Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
File: 8e492412-994d-4c48-a29e-9082ebce3349.roa (raw, json)
Hash identifier: 2Vkgi6eZX+sNoNFSk3MuO94Z1Fvbxn+DfK5gkt1SAqs=
Subject key identifier: 10:D1:09:F8:05:D3:E7:CE:31:CE:0F:0B:F7:7E:89:44:60:4D:6A:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6100B558CE585F420341742472BE06CF63D5E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
Signing time: Mon 26 Oct 2026 04:30:11 +0000
ROA not before: Mon 26 Oct 2026 04:30:11 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:00:b5:58:ce:58:5f:42:03:41:74:24:72:be:06:cf:63:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:11 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5429368741627dfafb81a75614f3b7d94190f8985a0fb2a15d0464665f2017c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:3b:f0:05:f8:77:14:84:b4:33:04:37:48:
cc:64:39:6c:76:96:da:26:0a:86:b3:25:c7:48:44:
05:56:62:51:1f:bc:b4:ff:57:6d:df:b1:c9:b9:0f:
fe:85:89:7c:02:0a:c9:81:ba:93:39:30:b5:9d:15:
2f:ae:f8:9d:bd:08:64:3b:56:39:ba:d5:08:7a:74:
5f:27:20:f2:76:4f:af:4f:6b:e6:1b:ee:d2:48:49:
60:a8:2c:d3:c0:a2:29:46:53:e0:cc:06:29:5f:91:
a6:5c:24:e7:c2:e2:25:c0:d1:55:17:24:e7:28:d9:
b4:53:3b:e0:17:d0:4f:b6:f1:00:28:98:04:d6:6f:
ea:4b:1b:37:6a:60:0f:71:dc:57:a0:ca:e3:5b:86:
39:c3:db:d8:cc:85:8d:3d:68:af:c7:be:ca:9f:8b:
cb:0c:92:c7:a1:79:91:e2:bb:64:74:31:0b:81:4d:
ad:85:34:60:9b:e8:2e:b1:2d:cd:39:86:ae:62:29:
f8:cc:19:38:37:90:d6:4c:7c:97:86:e3:14:59:f8:
85:b3:42:82:d8:ad:4a:70:b0:98:4b:23:c3:4b:c3:
3e:d4:60:23:da:4d:99:00:37:6b:dd:2c:6e:d0:d6:
a2:e7:8a:25:c6:0c:fa:70:7e:ff:44:9c:ee:f7:7b:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D1:09:F8:05:D3:E7:CE:31:CE:0F:0B:F7:7E:89:44:60:4D:6A:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
58:34:c3:c5:3d:9c:2d:44:6b:25:8e:42:8e:f7:03:1d:62:36:
08:87:c2:00:6a:19:63:25:99:77:1d:af:6e:3f:a6:aa:5c:13:
fb:f6:e6:3f:9a:fa:23:2f:3b:90:5d:4b:cd:30:29:71:e5:74:
ea:81:a5:ef:e5:e7:75:31:f9:cf:4c:9a:b5:50:46:90:90:1b:
83:f2:5b:78:2e:db:eb:91:40:03:fd:9f:ed:37:36:0f:38:53:
8e:9a:d1:66:03:90:64:4c:b3:d2:26:24:d6:9c:33:a7:c0:12:
13:3c:75:1b:cb:33:a2:e0:ed:b1:31:32:ec:6c:54:a5:c8:24:
1a:af:01:b8:2c:3c:24:ec:da:e4:e0:1c:d7:47:95:bd:e0:72:
69:17:d4:75:0e:50:27:77:fd:10:2e:b2:90:b5:4b:a0:bc:43:
d2:c7:8a:51:87:b4:48:33:c1:f1:ca:12:b6:5f:73:56:af:4d:
fd:60:50:82:ab:2e:de:7b:5e:5e:b6:24:77:44:97:00:2e:8e:
24:81:20:58:44:e5:52:26:57:43:6e:ee:be:51:48:5d:95:27:
6a:fe:11:c5:a7:c9:09:93:a1:48:8d:d2:6c:82:2f:cf:fc:89:
de:f8:18:85:b2:3b:56:5b:c9:b7:33:94:fa:e7:e2:b3:a1:47:
3b:dd:e4:d7
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgITYQC1WM5YX0IDQXQkcr4Gz2PV4DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg4YjYyNjNkYmU5Nzk5ZGQ2NzkzZTBlODgyYWQyMWNiNDg0
OTk3MGJjMB4XDTI2MTAyNjA0MzAxMVoXDTI3MDEyNDIzNTk1OVowejFJMEcGA1UE
BRNANTQyOTM2ODc0MTYyN2RmYWZiODFhNzU2MTRmM2I3ZDk0MTkwZjg5ODVhMGZi
MmExNWQwNDY0NjY1ZjIwMTdjODEtMCsGA1UEAxMkNjYxNWEzOGItM2FkNy00N2I3
LThmYjItNjg1YzM4ZDAwOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztU78AX4dxSEtDMEN0jMZDlsdpbaJgqGsyXHSEQFVmJRH7y0/1dt37HJuQ/+
hYl8AgrJgbqTOTC1nRUvrvidvQhkO1Y5utUIenRfJyDydk+vT2vmG+7SSElgqCzT
wKIpRlPgzAYpX5GmXCTnwuIlwNFVFyTnKNm0UzvgF9BPtvEAKJgE1m/qSxs3amAP
cdxXoMrjW4Y5w9vYzIWNPWivx77Kn4vLDJLHoXmR4rtkdDELgU2thTRgm+gusS3N
OYauYin4zBk4N5DWTHyXhuMUWfiFs0KC2K1KcLCYSyPDS8M+1GAj2k2ZADdr3Sxu
0Nai54olxgz6cH7/RJzu93snSQIDAQABo4ICIzCCAh8wHQYDVR0OBBYEFBDRCfgF
0+fOMc4PC/d+iURgTWo9MB8GA1UdIwQYMBaAFItiY9vpeZ3WeT4OiCrSHLSEmXC8
MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvaTJKajItbDVu
ZFo1UGc2SUt0SWN0SVNaY0x3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsG
AQUFBzALhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5j
b20vdm9sdW1lL2RiYThmMDFjLTk2NjktNDRhMy1hYzZlLWRiMmVkYjA5OWI4NC84
ZTQ5MjQxMi05OTRkLTRjNDgtYTI5ZS05MDgyZWJjZTMzNDkucm9hMIGIBgNVHR8E
gYAwfjB8oHqgeIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25h
d3MuY29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTli
ODQvdU9EYXRkdFljMUhyaHRVUVZReXJESzA4R2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXQeoAw
DQYJKoZIhvcNAQELBQADggEBAFg0w8U9nC1EayWOQo73Ax1iNgiHwgBqGWMlmXcd
r24/pqpcE/v25j+a+iMvO5BdS80wKXHldOqBpe/l53Ux+c9MmrVQRpCQG4PyW3gu
2+uRQAP9n+03Ng84U46a0WYDkGRMs9ImJNacM6fAEhM8dRvLM6Lg7bExMuxsVKXI
JBqvAbgsPCTs2uTgHNdHlb3gcmkX1HUOUCd3/RAuspC1S6C8Q9LHilGHtEgzwfHK
ErZfc1avTf1gUIKrLt57Xl62JHdElwAujiSBIFhE5VImV0Nu7r5RSF2VJ2r+EcWn
yQmToUiN0myCL8/8id74GIWyO1ZbybczlPrn4rOhRzvd5Nc=
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:51:50 2026 by rpki-client