Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: MHY8oBNHOqPwITngJw/uUOgI/ae4fe7H4KCfHAtJngY=
Subject key identifier: 00:CB:3F:EE:35:15:FC:08:F6:EF:48:99:39:DB:65:E7:BC:67:50:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 190BDC1DCA4F2174256172177A8A7CFF878C80E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Mon 26 Oct 2026 05:10:54 +0000
ROA not before: Mon 26 Oct 2026 05:10:54 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:0b:dc:1d:ca:4f:21:74:25:61:72:17:7a:8a:7c:ff:87:8c:80:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:54 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=45e75f275c6956e9e62d42491c934bf675ef732cc541d96aa378e0289047e85c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:2e:6a:42:ed:88:1d:06:81:e5:7b:56:79:
4c:d7:fa:c8:7c:b7:fb:ed:47:0b:2b:40:82:93:74:
d2:6b:78:ab:99:f2:40:db:63:a1:fc:0e:f8:d4:11:
8e:76:20:77:43:ef:48:9c:15:8e:6a:94:f4:d5:8d:
90:b2:34:5c:a3:47:97:a4:8c:e9:36:68:16:cf:8e:
8d:65:6b:be:2b:d1:cc:49:b3:e6:cd:96:55:0c:0c:
7c:7e:9d:3f:4d:e5:21:26:21:e1:83:fd:9d:7a:d2:
5d:8b:1c:19:39:7e:a5:e5:28:e5:aa:63:b6:79:47:
05:11:d6:26:75:6c:f2:ef:9b:05:73:6d:17:0b:11:
22:89:eb:c7:33:4e:28:45:99:2f:19:79:af:11:c2:
f7:97:17:45:5e:70:79:ba:a4:36:17:e3:95:c1:eb:
32:75:9f:fc:03:a4:3d:17:ef:46:27:e8:e6:f7:ae:
ad:59:a1:af:9d:1e:d7:86:a4:22:52:af:f4:5c:7f:
b8:b3:e2:d9:d4:c4:0f:22:bf:03:2d:ea:02:f2:58:
31:4b:82:3a:cf:78:fd:7d:dd:2e:44:13:07:5f:b0:
7c:f9:66:d7:bf:22:39:8a:19:aa:39:a6:9a:7b:32:
46:04:cc:11:60:20:63:9e:20:4f:cd:76:04:72:81:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:3F:EE:35:15:FC:08:F6:EF:48:99:39:DB:65:E7:BC:67:50:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
80:45:7a:a7:9f:de:91:4d:ff:7c:b2:8c:3b:1c:51:b5:cc:ba:
97:fb:11:5a:3d:90:2d:08:a8:9a:e4:47:50:6a:26:a7:57:00:
da:c2:ce:d6:4d:54:d3:0c:dc:1a:62:a6:42:07:20:af:32:03:
27:91:87:f9:21:5d:39:48:1a:99:2a:3a:fe:68:23:5f:6e:16:
dc:f8:c0:64:7e:c9:ab:a4:16:30:19:07:4e:98:8f:0a:e4:7e:
72:2f:8d:4c:11:46:7b:c0:e2:79:9b:eb:3e:71:90:7c:98:4a:
53:e5:fa:ce:0e:d9:67:07:0c:e4:2c:77:01:c6:97:1a:f1:66:
ea:fb:05:e5:ed:65:e6:3a:81:56:8e:af:d8:86:1c:99:43:65:
ef:91:40:a5:e9:fd:74:7b:fb:11:04:92:91:e1:65:94:f7:d9:
4a:85:38:49:dd:fe:52:bc:96:d2:bf:29:b0:73:60:00:47:40:
60:fc:11:6c:22:f5:83:fc:d5:ca:7c:5c:45:a1:13:44:92:8e:
c3:93:97:24:53:17:46:54:42:6f:a6:b6:84:bc:d6:96:36:73:
5c:2b:f8:cd:09:94:0c:b8:f1:a0:7c:58:c2:ae:52:54:fd:71:
58:77:a5:2f:4a:56:a5:42:e4:ba:cd:b5:20:e7:92:63:f6:c2:
9e:8d:5e:2b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGQvcHcpPIXQlYXIXeop8/4eMgOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTEwNTRaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1ZTc1ZjI3NWM2OTU2ZTllNjJkNDI0OTFjOTM0YmY2NzVlZjczMmNjNTQx
ZDk2YWEzNzhlMDI4OTA0N2U4NWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPJYLmpC7YgdBoHle1Z5TNf6yHy3++1HCytAgpN00mt4q5nyQNtjofwO+NQR
jnYgd0PvSJwVjmqU9NWNkLI0XKNHl6SM6TZoFs+OjWVrvivRzEmz5s2WVQwMfH6d
P03lISYh4YP9nXrSXYscGTl+peUo5apjtnlHBRHWJnVs8u+bBXNtFwsRIonrxzNO
KEWZLxl5rxHC95cXRV5webqkNhfjlcHrMnWf/AOkPRfvRifo5veurVmhr50e14ak
IlKv9Fx/uLPi2dTEDyK/Ay3qAvJYMUuCOs94/X3dLkQTB1+wfPlm178iOYoZqjmm
mnsyRgTMEWAgY54gT812BHKBdjkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQAyz/u
NRX8CPbvSJk522XnvGdQ2DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGI1Nzg5MzgtM2RjYS00ZDcyLTgzODUtZjhhOTNlNTA4Mzc3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BkE
MA0GCSqGSIb3DQEBCwUAA4IBAQCARXqnn96RTf98sow7HFG1zLqX+xFaPZAtCKia
5EdQaianVwDaws7WTVTTDNwaYqZCByCvMgMnkYf5IV05SBqZKjr+aCNfbhbc+MBk
fsmrpBYwGQdOmI8K5H5yL41MEUZ7wOJ5m+s+cZB8mEpT5frODtlnBwzkLHcBxpca
8Wbq+wXl7WXmOoFWjq/YhhyZQ2XvkUCl6f10e/sRBJKR4WWU99lKhThJ3f5SvJbS
vymwc2AAR0Bg/BFsIvWD/NXKfFxFoRNEko7Dk5ckUxdGVEJvpraEvNaWNnNcK/jN
CZQMuPGgfFjCrlJU/XFYd6UvSlalQuS6zbUg55Jj9sKejV4r
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:27 2026 by rpki-client