Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
File: 7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa (raw, json)
Hash identifier: pcH9H9+NytQEIIIoHft9Ov5UvYg6rMnx0vSRXpyKSl4=
Subject key identifier: 77:5D:BD:67:8F:C5:39:F8:F6:0A:14:1E:D2:19:41:5F:61:83:FF:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7207245546DE892BD26A7EC6BC399558AB0CE553
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
Signing time: Mon 26 Oct 2026 05:30:13 +0000
ROA not before: Mon 26 Oct 2026 05:30:13 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:07:24:55:46:de:89:2b:d2:6a:7e:c6:bc:39:95:58:ab:0c:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:13 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=748fcc4111dd5e7238c7610ab76f3826c03c7f77e5f647ca7d584f47ff5e135d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:1c:9c:9e:ea:7b:84:92:67:2e:eb:06:df:
9c:fd:98:63:d2:fe:74:4a:c0:c4:3f:3b:a8:a1:eb:
eb:22:32:37:74:b9:d5:84:b0:f0:15:d8:c0:8d:48:
36:a0:45:98:05:3a:fb:21:3a:f0:13:40:90:b8:ce:
69:28:c6:46:35:a1:62:08:ca:66:29:f2:ef:79:79:
8b:3b:f5:2c:81:26:48:c8:63:0f:2c:61:2c:37:5b:
72:3a:57:0e:d3:15:a7:3a:62:6b:58:0a:66:85:90:
4d:03:d3:3a:bb:7b:b3:b6:4f:1d:d6:26:30:29:78:
71:45:9b:d9:dd:4f:69:52:63:25:7b:8c:17:5a:4c:
31:45:f0:ef:8e:30:f6:08:79:7b:8b:36:92:89:b1:
54:d7:d7:ad:46:d3:84:3b:95:f2:5d:c7:2b:4e:41:
42:e1:b7:ba:f0:03:57:20:cd:ce:74:4c:9d:67:f3:
86:f1:ce:e8:96:60:48:8b:a7:bf:9c:3d:ed:20:77:
64:ce:6b:05:56:79:88:86:0d:ed:96:7a:ec:0b:93:
ca:d8:a4:4c:9e:40:40:e6:68:95:8e:b2:36:5b:bd:
74:51:16:0b:7a:0b:30:e1:4d:d4:bc:41:8f:6e:d7:
1c:cc:a9:8d:07:e6:68:e5:07:eb:91:42:7c:ad:41:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:BD:67:8F:C5:39:F8:F6:0A:14:1E:D2:19:41:5F:61:83:FF:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7df76649-dcc0-4f8c-be6b-13fca27ec4f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/36
Signature Algorithm: sha256WithRSAEncryption
b3:08:bf:61:18:71:f3:8a:9a:25:39:eb:16:c7:d1:18:c1:c4:
d3:61:3b:0b:85:93:5e:36:73:b0:c0:f1:30:c9:be:66:70:c7:
27:99:0b:32:dc:46:03:15:06:45:5b:43:b5:a3:d5:06:9b:8c:
f1:30:2b:2a:4f:b7:f3:10:fb:c9:0e:5e:49:fd:fb:36:4b:2d:
43:9f:3b:77:a8:59:7c:91:c7:b0:74:38:4c:55:b2:7b:e4:a1:
ca:0b:a2:85:45:ea:b5:ff:d2:aa:ac:b6:25:0b:90:8f:2f:70:
be:f5:56:a4:f3:ce:c0:68:76:a9:37:af:0f:01:4a:00:62:ff:
e5:60:0e:3d:16:94:e5:58:0d:12:f2:1b:a7:f4:0f:cd:9d:85:
9d:db:8b:8a:d7:df:87:84:9b:b5:85:70:1c:32:99:a8:de:ce:
a9:00:94:c8:00:4e:d2:f6:24:02:6e:4f:7e:1f:83:38:15:55:
ce:e0:6e:35:4c:8f:72:35:ec:ab:4d:5e:b1:cd:1e:35:70:6e:
15:5b:af:7b:b1:72:ec:53:c4:e4:6b:a9:52:52:07:26:e7:f8:
8f:92:85:c3:dd:d9:ee:e7:f9:74:d1:6f:ff:ec:10:a1:9f:40:
b7:0b:3a:db:31:37:94:c8:e0:30:c1:9f:f1:6e:f3:87:1c:ac:
00:98:95:d2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcgckVUbeiSvSan7GvDmVWKsM5VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwMTNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDc0OGZjYzQxMTFkZDVlNzIzOGM3NjEwYWI3NmYzODI2YzAzYzdmNzdlNWY2
NDdjYTdkNTg0ZjQ3ZmY1ZTEzNWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOzJHJye6nuEkmcu6wbfnP2YY9L+dErAxD87qKHr6yIyN3S51YSw8BXYwI1I
NqBFmAU6+yE68BNAkLjOaSjGRjWhYgjKZiny73l5izv1LIEmSMhjDyxhLDdbcjpX
DtMVpzpia1gKZoWQTQPTOrt7s7ZPHdYmMCl4cUWb2d1PaVJjJXuMF1pMMUXw744w
9gh5e4s2komxVNfXrUbThDuV8l3HK05BQuG3uvADVyDNznRMnWfzhvHO6JZgSIun
v5w97SB3ZM5rBVZ5iIYN7ZZ67AuTytikTJ5AQOZolY6yNlu9dFEWC3oLMOFN1LxB
j27XHMypjQfmaOUH65FCfK1BYY8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR3Xb1n
j8U5+PYKFB7SGUFfYYP/fzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2RmNzY2NDktZGNjMC00ZjhjLWJlNmItMTNmY2EyN2VjNGYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BIA
MA0GCSqGSIb3DQEBCwUAA4IBAQCzCL9hGHHzipolOesWx9EYwcTTYTsLhZNeNnOw
wPEwyb5mcMcnmQsy3EYDFQZFW0O1o9UGm4zxMCsqT7fzEPvJDl5J/fs2Sy1Dnzt3
qFl8kcewdDhMVbJ75KHKC6KFReq1/9KqrLYlC5CPL3C+9Vak887AaHapN68PAUoA
Yv/lYA49FpTlWA0S8hun9A/NnYWd24uK19+HhJu1hXAcMpmo3s6pAJTIAE7S9iQC
bk9+H4M4FVXO4G41TI9yNeyrTV6xzR41cG4VW697sXLsU8Tka6lSUgcm5/iPkoXD
3dnu5/l00W//7BChn0C3CzrbMTeUyOAwwZ/xbvOHHKwAmJXS
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:55 2026 by rpki-client