Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/911a7cb7-4436-4fbb-b233-39d517763289.roa
File: 911a7cb7-4436-4fbb-b233-39d517763289.roa (raw, json)
Hash identifier: vwvx2FUwWhQVqFUsUxrACfkWyEQKknfAJlg4tKVkBW4=
Subject key identifier: FD:49:93:59:DD:16:3D:1C:44:2B:3F:82:4C:1F:30:81:50:F7:3C:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A850517E30E5192F349CF6904FD25B415715ACE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/911a7cb7-4436-4fbb-b233-39d517763289.roa
Signing time: Thu 08 Oct 2026 17:24:34 +0000
ROA not before: Thu 08 Oct 2026 17:24:34 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:85:05:17:e3:0e:51:92:f3:49:cf:69:04:fd:25:b4:15:71:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:34 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=bcb322a2e473d49fac84484f823ff7927fc890953fd289bb7269cb8a31f2b481, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:79:f1:79:28:f6:b7:33:03:b0:b6:c6:1e:
0b:40:81:4e:db:a5:04:91:2f:2d:66:9a:e9:56:4f:
d9:7a:c6:97:d6:45:21:75:01:f1:10:62:d0:68:1a:
e1:c1:71:6a:1d:00:80:dd:a3:42:ac:b6:d2:c3:71:
24:7a:5f:ec:9b:fd:49:ff:72:ed:de:fa:c4:7a:8d:
77:a8:b6:03:c0:03:9f:48:c4:93:63:18:6c:50:fa:
88:dd:42:76:56:8c:a0:32:04:d6:1a:89:4b:b6:fb:
7e:d6:d3:2f:c5:31:98:93:c8:98:7f:43:38:fb:0b:
c7:32:04:48:51:26:79:e0:33:24:17:8b:5d:c4:a7:
26:7d:e2:c0:87:c8:96:16:06:7b:ee:c2:a2:08:e2:
30:64:09:9a:8e:79:d9:af:8e:bf:39:20:86:94:f8:
7c:40:4f:8c:6d:4c:a1:dc:a4:b7:16:ee:ba:e7:64:
9e:b3:48:19:c0:57:60:47:28:8b:bf:b4:2d:de:66:
96:1d:e1:ef:c6:16:55:bd:16:38:10:0f:73:a1:2b:
f6:5c:e2:ce:13:3d:54:b9:1e:47:7e:b1:e7:0b:10:
4a:45:18:40:c9:64:bf:e0:0a:50:ce:6d:ac:4e:ff:
fa:a9:a1:0c:78:1d:68:7d:cb:9a:c4:34:f9:ad:c9:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:93:59:DD:16:3D:1C:44:2B:3F:82:4C:1F:30:81:50:F7:3C:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/911a7cb7-4436-4fbb-b233-39d517763289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:25:e7:29:c6:8a:ee:19:39:1d:3d:c8:f1:a1:93:f4:31:6e:
68:91:76:76:6c:ad:14:f7:e0:93:16:b3:04:8d:4a:1b:1a:ca:
6b:37:95:00:40:e2:c7:82:2c:de:bc:7f:02:fc:4a:c4:c7:49:
2d:f0:f0:cf:50:4f:4c:bd:0b:55:20:9a:c5:f8:d5:52:b9:88:
c0:6c:d8:e5:65:d1:51:5c:07:ac:2c:b6:31:9b:de:0b:88:9b:
c9:d8:c1:2a:57:78:f4:d1:da:f5:7d:b0:5d:f9:89:8b:e1:2e:
95:bd:1f:7e:e4:a1:09:3b:fe:19:f4:cc:e1:60:1d:d1:75:d4:
1a:54:de:cf:6c:a3:1a:90:f8:e9:aa:af:d2:f5:ca:b3:c1:3e:
59:22:80:58:cc:53:8b:7d:0f:8f:b3:ae:ae:01:94:a3:b7:18:
f0:86:31:8b:2a:61:95:ae:a6:69:86:92:ae:b5:63:21:5d:63:
34:8e:de:a1:28:5c:88:66:53:b5:eb:01:26:b4:0e:d1:fc:27:
48:98:af:5c:a9:0e:da:e8:23:ec:ad:a2:8f:91:b6:75:a4:cd:
84:54:99:cd:86:c6:e0:5d:b8:ea:fe:f4:88:08:21:69:46:d8:
6e:d9:24:b2:69:40:7d:e6:83:2f:44:90:55:25:9b:b8:48:f9:
52:ad:c8:4b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCoUFF+MOUZLzSc9pBP0ltBVxWs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDgxNzI0MzRaFw0yNzAxMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjYjMyMmEyZTQ3M2Q0OWZhYzg0NDg0ZjgyM2ZmNzkyN2ZjODkwOTUzZmQy
ODliYjcyNjljYjhhMzFmMmI0ODExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJnefF5KPa3MwOwtsYeC0CBTtulBJEvLWaa6VZP2XrGl9ZFIXUB8RBi0Gga
4cFxah0AgN2jQqy20sNxJHpf7Jv9Sf9y7d76xHqNd6i2A8ADn0jEk2MYbFD6iN1C
dlaMoDIE1hqJS7b7ftbTL8UxmJPImH9DOPsLxzIESFEmeeAzJBeLXcSnJn3iwIfI
lhYGe+7CogjiMGQJmo552a+OvzkghpT4fEBPjG1ModyktxbuuudknrNIGcBXYEco
i7+0Ld5mlh3h78YWVb0WOBAPc6Er9lzizhM9VLkeR36x5wsQSkUYQMlkv+AKUM5t
rE7/+qmhDHgdaH3LmsQ0+a3JAqECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT9SZNZ
3RY9HEQrP4JMHzCBUPc8IDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTExYTdjYjctNDQzNi00ZmJiLWIyMzMtMzlkNTE3NzYzMjg5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GBA
MA0GCSqGSIb3DQEBCwUAA4IBAQC5JecpxoruGTkdPcjxoZP0MW5okXZ2bK0U9+CT
FrMEjUobGsprN5UAQOLHgizevH8C/ErEx0kt8PDPUE9MvQtVIJrF+NVSuYjAbNjl
ZdFRXAesLLYxm94LiJvJ2MEqV3j00dr1fbBd+YmL4S6VvR9+5KEJO/4Z9MzhYB3R
ddQaVN7PbKMakPjpqq/S9cqzwT5ZIoBYzFOLfQ+Ps66uAZSjtxjwhjGLKmGVrqZp
hpKutWMhXWM0jt6hKFyIZlO16wEmtA7R/CdImK9cqQ7a6CPsraKPkbZ1pM2EVJnN
hsbgXbjq/vSICCFpRthu2SSyaUB95oMvRJBVJZu4SPlSrchL
-----END CERTIFICATE-----
Generated at Sun Nov 1 12:57:38 2026 by rpki-client