Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92b31fa2-be1a-423e-9acb-0e2168c2faa4.roa
File: 92b31fa2-be1a-423e-9acb-0e2168c2faa4.roa (raw, json)
Hash identifier: FBdKDiCtfQ07pvOXVYrMMP7jIu3goUCVuk60b6VuLbU=
Subject key identifier: 76:45:21:46:64:C8:C4:65:13:30:DD:E8:48:C5:E6:ED:39:5B:99:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05245AF77EC8375F6F96EA9CC7B03353430949B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92b31fa2-be1a-423e-9acb-0e2168c2faa4.roa
Signing time: Sun 11 Oct 2026 15:10:09 +0000
ROA not before: Sun 11 Oct 2026 15:10:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:24:5a:f7:7e:c8:37:5f:6f:96:ea:9c:c7:b0:33:53:43:09:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=3d714771107ed4952667f215333c5fb97d8c3203b2f705fcb942c4029b8caf4e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:a7:66:15:5a:3e:51:e4:90:ea:b3:8b:f9:
0f:28:36:fa:da:73:5f:a3:39:ed:c5:3e:28:71:52:
65:74:61:86:fb:2c:3f:2c:e5:5e:85:8d:3b:1c:f3:
03:6c:0a:16:2b:47:fd:f0:18:9f:76:4a:8a:e0:0e:
9e:da:89:f4:99:52:4d:ae:be:70:a8:33:c1:14:41:
b2:b5:ed:aa:1a:e7:33:7a:5a:63:fe:9f:77:17:e1:
d3:3a:47:95:9f:dd:3d:6c:52:bb:e5:e0:46:50:ff:
40:84:0d:e5:a4:df:c2:71:5c:2c:99:b2:2a:cc:cc:
46:c8:c7:38:a1:85:db:3b:79:00:92:46:fd:70:de:
da:c5:d7:dc:9e:ea:46:a6:2c:20:9f:8e:b2:f3:b5:
81:eb:91:1e:fc:64:0a:92:74:d3:a4:f6:55:f0:10:
df:b2:1f:7d:bd:d8:35:86:b3:34:f1:a6:2e:b3:31:
fb:71:75:09:bc:2e:66:b0:ac:15:d1:8c:fe:9a:20:
12:bb:f3:86:80:43:f9:2a:da:1d:57:45:2b:55:6c:
60:b9:58:73:c3:30:91:dc:7b:c3:24:0e:53:ad:fb:
e2:2c:c0:a4:32:a2:e1:57:45:31:fa:71:b9:88:ac:
16:6b:4b:1b:f5:e3:79:ce:d8:47:a5:d6:98:cf:93:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:21:46:64:C8:C4:65:13:30:DD:E8:48:C5:E6:ED:39:5B:99:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92b31fa2-be1a-423e-9acb-0e2168c2faa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4040::/46
Signature Algorithm: sha256WithRSAEncryption
3f:03:3e:34:d9:71:23:98:00:db:12:f6:a9:09:f3:35:b9:5e:
18:07:42:05:16:e4:84:a3:bf:f7:2f:81:87:de:e3:c3:37:93:
93:c4:63:14:31:e7:dd:6e:77:09:4d:bb:90:40:68:37:3b:4f:
a7:24:b4:a4:b4:8b:6a:d6:47:69:e2:5a:71:c9:4c:70:55:9e:
3a:db:26:c0:b9:24:99:a4:34:91:00:5f:54:dd:36:87:ca:02:
ea:f4:b5:39:35:17:8e:6e:82:c5:40:55:85:30:20:06:16:84:
ae:dc:2e:1f:dd:d9:95:28:7a:e1:ee:9c:e1:48:fd:37:51:91:
d6:01:fc:f7:34:26:0b:ad:34:db:3f:52:ef:02:52:51:06:9e:
98:b0:2a:e4:88:42:eb:df:27:76:43:fe:bd:a0:25:19:38:21:
83:c5:e7:6d:5a:d6:d5:7e:6e:1f:23:14:a4:26:39:40:bf:bf:
18:06:b5:aa:fe:54:c0:18:6f:79:b9:76:eb:55:d8:0f:20:35:
4e:18:b8:3f:1a:86:f8:e9:aa:83:bb:bc:7e:5a:9b:f4:ae:e6:
f5:28:39:b9:e5:ad:93:7c:6c:e1:21:1b:fd:b4:82:93:6f:ff:
6c:0c:19:ba:fa:d4:a4:1f:19:bb:d0:3b:26:19:3a:21:f8:6c:
df:cc:ae:b9
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUBSRa937IN19vluqcx7AzU0MJSbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTEwMDlaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkNzE0NzcxMTA3ZWQ0OTUyNjY3ZjIxNTMzM2M1ZmI5N2Q4YzMyMDNiMmY3
MDVmY2I5NDJjNDAyOWI4Y2FmNGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL2tp2YVWj5R5JDqs4v5Dyg2+tpzX6M57cU+KHFSZXRhhvssPyzlXoWNOxzz
A2wKFitH/fAYn3ZKiuAOntqJ9JlSTa6+cKgzwRRBsrXtqhrnM3paY/6fdxfh0zpH
lZ/dPWxSu+XgRlD/QIQN5aTfwnFcLJmyKszMRsjHOKGF2zt5AJJG/XDe2sXX3J7q
RqYsIJ+OsvO1geuRHvxkCpJ006T2VfAQ37Iffb3YNYazNPGmLrMx+3F1CbwuZrCs
FdGM/pogErvzhoBD+SraHVdFK1VsYLlYc8Mwkdx7wyQOU6374izApDKi4VdFMfpx
uYisFmtLG/Xjec7YR6XWmM+TapMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR2RSFG
ZMjEZRMw3ehIxebtOVuZ8DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTJiMzFmYTItYmUxYS00MjNlLTlhY2ItMGUyMTY4YzJmYWE0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNA
QDANBgkqhkiG9w0BAQsFAAOCAQEAPwM+NNlxI5gA2xL2qQnzNbleGAdCBRbkhKO/
9y+Bh97jwzeTk8RjFDHn3W53CU27kEBoNztPpyS0pLSLatZHaeJacclMcFWeOtsm
wLkkmaQ0kQBfVN02h8oC6vS1OTUXjm6CxUBVhTAgBhaErtwuH93ZlSh64e6c4Uj9
N1GR1gH89zQmC6002z9S7wJSUQaemLAq5IhC698ndkP+vaAlGTghg8XnbVrW1X5u
HyMUpCY5QL+/GAa1qv5UwBhvebl261XYDyA1Thi4PxqG+Omqg7u8flqb9K7m9Sg5
ueWtk3xs4SEb/bSCk2//bAwZuvrUpB8Zu9A7Jhk6Ifhs38yuuQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:37 2026 by rpki-client