Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa
File: a103a3a0-ff03-4978-a976-55516478c88b.roa (raw, json)
Hash identifier: aS+AlM/7y4COoT9gn/gbJyHWn7Z2YBsS2swHJHs8Nx0=
Subject key identifier: 99:84:8D:06:95:DC:26:90:12:AA:1C:0B:B3:95:B7:FD:F8:DE:6D:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CDB81E97A5A248717DAF4EB9F56C034FBAC9F0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa
Signing time: Fri 09 Oct 2026 01:20:06 +0000
ROA not before: Fri 09 Oct 2026 01:20:06 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:db:81:e9:7a:5a:24:87:17:da:f4:eb:9f:56:c0:34:fb:ac:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:06 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=6bb46ac9310cb4ad19f30c199ea12e5920d519b881177a9b6030b2bd9db9db9e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:ef:1c:38:ca:6f:c7:40:80:02:a9:2d:91:
05:68:40:f6:f4:94:12:13:c4:62:b8:d2:2b:d4:d2:
37:ef:54:b7:fd:79:6a:b0:f4:59:cb:5d:03:57:93:
67:57:9b:c8:ac:fe:45:b2:0a:8f:93:2f:44:14:b5:
37:36:5d:b5:a5:39:ab:e6:aa:14:9c:6e:e9:f2:51:
eb:41:8b:f2:a9:2b:82:4e:63:7e:05:9b:c9:4b:89:
62:b5:b0:74:9d:28:aa:24:26:c7:ad:d7:94:60:e4:
b4:9c:f6:0a:f1:1c:66:81:68:89:a2:d3:27:a6:43:
0f:d5:66:87:2e:db:9c:f1:93:24:9a:95:2b:2f:9e:
28:90:df:b4:89:bc:a8:16:8e:98:44:15:c8:26:4b:
a9:4c:93:a2:bf:fc:12:4b:95:07:b2:fb:7f:49:8e:
52:a4:68:cb:ba:20:3f:2d:f5:a7:c5:a1:cc:1e:e8:
e8:b8:2e:4e:ce:ef:74:da:b7:43:84:d3:d4:73:ab:
94:12:b4:d7:8a:85:4f:20:07:30:0f:8b:da:df:5f:
6c:8a:21:bf:43:70:f6:42:db:28:bf:84:c9:07:5a:
6f:91:1c:b1:8e:e7:e4:00:75:c8:97:29:7c:3a:b7:
49:87:39:f1:76:43:63:72:53:24:b5:49:a8:b6:56:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:8D:06:95:DC:26:90:12:AA:1C:0B:B3:95:B7:FD:F8:DE:6D:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a103a3a0-ff03-4978-a976-55516478c88b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:6040::/48
Signature Algorithm: sha256WithRSAEncryption
43:a3:dd:10:88:23:d1:48:07:ab:79:2f:78:42:dd:d9:2d:37:
36:9f:dc:7d:6a:71:4c:09:ea:e1:eb:f7:ae:70:17:d1:f7:95:
0c:90:aa:e1:fd:a4:0d:6c:89:44:55:da:b0:c9:68:30:db:3a:
87:65:f6:fb:fb:5f:74:95:96:24:0b:59:9a:61:02:e3:e7:d2:
f0:37:1d:ba:28:d3:2f:af:b7:c2:c3:40:80:c0:46:cf:9f:91:
a4:45:2e:93:6c:07:9d:3e:0d:98:3a:66:d1:ab:75:f9:17:f0:
6e:f4:da:78:f5:a7:ff:7e:1c:49:4b:72:83:f4:47:ef:0b:a4:
78:0a:26:9b:24:7f:1a:72:95:da:44:a8:98:4f:08:7d:bd:3a:
3d:02:e3:17:8a:83:23:8b:bd:bf:e4:07:cd:42:e6:5d:2b:4e:
de:a0:ee:d4:db:d8:78:2b:e6:13:b5:93:a5:9e:77:e9:53:36:
87:45:53:ec:f9:3a:a3:3c:00:6a:7f:02:e5:1a:e0:ba:80:28:
c9:b5:90:58:ca:bd:2a:62:05:40:28:8d:a9:41:7c:52:38:76:
79:ec:91:ed:94:0e:66:ea:e4:00:83:4f:2e:7a:2c:90:28:4c:
c1:c6:1a:45:c5:9a:89:69:c4:b9:b5:72:aa:9e:df:82:c5:1f:
93:83:a7:66
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfNuB6XpaJIcX2vTrn1bANPusnwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTIwMDZaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiYjQ2YWM5MzEwY2I0YWQxOWYzMGMxOTllYTEyZTU5MjBkNTE5Yjg4MTE3
N2E5YjYwMzBiMmJkOWRiOWRiOWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANW+7xw4ym/HQIACqS2RBWhA9vSUEhPEYrjSK9TSN+9Ut/15arD0WctdA1eT
Z1ebyKz+RbIKj5MvRBS1NzZdtaU5q+aqFJxu6fJR60GL8qkrgk5jfgWbyUuJYrWw
dJ0oqiQmx63XlGDktJz2CvEcZoFoiaLTJ6ZDD9Vmhy7bnPGTJJqVKy+eKJDftIm8
qBaOmEQVyCZLqUyTor/8EkuVB7L7f0mOUqRoy7ogPy31p8WhzB7o6LguTs7vdNq3
Q4TT1HOrlBK014qFTyAHMA+L2t9fbIohv0Nw9kLbKL+EyQdab5EcsY7n5AB1yJcp
fDq3SYc58XZDY3JTJLVJqLZWeB0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSZhI0G
ldwmkBKqHAuzlbf9+N5t1TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTEwM2EzYTAtZmYwMy00OTc4LWE5NzYtNTU1MTY0NzhjODhiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gpg
QDANBgkqhkiG9w0BAQsFAAOCAQEAQ6PdEIgj0UgHq3kveELd2S03Np/cfWpxTAnq
4ev3rnAX0feVDJCq4f2kDWyJRFXasMloMNs6h2X2+/tfdJWWJAtZmmEC4+fS8Dcd
uijTL6+3wsNAgMBGz5+RpEUuk2wHnT4NmDpm0at1+RfwbvTaePWn/34cSUtyg/RH
7wukeAommyR/GnKV2kSomE8Ifb06PQLjF4qDI4u9v+QHzULmXStO3qDu1NvYeCvm
E7WTpZ536VM2h0VT7Pk6ozwAan8C5RrguoAoybWQWMq9KmIFQCiNqUF8Ujh2eeyR
7ZQOZurkAINPLnoskChMwcYaRcWaiWnEubVyqp7fgsUfk4OnZg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:27 2026 by rpki-client