Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa
File: 8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa (raw, json)
Hash identifier: N8YTEHWaz4qkyQFq3+bHQllP8PX8ZeiQltK9pDtHNTg=
Subject key identifier: 30:C0:10:84:59:84:01:FF:80:47:7F:6A:D0:2B:F0:A2:31:ED:1F:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BC60382586EDD1A5724C1CB7860064A65428086
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa
Signing time: Thu 29 Oct 2026 01:02:14 +0000
ROA not before: Thu 29 Oct 2026 01:02:14 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c6:03:82:58:6e:dd:1a:57:24:c1:cb:78:60:06:4a:65:42:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:14 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=2d9b1b6e788e5576aacf9e0e1da6baf2e6cc0cbf824dcd748fa06ab3f34e0b1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:38:aa:a6:80:0b:0c:bb:75:ae:88:d1:67:
b5:b5:c4:69:c9:df:94:5a:86:4e:f8:e2:e6:29:48:
d1:1d:e5:44:fa:21:9b:74:0e:21:53:f7:cd:c4:c2:
43:bb:12:40:e0:c5:e7:ff:8a:ef:e8:5d:76:8d:9e:
03:86:0a:ca:bc:7b:a6:d4:a9:2d:46:39:36:ba:ea:
b2:08:bf:c8:c7:23:ab:9a:5f:ce:a5:47:c2:6a:04:
ae:e5:68:a1:5c:51:dc:a4:06:73:d8:9c:15:e2:3f:
c6:a2:68:6a:8b:bf:ba:14:b6:e0:11:6d:83:ef:13:
f3:27:09:2d:17:d6:0c:06:08:b5:9e:90:67:00:14:
6e:44:02:2b:7b:a8:c9:d5:a6:14:24:87:02:3f:35:
8d:bb:24:d5:ca:94:2d:32:ea:72:23:7e:03:bb:2f:
de:99:83:26:cc:97:96:4e:13:41:77:3d:d1:40:b8:
0d:ba:87:d7:15:fb:e9:1e:ea:02:8b:f4:77:ac:59:
36:e2:0b:ef:09:e6:8d:0e:6d:a0:b2:c3:58:c4:e7:
7d:3b:3f:b5:03:29:f3:32:ad:bf:bd:32:8e:70:84:
cb:3a:45:92:22:ad:1b:0b:8b:cd:5b:52:8d:27:83:
53:df:6c:4a:4a:32:43:b1:f2:8f:ad:18:c9:5f:5e:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:10:84:59:84:01:FF:80:47:7F:6A:D0:2B:F0:A2:31:ED:1F:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bd0f638-6a0d-4a86-aec3-8e2fef4e514f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:b000::/40
Signature Algorithm: sha256WithRSAEncryption
74:c1:44:35:34:d4:e0:82:38:71:3e:05:08:85:ea:5e:f4:55:
2e:60:b9:6e:4e:77:fc:51:05:f7:2e:07:b7:9b:22:72:23:83:
8d:40:6e:b0:8c:ac:22:09:56:8e:f7:7a:d2:15:b0:5b:57:44:
0f:61:15:f5:4c:d4:f6:54:b1:15:e1:ae:32:3c:0a:4f:d2:c1:
fa:2b:b5:7d:11:45:43:ee:80:11:92:eb:35:bb:be:da:6b:f3:
db:26:8b:9a:f3:bf:e5:4f:fe:7b:45:7b:9d:fb:72:d0:de:09:
6c:78:54:33:f2:0a:01:82:97:f5:2d:11:2d:6a:f2:b6:fb:74:
7a:71:6a:bd:72:3f:4d:e5:d7:d6:79:09:b8:07:f2:67:94:97:
70:f4:4f:8a:37:f4:05:79:f3:fe:9b:1d:eb:b7:ae:91:73:bb:
19:36:cf:1e:cf:95:2f:bb:1d:35:f0:3c:e8:63:3c:b8:3a:ca:
e9:e9:cd:0c:3f:77:f0:51:d9:64:fa:4f:b2:e7:d5:13:77:4c:
50:ce:b7:87:67:28:d1:eb:67:fe:ef:89:d0:80:c1:c8:38:5a:
01:36:13:d6:86:d9:28:d2:a5:10:7d:7b:36:3e:73:d9:bc:7a:
d4:62:27:31:8d:4d:72:f0:37:ff:58:a9:c3:7e:5b:ae:06:d9:
e8:74:47:93
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUW8YDglhu3RpXJMHLeGAGSmVCgIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjkwMTAyMTRaFw0yNzAxMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDJkOWIxYjZlNzg4ZTU1NzZhYWNmOWUwZTFkYTZiYWYyZTZjYzBjYmY4MjRk
Y2Q3NDhmYTA2YWIzZjM0ZTBiMWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL99OKqmgAsMu3WuiNFntbXEacnflFqGTvji5ilI0R3lRPohm3QOIVP3zcTC
Q7sSQODF5/+K7+hddo2eA4YKyrx7ptSpLUY5Nrrqsgi/yMcjq5pfzqVHwmoEruVo
oVxR3KQGc9icFeI/xqJoaou/uhS24BFtg+8T8ycJLRfWDAYItZ6QZwAUbkQCK3uo
ydWmFCSHAj81jbsk1cqULTLqciN+A7sv3pmDJsyXlk4TQXc90UC4DbqH1xX76R7q
Aov0d6xZNuIL7wnmjQ5toLLDWMTnfTs/tQMp8zKtv70yjnCEyzpFkiKtGwuLzVtS
jSeDU99sSkoyQ7Hyj60YyV9edlMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQwwBCE
WYQB/4BHf2rQK/CiMe0fOTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGJkMGY2MzgtNmEwZC00YTg2LWFlYzMtOGUyZmVmNGU1MTRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GKw
MA0GCSqGSIb3DQEBCwUAA4IBAQB0wUQ1NNTggjhxPgUIhepe9FUuYLluTnf8UQX3
Lge3myJyI4ONQG6wjKwiCVaO93rSFbBbV0QPYRX1TNT2VLEV4a4yPApP0sH6K7V9
EUVD7oARkus1u77aa/PbJoua87/lT/57RXud+3LQ3glseFQz8goBgpf1LREtavK2
+3R6cWq9cj9N5dfWeQm4B/JnlJdw9E+KN/QFefP+mx3rt66Rc7sZNs8ez5Uvux01
8DzoYzy4Osrp6c0MP3fwUdlk+k+y59UTd0xQzreHZyjR62f+74nQgMHIOFoBNhPW
htko0qUQfXs2PnPZvHrUYicxjU1y8Df/WKnDfluuBtnodEeT
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:13 2026 by rpki-client