Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9da3ca5b-b914-4f62-bfa4-2194218ebff3.roa
File: 9da3ca5b-b914-4f62-bfa4-2194218ebff3.roa (raw, json)
Hash identifier: dgQY8uJUpnA/yx35TysquPTJuUVhBSDOF6equyxaGvw=
Subject key identifier: E1:15:7D:3F:ED:6C:A9:81:79:A1:C2:99:84:FA:F4:2E:77:8F:17:D4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E6124281D52745397B0B568C5CACF8F8F41EAD2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9da3ca5b-b914-4f62-bfa4-2194218ebff3.roa
Signing time: Thu 08 Oct 2026 17:24:46 +0000
ROA not before: Thu 08 Oct 2026 17:24:46 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d061:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:61:24:28:1d:52:74:53:97:b0:b5:68:c5:ca:cf:8f:8f:41:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:46 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=bc99de90bbfcfa895db2175215cae0a44a0f0c0ab069bc753e65e61480ce701c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:f4:83:d6:eb:f3:00:f9:14:b5:c0:85:c9:
42:26:d3:8a:03:5b:ad:98:03:31:5f:35:95:a4:6c:
c4:15:e1:53:c9:79:e1:d5:1d:d3:ee:b5:58:a0:0e:
72:d1:d9:64:3d:30:b3:9d:bb:c3:4c:08:1f:5b:e2:
47:87:91:91:99:22:32:3d:e7:af:e4:29:7b:47:4a:
ab:44:26:17:1c:9e:ab:b2:96:a0:5d:01:e7:2c:55:
5b:53:f3:ef:7c:dc:ee:09:1e:fe:44:90:9a:65:72:
6a:3d:90:ce:56:c0:88:47:c4:78:0a:87:b7:af:47:
92:0c:05:fa:c9:6d:9d:e6:8c:f8:d9:40:93:a1:30:
6c:60:bb:26:b6:a7:84:19:bb:dd:d2:67:2d:17:22:
ec:72:05:e6:90:d9:a1:00:43:19:ab:fe:4b:f0:5b:
82:d7:2a:00:cc:c3:66:b8:ef:59:fb:c1:7d:6b:c5:
12:01:65:70:98:8f:4e:85:11:c6:05:43:4f:ad:66:
93:58:30:df:1d:c3:47:23:cd:0f:ea:33:0c:95:a6:
8e:f2:1c:e0:c0:ec:f4:fe:14:6e:f0:8a:6b:2f:e4:
f3:da:d5:bc:11:83:10:4e:ac:df:19:e2:36:9b:82:
3c:b7:eb:10:ee:78:80:28:1c:40:8c:60:a1:58:3e:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:7D:3F:ED:6C:A9:81:79:A1:C2:99:84:FA:F4:2E:77:8F:17:D4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9da3ca5b-b914-4f62-bfa4-2194218ebff3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d061:a000::/40
Signature Algorithm: sha256WithRSAEncryption
61:fe:48:64:82:a2:75:f9:0f:f3:40:51:8e:18:29:4a:5d:97:
77:fc:a1:3b:26:04:35:7f:01:ba:cb:15:19:aa:9c:3f:40:fa:
38:18:99:23:28:d5:fc:ab:0f:ec:73:3f:62:5b:53:f5:22:57:
30:45:b7:c4:5d:aa:5a:39:7c:f4:16:4a:68:35:19:fb:08:c5:
c9:2c:cc:f3:e0:2c:cd:65:1f:93:e7:5b:26:a8:9e:f4:d8:4b:
c1:e6:8b:db:92:ba:76:d6:c3:0c:e7:cd:2b:43:92:4b:0b:75:
d2:4f:f2:a7:56:42:72:26:48:cb:ce:13:e2:e4:d8:c3:a6:0f:
5e:aa:d4:e2:01:ee:af:f0:07:e9:31:6f:7b:e7:e4:ce:e9:4a:
8c:b0:b1:77:41:68:bf:43:97:6e:de:b0:9d:06:92:cf:79:9d:
3e:2b:0a:76:33:16:29:6c:75:29:b1:c9:98:7d:54:84:54:2f:
6e:72:39:a6:6e:40:ca:d7:7f:78:c9:f6:a5:7f:20:11:6b:0b:
40:56:f8:21:78:b7:aa:4f:e3:ec:64:bc:38:9c:cc:23:8d:7c:
9d:c0:c9:f5:a3:30:58:59:5f:61:1f:11:3b:6e:02:5e:8d:44:
67:d4:9c:22:14:87:e7:ef:89:10:73:ae:68:bf:ad:00:d6:3b:
f7:91:1e:31
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXmEkKB1SdFOXsLVoxcrPj49B6tIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDgxNzI0NDZaFw0yNzAxMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjOTlkZTkwYmJmY2ZhODk1ZGIyMTc1MjE1Y2FlMGE0NGEwZjBjMGFiMDY5
YmM3NTNlNjVlNjE0ODBjZTcwMWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJar9IPW6/MA+RS1wIXJQibTigNbrZgDMV81laRsxBXhU8l54dUd0+61WKAO
ctHZZD0ws527w0wIH1viR4eRkZkiMj3nr+Qpe0dKq0QmFxyeq7KWoF0B5yxVW1Pz
73zc7gke/kSQmmVyaj2QzlbAiEfEeAqHt69HkgwF+sltneaM+NlAk6EwbGC7Jran
hBm73dJnLRci7HIF5pDZoQBDGav+S/BbgtcqAMzDZrjvWfvBfWvFEgFlcJiPToUR
xgVDT61mk1gw3x3DRyPND+ozDJWmjvIc4MDs9P4UbvCKay/k89rVvBGDEE6s3xni
NpuCPLfrEO54gCgcQIxgoVg+4rcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBThFX0/
7WypgXmhwpmE+vQud48X1DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWRhM2NhNWItYjkxNC00ZjYyLWJmYTQtMjE5NDIxOGViZmYzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GGg
MA0GCSqGSIb3DQEBCwUAA4IBAQBh/khkgqJ1+Q/zQFGOGClKXZd3/KE7JgQ1fwG6
yxUZqpw/QPo4GJkjKNX8qw/scz9iW1P1IlcwRbfEXapaOXz0FkpoNRn7CMXJLMzz
4CzNZR+T51smqJ702EvB5ovbkrp21sMM580rQ5JLC3XST/KnVkJyJkjLzhPi5NjD
pg9eqtTiAe6v8AfpMW975+TO6UqMsLF3QWi/Q5du3rCdBpLPeZ0+Kwp2MxYpbHUp
scmYfVSEVC9ucjmmbkDK1394yfalfyARawtAVvgheLeqT+PsZLw4nMwjjXydwMn1
ozBYWV9hHxE7bgJejURn1JwiFIfn74kQc65ov60A1jv3kR4x
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:28:55 2026 by rpki-client