Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
File: 9963ca7c-f411-4aae-ac61-2c650f8269e0.roa (raw, json)
Hash identifier: BbeSOf3K5YWOkn1fjXWfQCZlnvC79OiNgfBmZmtd8fE=
Subject key identifier: CE:1A:60:F5:B8:BC:CF:25:5F:18:48:92:78:AA:6C:43:42:09:1E:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6352696559D496BA184F7746419893937ACA1699
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
Signing time: Mon 26 Oct 2026 04:40:51 +0000
ROA not before: Mon 26 Oct 2026 04:40:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:52:69:65:59:d4:96:ba:18:4f:77:46:41:98:93:93:7a:ca:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=90ced719462ea0a3c4c9a23b3fc834127e18930b38cb8b3ba39187a716bd77a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:98:bc:b7:12:37:56:a2:b5:56:3d:2b:76:
e0:91:fc:51:62:f7:56:9f:f4:d4:0c:ed:90:81:df:
64:82:84:14:ca:8d:18:04:55:03:f1:a8:0c:bb:7b:
f3:35:83:e4:a5:4c:86:f7:47:80:b8:f1:92:29:a6:
d2:4b:b9:b9:44:96:99:c2:00:4a:85:95:50:96:ea:
b7:e9:90:fe:db:80:5a:97:e6:7e:68:8e:91:b6:5e:
a1:97:0b:8c:e5:27:a3:0d:34:e2:f6:f2:d9:5b:3f:
df:56:11:87:d0:c9:8c:06:71:2d:7a:e8:84:f6:7a:
4d:b8:2a:fb:f3:1c:62:a8:68:33:d0:13:37:5d:ef:
f7:a4:17:7c:d6:03:80:af:a7:fd:45:d7:5b:ed:0b:
9c:25:8c:c4:5b:b6:3f:65:6d:76:64:f9:e6:11:de:
8b:ea:b9:b7:46:8e:cb:9d:ec:8a:97:19:3e:9c:54:
df:47:fd:19:7d:8c:d4:0c:dd:93:c8:af:2f:50:d2:
0b:1c:59:bf:1c:f7:0c:80:83:42:92:80:3c:7f:2c:
5e:de:2d:d0:61:21:24:98:02:a4:4b:32:ba:f7:46:
43:b5:20:ba:46:f5:23:8e:0a:8d:16:ed:69:f8:de:
ec:53:59:0a:f1:ca:3d:9b:d0:f0:f4:a6:fc:db:b4:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:60:F5:B8:BC:CF:25:5F:18:48:92:78:AA:6C:43:42:09:1E:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9963ca7c-f411-4aae-ac61-2c650f8269e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011:400::/38
Signature Algorithm: sha256WithRSAEncryption
20:e6:7f:a2:1c:c7:a2:66:f4:8e:0a:0a:05:7b:5b:ff:69:14:
39:52:6b:8f:3f:89:0f:2f:cb:15:3d:5d:83:01:43:cf:31:a9:
22:4f:40:e0:01:a1:66:5b:a9:2c:da:ed:8f:73:9d:d9:b7:27:
19:f2:e2:d5:dc:2a:e2:bd:fb:22:b3:ce:ed:2f:dd:ac:01:60:
fb:87:be:46:93:38:03:21:d5:dc:2a:9b:5a:ab:e0:53:9c:58:
cd:34:c7:b2:94:32:25:1f:25:f5:16:d7:b1:94:e6:05:83:89:
31:ef:fd:fd:28:33:cf:55:07:6b:5e:5a:37:aa:d1:ae:0b:5e:
65:ea:d6:24:76:0f:43:a1:e0:5c:ad:b7:ad:a9:85:b7:8e:bf:
d0:f4:f3:20:f4:a2:28:dc:ec:3d:9d:3e:17:2d:0f:e8:7f:54:
82:dd:d6:7f:2c:0a:14:c8:1a:b0:0f:c9:39:fb:4e:20:00:1a:
76:5d:ab:74:77:d4:96:ed:65:52:7f:dc:2c:65:e5:a2:cb:11:
7e:fb:1a:5d:df:1e:1c:aa:40:0e:08:d2:e7:f7:34:53:be:7d:
e5:43:40:c0:50:30:ce:9a:02:4f:41:02:e6:07:09:04:64:6f:
0d:d4:06:f6:1f:87:93:97:1a:7b:47:69:03:0e:f9:06:85:46:
c8:71:51:95
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUY1JpZVnUlroYT3dGQZiTk3rKFpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDQwNTFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDkwY2VkNzE5NDYyZWEwYTNjNGM5YTIzYjNmYzgzNDEyN2UxODkzMGIzOGNi
OGIzYmEzOTE4N2E3MTZiZDc3YTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALfDmLy3EjdWorVWPSt24JH8UWL3Vp/01AztkIHfZIKEFMqNGARVA/GoDLt7
8zWD5KVMhvdHgLjxkimm0ku5uUSWmcIASoWVUJbqt+mQ/tuAWpfmfmiOkbZeoZcL
jOUnow004vby2Vs/31YRh9DJjAZxLXrohPZ6Tbgq+/McYqhoM9ATN13v96QXfNYD
gK+n/UXXW+0LnCWMxFu2P2VtdmT55hHei+q5t0aOy53sipcZPpxU30f9GX2M1Azd
k8ivL1DSCxxZvxz3DICDQpKAPH8sXt4t0GEhJJgCpEsyuvdGQ7Ugukb1I44KjRbt
afje7FNZCvHKPZvQ8PSm/Nu0jB8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTOGmD1
uLzPJV8YSJJ4qmxDQgkeUzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTk2M2NhN2MtZjQxMS00YWFlLWFjNjEtMmM2NTBmODI2OWUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BEE
MA0GCSqGSIb3DQEBCwUAA4IBAQAg5n+iHMeiZvSOCgoFe1v/aRQ5UmuPP4kPL8sV
PV2DAUPPMakiT0DgAaFmW6ks2u2Pc53ZtycZ8uLV3Crivfsis87tL92sAWD7h75G
kzgDIdXcKptaq+BTnFjNNMeylDIlHyX1FtexlOYFg4kx7/39KDPPVQdrXlo3qtGu
C15l6tYkdg9DoeBcrbetqYW3jr/Q9PMg9KIo3Ow9nT4XLQ/of1SC3dZ/LAoUyBqw
D8k5+04gABp2Xat0d9SW7WVSf9wsZeWiyxF++xpd3x4cqkAOCNLn9zRTvn3lQ0DA
UDDOmgJPQQLmBwkEZG8N1Ab2H4eTlxp7R2kDDvkGhUbIcVGV
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:30 2026 by rpki-client