Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74c7eb62-ad02-4aa2-9be5-024692c6239f.roa
File: 74c7eb62-ad02-4aa2-9be5-024692c6239f.roa (raw, json)
Hash identifier: 3d71O5w4r4/A1ZascM/mCRwWSP9aKaUpdnvAlJc6Kks=
Subject key identifier: CA:83:B9:FD:E4:D7:EB:9A:40:73:72:3D:8D:EE:64:7D:4B:04:74:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30547DF72A68CEA433D8221AB773AB750FF514F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74c7eb62-ad02-4aa2-9be5-024692c6239f.roa
Signing time: Mon 26 Oct 2026 04:40:24 +0000
ROA not before: Mon 26 Oct 2026 04:40:24 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:54:7d:f7:2a:68:ce:a4:33:d8:22:1a:b7:73:ab:75:0f:f5:14:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:24 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=0b498f9e941836a3731b79d6bdff1bce52ca6889bbec580545c0ecb5e57aac85, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:89:06:29:2b:63:e6:7f:2a:a0:d3:4f:22:
d8:6c:40:1b:44:60:53:77:26:5c:07:d2:32:9d:70:
2a:18:4a:78:2f:35:18:ee:41:4b:0d:34:d9:4f:50:
1b:32:0c:17:15:07:a4:61:6a:c8:e8:19:80:cf:57:
3b:92:ef:c2:26:b5:00:e5:c8:a3:b6:d3:7d:1e:ff:
78:dd:cb:65:96:78:2a:3b:3c:2a:2c:31:7d:88:f4:
df:e4:da:82:c8:c8:aa:a6:9c:c8:67:b7:ed:da:d3:
4f:3a:10:91:1b:e2:75:ad:76:28:6a:17:94:19:65:
d8:93:d3:4b:06:7a:bb:c5:4a:61:3f:4b:e8:bc:6c:
2e:10:8f:7c:b5:1c:b9:8f:e2:07:e2:3e:0c:3f:e4:
18:db:b2:d5:ea:2c:69:ba:f2:9b:5c:e8:d6:8c:b8:
df:30:25:d5:df:f8:3c:b8:65:d9:10:7a:72:1a:cb:
18:6c:4f:fc:9f:ac:93:db:5d:23:d6:8f:8a:6d:c5:
c6:95:49:fc:1d:f5:01:93:94:b7:0f:1a:56:c9:c4:
c6:ff:24:a3:a3:d3:28:62:e7:1f:2a:11:26:93:e6:
ec:ce:57:fb:57:88:93:62:45:45:66:40:8f:95:5f:
ab:f6:3d:e7:ff:b7:84:7f:64:0e:83:6f:2d:33:ce:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:B9:FD:E4:D7:EB:9A:40:73:72:3D:8D:EE:64:7D:4B:04:74:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74c7eb62-ad02-4aa2-9be5-024692c6239f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:3f:79:f0:93:55:34:5e:51:da:a3:a3:01:51:52:46:9a:8d:
ce:69:57:7b:d9:ae:33:a8:b1:74:e8:4f:38:47:fd:3c:05:c5:
25:50:52:21:1a:dc:2f:33:e6:24:a8:4d:91:0f:62:9e:ef:1d:
ce:27:d5:c2:b4:70:e6:c3:e1:c4:56:cf:9a:e0:9f:7a:de:a6:
c1:e8:a3:96:3a:5a:41:07:fb:1f:d9:62:f4:ca:3d:4d:be:dd:
98:6f:cb:89:15:4f:c7:8b:89:bf:c3:9e:9a:d6:52:15:4f:b7:
d7:cf:85:3c:9a:d6:ad:eb:61:8f:28:e9:a6:47:bd:c5:d1:29:
58:e1:e1:7a:2b:5c:c1:2b:bf:6c:65:29:02:b5:ba:41:77:0d:
b5:a2:28:e8:22:65:73:90:97:d0:07:95:38:98:57:4a:3f:48:
2d:ee:8c:a6:86:7e:2c:4d:9c:64:5d:4d:0d:e6:a4:57:8e:7e:
c5:44:7b:b2:5f:9d:33:bc:d6:42:0e:b0:83:0c:c5:51:57:e4:
21:33:18:ec:10:6e:99:65:10:a0:ce:e2:b3:31:70:b4:d7:40:
9b:ad:0a:f4:6c:38:54:43:04:a7:2f:6c:50:9c:8d:f1:07:bf:
60:5c:b2:d9:78:47:32:c5:10:22:fa:eb:44:70:0e:48:6a:d8:
87:a5:2e:56
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMFR99ypozqQz2CIat3OrdQ/1FPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwMjRaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDBiNDk4ZjllOTQxODM2YTM3MzFiNzlkNmJkZmYxYmNlNTJjYTY4ODliYmVj
NTgwNTQ1YzBlY2I1ZTU3YWFjODUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKX5iQYpK2Pmfyqg008i2GxAG0RgU3cmXAfSMp1wKhhKeC81GO5BSw002U9Q
GzIMFxUHpGFqyOgZgM9XO5Lvwia1AOXIo7bTfR7/eN3LZZZ4Kjs8KiwxfYj03+Ta
gsjIqqacyGe37drTTzoQkRvida12KGoXlBll2JPTSwZ6u8VKYT9L6LxsLhCPfLUc
uY/iB+I+DD/kGNuy1eosabrym1zo1oy43zAl1d/4PLhl2RB6chrLGGxP/J+sk9td
I9aPim3FxpVJ/B31AZOUtw8aVsnExv8ko6PTKGLnHyoRJpPm7M5X+1eIk2JFRWZA
j5Vfq/Y95/+3hH9kDoNvLTPOw1UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTKg7n9
5NfrmkBzcj2N7mR9SwR06DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzRjN2ViNjItYWQwMi00YWEyLTliZTUtMDI0NjkyYzYyMzlmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0AAg
MA0GCSqGSIb3DQEBCwUAA4IBAQAvP3nwk1U0XlHao6MBUVJGmo3OaVd72a4zqLF0
6E84R/08BcUlUFIhGtwvM+YkqE2RD2Ke7x3OJ9XCtHDmw+HEVs+a4J963qbB6KOW
OlpBB/sf2WL0yj1Nvt2Yb8uJFU/Hi4m/w56a1lIVT7fXz4U8mtat62GPKOmmR73F
0SlY4eF6K1zBK79sZSkCtbpBdw21oijoImVzkJfQB5U4mFdKP0gt7oymhn4sTZxk
XU0N5qRXjn7FRHuyX50zvNZCDrCDDMVRV+QhMxjsEG6ZZRCgzuKzMXC010CbrQr0
bDhUQwSnL2xQnI3xB79gXLLZeEcyxRAi+utEcA5IatiHpS5W
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:44 2026 by rpki-client