Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
File: 78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa (raw, json)
Hash identifier: Yxs6sXbQtn9wl1MQfosEGKs8XbHtiPfVZJPW1/sVveQ=
Subject key identifier: EF:36:D2:83:01:D8:1F:6F:85:C9:CD:47:03:9E:1B:60:38:39:EA:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6ABBE5F04B770FD993999AA2FA4E52C07FC7A962
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
Signing time: Sun 18 Oct 2026 01:30:32 +0000
ROA not before: Sun 18 Oct 2026 01:30:32 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bb:e5:f0:4b:77:0f:d9:93:99:9a:a2:fa:4e:52:c0:7f:c7:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:32 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=74a11dbac2d9ea2dac2fa4d7d57efcdc295b40dcdca919e0401fb15399567123, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:4e:ba:08:7a:30:2a:2a:55:ef:fc:54:0d:
a4:37:8e:15:40:4a:8c:55:b8:e5:95:1a:dd:4e:9d:
d3:9a:1d:fb:56:fd:cc:2c:0d:88:36:15:62:cf:9b:
c4:e4:57:b2:62:a5:2c:8b:c9:f9:36:e3:05:a6:7e:
50:a1:70:4a:91:69:b7:73:01:82:ab:8a:7a:b9:c2:
22:a8:e5:c7:20:99:df:6b:2f:32:ec:a2:80:60:44:
e9:6b:af:4f:78:71:03:8b:bb:1f:a7:30:b6:39:c2:
88:62:10:3e:46:9f:7b:2e:15:24:76:01:7a:87:9e:
fa:6f:46:ce:07:fd:da:1d:04:2a:7e:02:7c:40:fc:
97:50:41:43:05:96:e0:cc:45:86:56:31:47:5b:35:
73:04:96:f0:6f:7c:14:c5:a0:60:43:88:5e:eb:2b:
0d:8a:7e:76:0b:30:91:1e:65:ef:b6:be:71:06:bb:
e9:d4:ea:93:53:ff:53:1f:6d:f3:01:2e:7a:82:21:
89:5c:48:a2:3b:6d:14:fc:bb:bc:d2:84:c9:01:6c:
78:cd:6c:36:5e:94:0f:76:a7:f9:4b:46:83:6c:b2:
23:aa:d9:65:63:9a:2d:9d:b3:90:57:f9:ce:d0:88:
e0:e1:bf:f6:ef:87:7a:4c:97:92:43:f4:ce:a6:b9:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:D2:83:01:D8:1F:6F:85:C9:CD:47:03:9E:1B:60:38:39:EA:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:c000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:9d:59:a5:5f:fc:f3:77:0b:e3:b2:24:42:bc:3e:4c:99:bf:
4c:e5:94:b3:d8:c9:2f:a5:f6:51:4c:4f:fd:21:27:1a:fb:38:
ee:34:f5:1b:75:85:c5:ee:af:5e:03:1f:8c:a7:d6:4d:51:8f:
99:51:86:b7:f0:32:6d:36:ef:ad:f9:3e:d9:a9:09:01:fe:e4:
35:16:b3:06:a5:1e:bd:62:3c:58:eb:f2:93:2c:cf:4e:5c:a3:
95:32:d4:73:41:52:55:f6:e0:e3:4c:23:d7:f3:26:9a:98:e6:
8c:53:9a:32:c0:d8:74:9a:a1:70:be:c7:51:73:25:36:73:e6:
f4:8d:9a:df:53:50:4c:80:c0:fd:56:9b:6a:ce:bf:34:c4:1d:
74:45:7f:bb:c3:a8:41:4b:a5:30:ac:79:5a:07:f4:e8:dc:82:
a9:33:09:b0:a2:9c:91:07:65:ee:42:db:84:c9:fa:9c:c8:c3:
e6:af:87:39:19:02:14:14:fd:8d:2b:51:be:a5:57:e0:ff:16:
6f:37:b9:66:57:c8:7b:d8:e8:58:d4:6c:26:76:66:2e:7a:46:
ea:58:b2:46:fd:75:69:9e:bd:fd:54:83:82:f2:88:21:3c:dd:
35:cd:e9:9d:fa:e5:79:17:f5:32:78:01:c8:71:37:af:7a:26:
fa:81:42:11
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUarvl8Et3D9mTmZqi+k5SwH/HqWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTgwMTMwMzJaFw0yNzAxMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDc0YTExZGJhYzJkOWVhMmRhYzJmYTRkN2Q1N2VmY2RjMjk1YjQwZGNkY2E5
MTllMDQwMWZiMTUzOTk1NjcxMjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8DTroIejAqKlXv/FQNpDeOFUBKjFW45ZUa3U6d05od+1b9zCwNiDYVYs+b
xORXsmKlLIvJ+TbjBaZ+UKFwSpFpt3MBgquKernCIqjlxyCZ32svMuyigGBE6Wuv
T3hxA4u7H6cwtjnCiGIQPkafey4VJHYBeoee+m9Gzgf92h0EKn4CfED8l1BBQwWW
4MxFhlYxR1s1cwSW8G98FMWgYEOIXusrDYp+dgswkR5l77a+cQa76dTqk1P/Ux9t
8wEueoIhiVxIojttFPy7vNKEyQFseM1sNl6UD3an+UtGg2yyI6rZZWOaLZ2zkFf5
ztCI4OG/9u+HekyXkkP0zqa5qh8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTvNtKD
Adgfb4XJzUcDnhtgODnqFTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzgwODVkMGEtZjFhYy00M2I3LWFjNmItYThhZmNmOTc4MmY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DDA
MA0GCSqGSIb3DQEBCwUAA4IBAQC8nVmlX/zzdwvjsiRCvD5Mmb9M5ZSz2MkvpfZR
TE/9ISca+zjuNPUbdYXF7q9eAx+Mp9ZNUY+ZUYa38DJtNu+t+T7ZqQkB/uQ1FrMG
pR69YjxY6/KTLM9OXKOVMtRzQVJV9uDjTCPX8yaamOaMU5oywNh0mqFwvsdRcyU2
c+b0jZrfU1BMgMD9Vptqzr80xB10RX+7w6hBS6UwrHlaB/To3IKpMwmwopyRB2Xu
QtuEyfqcyMPmr4c5GQIUFP2NK1G+pVfg/xZvN7lmV8h72OhY1GwmdmYuekbqWLJG
/XVpnr39VIOC8oghPN01zemd+uV5F/UyeAHIcTeveib6gUIR
-----END CERTIFICATE-----
Generated at Sun Nov 1 00:58:42 2026 by rpki-client