Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
File: b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa (raw, json)
Hash identifier: FPK4gOjHVaordOcbByCyxzYrR7a2Yqe4tnq6UIuEkNY=
Subject key identifier: 43:58:6A:0A:D5:BA:F2:39:10:18:E8:3C:E5:C3:99:8C:D8:CE:D9:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 503BE451293FD7D18B961B75712723C39681EECA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
Signing time: Thu 15 Oct 2026 03:20:06 +0000
ROA not before: Thu 15 Oct 2026 03:20:06 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3b:e4:51:29:3f:d7:d1:8b:96:1b:75:71:27:23:c3:96:81:ee:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:06 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=f5ad2bfad5f7ba1b39ed58b74ef6efaf34bfcc5b6d8da953e1e59de360c1fee2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:d4:8c:98:82:a5:4b:80:bd:2d:28:aa:e5:
6b:19:94:07:c4:9b:cd:1c:37:e2:07:94:8a:c7:6c:
86:bf:95:13:8b:fa:69:15:81:3e:01:2b:05:d6:d7:
c2:ba:00:71:9a:6a:cb:9f:9d:f3:0f:b1:2d:a0:17:
2d:7e:09:f5:40:89:33:4f:5f:db:9e:91:bd:d4:f1:
32:98:05:7f:41:f9:c5:c5:e9:67:42:6c:92:e0:13:
97:5c:87:15:45:74:6b:0e:43:6e:ab:55:ae:ee:94:
25:8c:24:a0:fb:bd:bb:d4:e1:71:25:71:a3:13:3a:
df:62:63:d7:9c:05:46:19:62:f5:6c:2a:c0:db:3a:
96:43:6b:b0:80:be:c5:84:50:42:a8:b0:26:3e:33:
4e:d1:52:2d:4a:f8:76:cf:80:09:f4:ef:5c:ec:9f:
56:81:87:16:dd:cf:6e:c4:e0:6b:fc:e4:98:83:3c:
70:48:2f:ff:8f:92:48:80:05:0a:18:d9:3a:dc:97:
00:d5:52:e3:45:e7:7c:0b:32:30:f5:90:c5:1a:9a:
5e:6a:8d:9e:ca:ae:ca:6d:01:19:17:23:00:c5:49:
d5:3d:b7:ac:aa:89:4d:fb:d3:96:df:53:52:e6:b5:
ce:67:41:ea:b3:cb:64:9e:89:8a:b3:a3:d7:2c:78:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:6A:0A:D5:BA:F2:39:10:18:E8:3C:E5:C3:99:8C:D8:CE:D9:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b89b3c5d-e121-4769-9f3e-0d4c4f0780db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:6000::/40
Signature Algorithm: sha256WithRSAEncryption
28:18:54:0a:31:b6:75:62:cf:3e:65:b2:0a:74:e0:01:6f:95:
4b:ef:67:c1:ba:32:74:1a:7b:a8:69:39:cd:07:7f:7a:ae:64:
a3:a0:5a:7f:87:e0:fc:90:0f:d0:93:23:a0:af:a2:e4:4a:ea:
22:08:d2:6e:ab:8a:51:70:47:81:54:4d:32:32:de:33:21:c0:
ea:ba:fd:60:17:6a:63:51:c0:ad:38:55:e2:c2:23:e8:91:bb:
26:cc:76:6a:46:b4:a1:01:58:e5:72:9d:7c:c2:f3:e7:8c:da:
e5:bb:e3:ca:d6:af:a2:6a:76:81:63:af:a5:d8:42:3b:05:0f:
33:9d:37:66:7f:6e:d5:df:df:eb:29:e4:95:47:ed:cb:2a:1c:
4b:72:e8:50:4f:20:6a:97:f3:54:1a:dd:c9:2e:9e:cd:77:34:
fb:1a:32:a4:06:e9:28:f6:14:00:63:29:a5:a5:fd:00:86:ac:
6b:98:23:71:7e:df:4c:97:96:ea:29:78:3d:9b:4b:07:09:b3:
8e:17:bf:52:00:1a:3c:a5:89:4c:a4:6b:76:18:a0:6c:39:f4:
43:7c:54:d6:71:6b:91:a1:79:20:28:d5:ba:c8:1d:e1:10:e9:
6b:bc:34:7b:5f:2a:60:7a:b5:ee:ce:c3:74:7a:bd:e7:dd:41:
1a:13:cc:e8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUDvkUSk/19GLlht1cScjw5aB7sowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzIwMDZaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGY1YWQyYmZhZDVmN2JhMWIzOWVkNThiNzRlZjZlZmFmMzRiZmNjNWI2ZDhk
YTk1M2UxZTU5ZGUzNjBjMWZlZTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJT71IyYgqVLgL0tKKrlaxmUB8SbzRw34geUisdshr+VE4v6aRWBPgErBdbX
wroAcZpqy5+d8w+xLaAXLX4J9UCJM09f256RvdTxMpgFf0H5xcXpZ0JskuATl1yH
FUV0aw5DbqtVru6UJYwkoPu9u9ThcSVxoxM632Jj15wFRhli9WwqwNs6lkNrsIC+
xYRQQqiwJj4zTtFSLUr4ds+ACfTvXOyfVoGHFt3PbsTga/zkmIM8cEgv/4+SSIAF
ChjZOtyXANVS40XnfAsyMPWQxRqaXmqNnsquym0BGRcjAMVJ1T23rKqJTfvTlt9T
Uua1zmdB6rPLZJ6JirOj1yx4E9sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRDWGoK
1bryORAY6Dzlw5mM2M7ZZzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Yjg5YjNjNWQtZTEyMS00NzY5LTlmM2UtMGQ0YzRmMDc4MGRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Flg
MA0GCSqGSIb3DQEBCwUAA4IBAQAoGFQKMbZ1Ys8+ZbIKdOABb5VL72fBujJ0Gnuo
aTnNB396rmSjoFp/h+D8kA/QkyOgr6LkSuoiCNJuq4pRcEeBVE0yMt4zIcDquv1g
F2pjUcCtOFXiwiPokbsmzHZqRrShAVjlcp18wvPnjNrlu+PK1q+ianaBY6+l2EI7
BQ8znTdmf27V39/rKeSVR+3LKhxLcuhQTyBql/NUGt3JLp7NdzT7GjKkBuko9hQA
Yymlpf0AhqxrmCNxft9Ml5bqKXg9m0sHCbOOF79SABo8pYlMpGt2GKBsOfRDfFTW
cWuRoXkgKNW6yB3hEOlrvDR7XypgerXuzsN0er3n3UEaE8zo
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:25:03 2026 by rpki-client