5c:27:52:f4:3e:f5:d3:1a:
5f:cf:3d:58:9c:59:e9:5d:0f:f8:f5:e9:ae:dc:c2:
0d:c9:ef:f3:a5:a3:82:64:ca:82:98:95:38:ae:6d:
0d:7d:1d:bf:9b:ea:7a:ee:e1:ef:d1:3c:dd:51:8c:
2d:44:c6:24:c1:83:14:6d:44:4c:72:35:9a:5c:fe:
ac:18:c5:4d:9f:93:24:5f:25:08:81:94:13:34:41:
65:2b:b4:c0:5e:af:ba:24:ac:6c:36:2c:9c:0e:a7:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:18:7A:CC:7E:4F:95:AE:34:E0:23:CF:F3:4B:85:0A:DE:4E:F5:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010::/28
Signature Algorithm: sha256WithRSAEncryption
74:fb:a8:8b:e1:38:39:19:5c:67:5f:4c:7b:1e:1a:7a:54:33:
24:40:6d:f7:80:1a:ae:50:f5:e8:a5:a1:ff:39:fa:d8:e5:dd:
5d:21:1a:5c:61:cd:56:86:da:ab:ac:47:dc:a0:dc:c3:5f:ce:
ac:90:04:42:98:1e:15:8e:38:33:65:ad:82:97:b2:c7:af:b7:
7c:66:52:48:d6:71:41:b4:8b:80:4d:d1:0d:b6:31:84:5e:72:
06:72:6f:cb:24:1f:f9:7d:50:9a:29:e7:c5:3d:ef:b5:e8:5b:
d0:76:07:77:82:60:5c:cb:e6:91:7d:6e:cc:67:74:88:6f:1b:
52:ff:ed:11:d2:a0:4d:f6:2f:b9:b8:32:56:6f:b3:06:cd:29:
ad:f6:ed:13:e2:5a:09:c8:5e:6f:47:c2:cd:d8:c2:3b:d4:d6:
bd:cc:2e:5d:07:6c:d7:0d:e6:54:ef:e7:78:82:20:49:62:12:
db:08:d8:47:a2:45:a1:c0:d5:bb:84:19:21:8a:ab:d8:54:91:
bc:53:59:93:57:8d:9a:b7:95:c9:e0:b8:00:d7:06:84:07:79:
9a:ff:a6:e4:d0:ef:d7:2a:4c:03:1e:a2:6b:9e:f6:68:7b:25:
ab:1f:28:c5:31:4c:78:85:ff:bd:1a:3c:c0:56:a2:7b:8f:80:
5b:8f:48:ff
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUBzbzoch5u1LeukruyKEwm8Y2H/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDQwMDMwNDFaFw0yNzAxMDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDIxMWYzZDVlNjIyNWYyNzJmYWQ4MDA5YjhhZDFjM2VkOWM0OTBlNGNmZWI3
MDI2MjlkNDI4ODRhOTUwMmM2ZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2r19T9WUQCiwcvl4OpaZs8ahd458e5muHRIanLoRDtEGW80wlotWRgXb/7
ut4WW0h7kCakpt/UwWW5a5joqf2lCOtgYaXKiaYpOcZYsWyA0BC6uoG577yQSvZw
bagiYN1+EANNcKj31A84gSBpskUHJEKjdENcZNejoG4wjVr/uwgi0fPtREbIE6z6
Hay2lmF9s9umrRII/+tal1wnUvQ+9dMaX889WJxZ6V0P+PXprtzCDcnv86WjgmTK
gpiVOK5tDX0dv5vqeu7h79E83VGMLUTGJMGDFG1ETHI1mlz+rBjFTZ+TJF8lCIGU
EzRBZSu0wF6vuiSsbDYsnA6niLcCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBQpGHrM
fk+VrjTgI8/zS4UK3k71PTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzM4MWMwNzUtZDk2Yi00M2JmLThhODktMjVkYmFiOWExYThkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFBCoF0BAw
DQYJKoZIhvcNAQELBQADggEBAHT7qIvhODkZXGdfTHseGnpUMyRAbfeAGq5Q9eil
of85+tjl3V0hGlxhzVaG2qusR9yg3MNfzqyQBEKYHhWOODNlrYKXssevt3xmUkjW
cUG0i4BN0Q22MYRecgZyb8skH/l9UJop58U977XoW9B2B3eCYFzL5pF9bsxndIhv
G1L/7RHSoE32L7m4MlZvswbNKa327RPiWgnIXm9Hws3YwjvU1r3MLl0HbNcN5lTv
53iCIEliEtsI2EeiRaHA1buEGSGKq9hUkbxTWZNXjZq3lcnguADXBoQHeZr/puTQ
79cqTAMeomue9mh7JasfKMUxTHiF/70aPMBWonuPgFuPSP8=
-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:49 2026 by rpki-client