Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e35d2d5-e2cf-432e-bf7c-f18a6a06f624.roa
File: 8e35d2d5-e2cf-432e-bf7c-f18a6a06f624.roa (raw, json)
Hash identifier: 3e8Ele1LVSYwywjZ2rfgb8QRLWPFrMV3dp8OaueDN+A=
Subject key identifier: 6B:88:2A:9F:83:44:B2:75:DF:F3:50:E2:F3:B4:65:48:99:41:C8:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 381D174FB95F3BE8D613155641B9433821E023D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e35d2d5-e2cf-432e-bf7c-f18a6a06f624.roa
Signing time: Thu 29 Oct 2026 00:50:05 +0000
ROA not before: Thu 29 Oct 2026 00:50:05 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1d:17:4f:b9:5f:3b:e8:d6:13:15:56:41:b9:43:38:21:e0:23:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 00:50:05 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=8d7141dba9b9b91ff7e8a42b33ec298f5e8fbc8d323d6296346d831f928632a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:37:37:a0:8a:7b:c9:e4:58:6c:b2:70:c1:
a2:5e:a8:ed:c0:c0:42:24:3a:83:9d:73:21:46:57:
ca:39:d5:15:56:05:b8:93:9a:b9:07:0f:14:2c:2b:
f2:bd:5b:fb:76:1f:31:d2:2f:80:25:cd:a8:b0:03:
91:ac:a7:fb:c3:c3:ae:47:90:e0:a6:a9:ff:c6:f9:
30:ff:32:4d:97:d6:d8:bd:5c:af:a3:e6:c2:36:8e:
04:af:10:95:8e:b7:7f:bc:79:e8:a6:7d:b0:95:e7:
af:bc:23:c8:61:02:69:45:19:ce:1a:2f:d1:d3:30:
fe:c5:67:a8:40:57:bc:f1:8e:4a:00:4b:15:4f:7d:
15:59:4c:93:65:22:bf:b2:5e:4b:cc:d4:b4:be:2b:
98:88:09:c2:77:c9:c4:69:63:f8:67:15:8b:16:b4:
97:84:7c:81:20:9b:bd:5d:a3:81:69:3b:de:90:91:
a6:7b:0d:da:0d:9b:eb:97:a2:d2:41:8f:b8:a5:87:
11:ef:2e:74:6b:94:66:b6:0c:1d:37:49:88:39:ad:
68:55:d5:fe:88:3f:d9:7b:5f:e3:c5:bd:02:2c:92:
dc:87:af:6a:8e:03:20:c8:c0:fc:9f:73:c1:60:51:
b7:ac:b7:9f:53:a2:d5:c5:0e:1e:0d:5d:f6:b1:45:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:2A:9F:83:44:B2:75:DF:F3:50:E2:F3:B4:65:48:99:41:C8:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e35d2d5-e2cf-432e-bf7c-f18a6a06f624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:9040::/48
Signature Algorithm: sha256WithRSAEncryption
c6:c0:30:7d:c9:55:37:9d:19:ef:cd:6d:af:b7:5e:31:01:a1:
ed:b3:1c:2e:79:d8:51:6e:fe:c9:40:2d:83:90:34:39:0a:0e:
79:d4:7e:59:46:b9:8f:4d:de:1d:a1:bc:67:73:d7:d0:72:33:
ca:2e:47:39:6a:35:21:64:72:86:18:05:24:f5:01:76:18:88:
63:fd:f8:62:bd:2e:54:f3:ef:96:c8:1b:68:eb:b9:f9:ac:ea:
e1:57:d8:f6:4f:af:f7:ce:5a:4d:87:f2:cb:7a:07:be:9c:a2:
08:d3:60:9d:4c:ff:4a:ac:7a:2d:e1:50:81:b3:bb:8a:44:f0:
20:93:52:97:80:07:73:37:45:4b:83:e4:2b:7a:cd:40:51:ed:
25:37:93:c8:c7:8c:cf:ad:0d:91:09:06:7f:4e:53:e4:20:be:
83:1b:d7:25:95:9f:24:9f:bc:87:c4:86:e1:77:a4:2a:f6:94:
a9:2b:fc:b2:e3:09:72:f8:81:a2:af:d9:a0:7e:bb:61:1a:3d:
28:bd:b0:a9:19:79:6c:06:b6:68:26:b7:a7:0f:a5:96:94:f0:
0b:f7:80:0f:01:94:23:7d:24:9c:ae:13:4a:53:49:79:f7:1d:
99:7e:3f:0f:ed:a9:02:83:da:50:d1:9d:f1:ec:ef:31:01:27:
de:ba:76:c2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOB0XT7lfO+jWExVWQblDOCHgI9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjkwMDUwMDVaFw0yNzAxMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDhkNzE0MWRiYTliOWI5MWZmN2U4YTQyYjMzZWMyOThmNWU4ZmJjOGQzMjNk
NjI5NjM0NmQ4MzFmOTI4NjMyYTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ2mNzeginvJ5FhssnDBol6o7cDAQiQ6g51zIUZXyjnVFVYFuJOauQcPFCwr
8r1b+3YfMdIvgCXNqLADkayn+8PDrkeQ4Kap/8b5MP8yTZfW2L1cr6PmwjaOBK8Q
lY63f7x56KZ9sJXnr7wjyGECaUUZzhov0dMw/sVnqEBXvPGOSgBLFU99FVlMk2Ui
v7JeS8zUtL4rmIgJwnfJxGlj+GcVixa0l4R8gSCbvV2jgWk73pCRpnsN2g2b65ei
0kGPuKWHEe8udGuUZrYMHTdJiDmtaFXV/og/2Xtf48W9AiyS3Ievao4DIMjA/J9z
wWBRt6y3n1Oi1cUOHg1d9rFFq/ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRriCqf
g0Sydd/zUOLztGVImUHIJzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGUzNWQyZDUtZTJjZi00MzJlLWJmN2MtZjE4YTZhMDZmNjI0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GiQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAxsAwfclVN50Z781tr7deMQGh7bMcLnnYUW7+
yUAtg5A0OQoOedR+WUa5j03eHaG8Z3PX0HIzyi5HOWo1IWRyhhgFJPUBdhiIY/34
Yr0uVPPvlsgbaOu5+azq4VfY9k+v985aTYfyy3oHvpyiCNNgnUz/Sqx6LeFQgbO7
ikTwIJNSl4AHczdFS4PkK3rNQFHtJTeTyMeMz60NkQkGf05T5CC+gxvXJZWfJJ+8
h8SG4XekKvaUqSv8suMJcviBoq/ZoH67YRo9KL2wqRl5bAa2aCa3pw+llpTwC/eA
DwGUI30knK4TSlNJefcdmX4/D+2pAoPaUNGd8ezvMQEn3rp2wg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:51 2026 by rpki-client