Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
File: b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa (raw, json)
Hash identifier: 7BPBzXcWGeaVzkyV3WuHmmwWhui1FAxs8hZV7kl6398=
Subject key identifier: 4E:5E:CE:4F:60:D3:04:48:7F:9B:D4:13:A7:89:72:DA:5B:78:52:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A1180309068B7FFA67219F5D0326A7B185792F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
Signing time: Sun 11 Oct 2026 15:20:18 +0000
ROA not before: Sun 11 Oct 2026 15:20:18 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:11:80:30:90:68:b7:ff:a6:72:19:f5:d0:32:6a:7b:18:57:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:20:18 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=113b45d8babd8ea04f756eda60dfc33cc8f81d07bdf7ac9cf99f31ccf35eac24, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:ab:7a:69:45:b3:8c:a8:1b:ff:48:e0:6f:
bb:c0:da:a3:89:93:ab:32:5b:57:0a:90:28:0f:a7:
a3:cb:14:90:b2:b2:de:8f:10:3f:78:ff:76:e8:57:
67:f1:cd:d4:23:d8:74:0f:c4:ef:e7:f5:a2:fe:7e:
80:d4:d6:39:23:b4:77:eb:ab:54:81:be:7c:08:0e:
bc:b1:08:70:c6:21:b9:9e:aa:12:eb:66:77:86:88:
82:f9:e7:65:02:5f:13:ee:bc:21:33:b2:38:49:23:
69:97:db:05:74:65:e3:46:20:3f:03:50:fd:01:f2:
96:f8:10:b2:eb:6f:b3:69:26:fc:6c:1a:db:0c:77:
92:8e:68:b8:1f:0d:eb:b0:36:94:32:32:13:d7:ee:
80:19:71:be:95:2a:08:96:4e:ff:b0:5e:28:1a:3e:
70:93:eb:2d:99:8e:a9:64:77:bf:42:81:7d:dc:44:
6e:2b:b2:35:89:a3:50:25:8a:46:82:88:9c:fd:28:
8d:04:d4:2a:91:7a:92:7a:98:ac:f0:32:90:51:80:
1d:3b:5c:f1:80:1c:de:2c:7d:8b:3f:9f:e4:ed:42:
b2:35:80:97:88:9e:7a:bc:74:c3:2c:1c:01:5d:99:
f0:90:b3:80:2f:6a:de:06:58:29:3e:51:bb:dd:32:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:CE:4F:60:D3:04:48:7F:9B:D4:13:A7:89:72:DA:5B:78:52:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:8000::/40
Signature Algorithm: sha256WithRSAEncryption
50:48:e6:8b:01:10:1f:24:4b:80:d9:1f:4b:f8:c7:8f:2c:9d:
39:aa:df:6d:e9:8b:3f:cb:65:5c:e1:f0:34:4e:41:a7:7c:68:
0f:1b:d8:38:5b:86:51:24:46:56:ac:db:45:9a:4d:a0:7f:78:
40:d8:a8:b3:d0:98:47:bb:64:69:f6:94:75:64:9b:9f:21:0b:
68:08:3a:ee:e7:3b:8a:73:6d:23:e0:10:b0:c4:e6:75:68:7a:
45:24:27:79:6b:34:22:bd:d1:c2:38:f0:8b:58:08:e4:ec:bb:
f7:7d:89:b7:7e:36:21:98:57:fd:96:8f:88:4d:78:92:a6:7d:
47:91:3b:7f:d0:ae:13:59:1f:47:29:1a:3d:11:9d:40:4f:59:
1c:45:92:82:af:c2:18:66:b3:13:c4:47:cc:47:2e:58:f1:e2:
25:ac:ba:ce:db:3d:4b:50:77:67:1f:59:00:8e:ab:c9:6f:06:
03:bb:d3:41:76:2d:60:d3:ef:67:cc:f4:d5:5f:b7:6c:49:73:
4f:3d:7e:51:ac:2b:2c:bd:3f:00:9d:eb:f1:3b:c0:12:e1:8a:
c1:7e:23:b6:f8:7a:24:7b:6c:56:62:d1:c2:e0:b6:d5:73:89:
03:c3:60:82:e0:3a:2d:68:a8:96:7e:5e:2e:f1:a1:3a:a6:d0:
51:b5:5a:cf
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWhGAMJBot/+mchn10DJqexhXkvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTIwMThaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDExM2I0NWQ4YmFiZDhlYTA0Zjc1NmVkYTYwZGZjMzNjYzhmODFkMDdiZGY3
YWM5Y2Y5OWYzMWNjZjM1ZWFjMjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMomq3ppRbOMqBv/SOBvu8Dao4mTqzJbVwqQKA+no8sUkLKy3o8QP3j/duhX
Z/HN1CPYdA/E7+f1ov5+gNTWOSO0d+urVIG+fAgOvLEIcMYhuZ6qEutmd4aIgvnn
ZQJfE+68ITOyOEkjaZfbBXRl40YgPwNQ/QHylvgQsutvs2km/Gwa2wx3ko5ouB8N
67A2lDIyE9fugBlxvpUqCJZO/7BeKBo+cJPrLZmOqWR3v0KBfdxEbiuyNYmjUCWK
RoKInP0ojQTUKpF6knqYrPAykFGAHTtc8YAc3ix9iz+f5O1CsjWAl4ieerx0wywc
AV2Z8JCzgC9q3gZYKT5Ru90yNyECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBROXs5P
YNMESH+b1BOniXLaW3hS5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjY3YzY2MmEtNmU3My00N2M5LTk0NTUtNzRhZDljZTNjZGIzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKA
MA0GCSqGSIb3DQEBCwUAA4IBAQBQSOaLARAfJEuA2R9L+MePLJ05qt9t6Ys/y2Vc
4fA0TkGnfGgPG9g4W4ZRJEZWrNtFmk2gf3hA2Kiz0JhHu2Rp9pR1ZJufIQtoCDru
5zuKc20j4BCwxOZ1aHpFJCd5azQivdHCOPCLWAjk7Lv3fYm3fjYhmFf9lo+ITXiS
pn1HkTt/0K4TWR9HKRo9EZ1AT1kcRZKCr8IYZrMTxEfMRy5Y8eIlrLrO2z1LUHdn
H1kAjqvJbwYDu9NBdi1g0+9nzPTVX7dsSXNPPX5RrCssvT8AnevxO8AS4YrBfiO2
+Hoke2xWYtHC4LbVc4kDw2CC4DotaKiWfl4u8aE6ptBRtVrP
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:38:30 2026 by rpki-client