Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
File: aa679cd8-5924-43d7-8928-c65bc2ec3659.roa (raw, json)
Hash identifier: Fgn47uoaBUBsX7jMGdXuB2BRRdkR7hcqCiAGMRXXo44=
Subject key identifier: C6:3E:B4:CF:EF:A7:A8:4F:D4:D2:F7:D8:FD:4A:C6:26:36:AA:4D:A3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65F0A5F2B14FC5325591BE9F73E43E55847AF493
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
Signing time: Mon 26 Oct 2026 05:20:41 +0000
ROA not before: Mon 26 Oct 2026 05:20:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f0:a5:f2:b1:4f:c5:32:55:91:be:9f:73:e4:3e:55:84:7a:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=8c53b5ebfdf9b296a5ba6051748138cccbbc26901203f18fe63476baee697fbe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:52:38:7e:ae:4d:59:bd:d6:7d:1a:87:18:
c6:56:9f:60:d2:37:58:52:d9:e8:30:c5:f4:54:45:
d5:32:68:7a:21:fb:54:ff:15:af:7d:75:40:96:12:
e4:63:a7:77:be:9b:53:d1:a8:94:51:11:9d:52:04:
90:ac:4e:1a:9c:61:c5:ac:41:c8:92:28:fe:23:77:
b8:91:b8:2d:2a:7e:83:d7:0b:5a:f4:f8:34:6f:2d:
32:64:53:a5:cf:90:56:83:88:cb:0c:30:39:58:cf:
51:ac:33:25:f3:db:e2:a5:94:fd:79:34:40:9c:37:
d7:b6:eb:4d:cb:db:e8:0f:5a:32:a9:92:84:2f:99:
22:ff:d5:2a:01:2a:f6:f7:39:2d:0d:39:4b:9e:67:
36:67:45:5e:c6:dc:04:73:71:e0:f2:96:a0:b9:89:
ed:3f:f3:e2:01:71:43:00:8b:7a:4c:29:48:3f:d2:
e6:f3:c1:bf:e4:7f:17:f9:35:ec:93:35:9b:8e:90:
6b:5a:b4:1a:a4:f8:29:21:1e:06:c8:ac:5e:3f:59:
a9:cc:30:a4:f7:d1:88:8b:8d:fc:86:7e:47:e2:af:
aa:bd:1e:a6:27:73:19:2a:47:e9:59:eb:65:ab:ff:
22:01:69:93:a4:12:92:19:ee:78:bb:ac:af:93:07:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3E:B4:CF:EF:A7:A8:4F:D4:D2:F7:D8:FD:4A:C6:26:36:AA:4D:A3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aa679cd8-5924-43d7-8928-c65bc2ec3659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:c000::/40
Signature Algorithm: sha256WithRSAEncryption
ca:2d:e7:53:56:d3:98:a9:57:79:72:97:29:0e:18:5c:86:f6:
b9:fc:f7:6b:37:28:4e:fd:5b:43:73:41:a3:46:62:49:08:d8:
2f:cc:28:7c:f6:9b:68:65:45:a5:20:ac:0c:ef:f8:8c:57:3a:
71:80:21:0f:a7:a5:60:4c:8b:c2:91:dd:ba:7a:02:19:db:a8:
46:b6:73:55:4e:97:9c:09:94:85:39:5d:fc:20:35:bd:83:27:
e7:c3:7d:46:8c:e9:58:1d:79:98:ce:42:aa:96:0f:70:e0:de:
6d:37:c9:19:44:cd:98:9b:c0:75:31:7a:7c:d1:fc:6d:42:8c:
3a:7b:6a:a8:80:ea:54:ca:0e:30:94:7b:71:d7:be:e2:37:31:
ba:35:ce:19:06:36:a3:9c:03:41:77:3f:1f:07:2e:ec:cf:a9:
2e:67:d4:b4:a2:c5:78:6b:fc:9d:20:9b:c9:2e:8e:0e:4b:62:
83:95:d5:fa:17:02:13:c6:e8:98:b2:c3:9d:3c:3c:ff:ee:86:
39:b8:0d:fa:bb:e9:f5:9a:b1:09:0c:b3:1f:e7:a6:2c:d4:e1:
d4:2a:a5:4c:8a:7e:46:89:dc:1e:ad:f1:95:ad:58:b4:90:3c:
25:4f:5e:c5:cc:10:35:60:54:9d:3b:7b:11:1f:ae:ae:6e:a0:
bd:a6:8b:b3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZfCl8rFPxTJVkb6fc+Q+VYR69JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIwNDFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDhjNTNiNWViZmRmOWIyOTZhNWJhNjA1MTc0ODEzOGNjY2JiYzI2OTAxMjAz
ZjE4ZmU2MzQ3NmJhZWU2OTdmYmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALXcUjh+rk1ZvdZ9GocYxlafYNI3WFLZ6DDF9FRF1TJoeiH7VP8Vr311QJYS
5GOnd76bU9GolFERnVIEkKxOGpxhxaxByJIo/iN3uJG4LSp+g9cLWvT4NG8tMmRT
pc+QVoOIywwwOVjPUawzJfPb4qWU/Xk0QJw317brTcvb6A9aMqmShC+ZIv/VKgEq
9vc5LQ05S55nNmdFXsbcBHNx4PKWoLmJ7T/z4gFxQwCLekwpSD/S5vPBv+R/F/k1
7JM1m46Qa1q0GqT4KSEeBsisXj9ZqcwwpPfRiIuN/IZ+R+Kvqr0epidzGSpH6Vnr
Zav/IgFpk6QSkhnueLusr5MH3C8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTGPrTP
76eoT9TS99j9SsYmNqpNozAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWE2NzljZDgtNTkyNC00M2Q3LTg5MjgtYzY1YmMyZWMzNjU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HjA
MA0GCSqGSIb3DQEBCwUAA4IBAQDKLedTVtOYqVd5cpcpDhhchva5/PdrNyhO/VtD
c0GjRmJJCNgvzCh89ptoZUWlIKwM7/iMVzpxgCEPp6VgTIvCkd26egIZ26hGtnNV
TpecCZSFOV38IDW9gyfnw31GjOlYHXmYzkKqlg9w4N5tN8kZRM2Ym8B1MXp80fxt
Qow6e2qogOpUyg4wlHtx177iNzG6Nc4ZBjajnANBdz8fBy7sz6kuZ9S0osV4a/yd
IJvJLo4OS2KDldX6FwITxuiYssOdPDz/7oY5uA36u+n1mrEJDLMf56Ys1OHUKqVM
in5GidwerfGVrVi0kDwlT17FzBA1YFSdO3sRH66ubqC9pouz
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:00 2026 by rpki-client