Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a74aaa95-252d-4e97-92fa-1c779bc72adc.roa
File: a74aaa95-252d-4e97-92fa-1c779bc72adc.roa (raw, json)
Hash identifier: 0uHGZVhyNrfTSk2zk+ttqnPKrQpuPTfVpf5YLVd+Yrw=
Subject key identifier: FC:5B:ED:B9:D6:AB:6A:95:09:1D:2B:D7:B6:E4:7A:C4:E5:4D:AF:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70FC10454AAD492861BD5FD9CC8182F914BA894C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a74aaa95-252d-4e97-92fa-1c779bc72adc.roa
Signing time: Sun 11 Oct 2026 15:08:16 +0000
ROA not before: Sun 11 Oct 2026 15:08:16 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fc:10:45:4a:ad:49:28:61:bd:5f:d9:cc:81:82:f9:14:ba:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:08:16 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=44f856bd36146fa83c9d7b22dfdc3993cdc51b0d4af49ac87f99ddfb74076b59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:65:e9:89:b6:f7:e4:2c:6b:52:b0:71:d1:
f6:44:2e:74:2d:db:8b:78:03:fb:9c:73:3c:1f:ba:
25:ed:d0:56:14:f1:9c:f1:7a:25:8d:17:0f:0a:fc:
bc:97:86:03:6f:fc:5d:bb:ce:d7:1c:37:39:44:6c:
ee:93:3e:2e:6d:50:d3:4f:cf:e8:e7:63:db:08:78:
74:d1:e3:fc:7e:59:c9:54:68:97:77:b1:41:32:91:
8f:e9:96:5a:02:5c:33:f2:ed:17:a5:85:5d:81:5f:
e8:cc:1b:05:ee:f5:20:aa:02:56:b0:38:92:8b:92:
25:bb:0c:82:22:02:42:41:c5:7d:0d:c2:39:87:91:
1a:30:d1:f3:38:fc:8c:48:8f:4f:d7:e8:52:11:de:
9d:f1:98:7f:80:5d:0e:75:61:3c:74:44:d6:d1:fd:
0a:82:31:50:41:9a:75:e5:31:35:b0:52:5d:bc:04:
8e:1f:45:e1:68:c4:7c:21:99:82:5a:7d:a4:39:86:
18:8e:70:62:0c:71:36:46:59:39:3e:53:9c:47:94:
69:4f:af:2b:79:78:54:37:be:bc:3f:59:07:61:ba:
10:4b:da:40:a9:22:52:4c:3a:90:f0:b1:26:38:9c:
67:e9:57:04:f6:fd:34:f8:74:b3:36:31:e3:aa:f0:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:ED:B9:D6:AB:6A:95:09:1D:2B:D7:B6:E4:7A:C4:E5:4D:AF:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a74aaa95-252d-4e97-92fa-1c779bc72adc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:8080::/46
Signature Algorithm: sha256WithRSAEncryption
45:53:37:d3:48:76:a3:ec:b8:4e:8b:cc:66:2b:16:e6:25:1d:
42:8c:1a:e9:16:24:f4:bc:6b:10:12:44:34:1c:fa:3e:a3:f7:
b1:a5:ba:81:a4:86:c4:5d:50:10:4f:88:7d:34:54:96:af:d2:
d2:04:9b:c1:af:c6:0b:3c:ff:e5:a9:24:94:77:a3:f0:53:89:
e1:12:b4:cc:05:20:84:6b:97:b3:34:df:29:eb:b3:97:af:5b:
53:7f:7c:69:11:45:62:02:74:c0:3c:12:58:b2:ae:b7:52:08:
cc:b0:05:02:9e:7f:f8:03:c3:d9:29:0e:f3:c3:b9:72:d6:5f:
a2:6f:bf:d2:44:75:b7:93:58:ad:94:e5:06:6e:6b:e8:c8:09:
ef:28:0d:70:e6:b4:7d:85:64:43:79:6b:6c:58:e1:c6:70:74:
ad:e0:8e:7b:b4:14:da:76:4e:4d:ad:c9:56:b6:10:c6:2a:21:
cf:70:61:b1:0e:89:47:aa:28:c4:2c:bf:e9:ec:2d:57:54:ec:
0f:e1:d7:d3:02:ac:1c:b7:1b:10:08:8d:00:53:25:70:72:b7:
26:09:43:53:c5:9c:1b:8c:cf:6a:79:ee:6d:51:f4:71:db:54:
38:a2:28:e3:63:66:b0:88:c8:02:65:16:a2:11:3c:22:3f:84:
63:b9:a1:26
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcPwQRUqtSShhvV/ZzIGC+RS6iUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTA4MTZaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ0Zjg1NmJkMzYxNDZmYTgzYzlkN2IyMmRmZGMzOTkzY2RjNTFiMGQ0YWY0
OWFjODdmOTlkZGZiNzQwNzZiNTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL26ZemJtvfkLGtSsHHR9kQudC3bi3gD+5xzPB+6Je3QVhTxnPF6JY0XDwr8
vJeGA2/8XbvO1xw3OURs7pM+Lm1Q00/P6Odj2wh4dNHj/H5ZyVRol3exQTKRj+mW
WgJcM/LtF6WFXYFf6MwbBe71IKoCVrA4kouSJbsMgiICQkHFfQ3COYeRGjDR8zj8
jEiPT9foUhHenfGYf4BdDnVhPHRE1tH9CoIxUEGadeUxNbBSXbwEjh9F4WjEfCGZ
glp9pDmGGI5wYgxxNkZZOT5TnEeUaU+vK3l4VDe+vD9ZB2G6EEvaQKkiUkw6kPCx
JjicZ+lXBPb9NPh0szYx46rwGlcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT8W+25
1qtqlQkdK9e25HrE5U2vCDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTc0YWFhOTUtMjUyZC00ZTk3LTkyZmEtMWM3NzliYzcyYWRjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HOA
gDANBgkqhkiG9w0BAQsFAAOCAQEARVM300h2o+y4TovMZisW5iUdQowa6RYk9Lxr
EBJENBz6PqP3saW6gaSGxF1QEE+IfTRUlq/S0gSbwa/GCzz/5akklHej8FOJ4RK0
zAUghGuXszTfKeuzl69bU398aRFFYgJ0wDwSWLKut1IIzLAFAp5/+APD2SkO88O5
ctZfom+/0kR1t5NYrZTlBm5r6MgJ7ygNcOa0fYVkQ3lrbFjhxnB0reCOe7QU2nZO
Ta3JVrYQxiohz3BhsQ6JR6ooxCy/6ewtV1TsD+HX0wKsHLcbEAiNAFMlcHK3JglD
U8WcG4zPannubVH0cdtUOKIo42NmsIjIAmUWohE8Ij+EY7mhJg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:45 2026 by rpki-client