Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa
File: be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa (raw, json)
Hash identifier: 46BgdKf60rLvXYlYRuIdSTKhwYw9aD3AQsf+dsnlBUc=
Subject key identifier: 89:B0:EA:F5:4E:A0:41:1E:CC:E3:FC:81:84:26:99:8E:00:7E:74:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FD30B87CC624B24431499D9EDA61D11BE724A59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa
Signing time: Thu 29 Oct 2026 01:02:30 +0000
ROA not before: Thu 29 Oct 2026 01:02:30 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d062:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d3:0b:87:cc:62:4b:24:43:14:99:d9:ed:a6:1d:11:be:72:4a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:30 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=9c620307389ec0dc30115074617621e6d92c2b467b502dd46ec263c4ae2f15a9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:ed:02:ab:1d:2f:3f:0a:7b:dc:60:22:69:
8e:b0:08:92:90:9a:30:fe:50:52:cf:0b:67:6b:0e:
c2:80:17:db:d7:7a:eb:45:ca:9a:a5:17:e7:66:d7:
00:fd:0f:bd:c8:1e:d3:08:00:e1:86:fe:f7:29:40:
47:40:a7:83:8d:78:1f:d0:fe:96:aa:02:04:0e:63:
9a:87:66:ea:2b:ee:a8:77:7c:3a:09:7d:eb:66:a1:
48:e2:87:e8:e2:51:b1:11:30:7e:d1:3e:ac:7f:ba:
7b:8e:30:26:e5:ae:b4:1d:fc:63:07:64:98:73:b7:
97:0f:b3:9b:78:0d:a8:67:48:53:e9:71:4e:ea:9e:
92:ae:80:f1:bb:62:7d:10:06:8c:a1:f8:6f:32:ec:
4e:92:e8:db:3f:43:c1:89:65:99:41:5c:2a:dc:94:
b7:76:25:39:74:46:4e:ca:ab:f2:8c:98:fb:83:ce:
c0:de:c3:35:4e:49:13:35:ea:93:0d:f8:13:81:a7:
f2:5e:41:ff:64:9e:3e:10:14:f8:9b:bf:04:2e:05:
a1:03:3f:ef:3b:3a:a5:8a:88:0b:4b:73:2c:ef:cb:
46:e8:86:5a:0f:75:22:24:eb:8f:90:8d:85:25:48:
b7:45:4d:3b:fb:54:8f:c8:3f:bb:9d:ad:b1:98:7d:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:EA:F5:4E:A0:41:1E:CC:E3:FC:81:84:26:99:8E:00:7E:74:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be7f05a6-7a49-48ab-aec4-4ab65db7f2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d062:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:ff:fd:41:5a:15:d4:be:a0:3f:5a:47:ed:87:42:82:04:a9:
39:d7:a5:35:6b:f8:b4:94:4d:f1:76:a6:c7:0d:c7:1e:92:2a:
f9:95:eb:37:c6:75:e7:f2:60:e0:4b:17:63:98:c9:d9:b2:44:
9f:e9:03:55:d5:4e:ee:2c:0d:60:99:ba:7d:51:5b:09:29:73:
9d:e7:2c:6c:66:90:62:db:81:3b:7d:6b:41:05:11:2a:f4:4a:
03:80:61:42:26:fe:db:c5:a8:5e:78:de:be:b9:20:5d:e5:c8:
88:c8:e9:83:17:ae:77:7e:b7:ae:b8:42:70:53:13:65:22:15:
b2:b1:43:31:f4:4d:59:75:d1:b3:57:3d:45:ce:a9:72:dd:83:
8e:3e:12:bf:8d:72:f1:88:75:f8:8c:b2:c3:61:ac:3d:7c:27:
96:d6:e7:18:08:5e:0c:eb:50:85:01:f0:e1:58:e5:4b:bf:73:
2a:9a:a5:d3:be:62:cc:c0:9a:ea:a7:dc:97:bd:51:f8:4e:51:
2d:a8:ec:0b:19:3c:ac:b6:7e:5c:85:06:46:be:b6:da:39:11:
0a:67:24:0d:30:83:4e:99:34:52:a2:ac:85:a9:c9:5c:67:be:
e4:2e:39:fd:1f:4c:e1:bb:4d:3d:59:27:67:2a:5a:2e:35:88:
9f:7b:7d:bd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUH9MLh8xiSyRDFJnZ7aYdEb5ySlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjkwMTAyMzBaFw0yNzAxMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDljNjIwMzA3Mzg5ZWMwZGMzMDExNTA3NDYxNzYyMWU2ZDkyYzJiNDY3YjUw
MmRkNDZlYzI2M2M0YWUyZjE1YTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKmJ7QKrHS8/CnvcYCJpjrAIkpCaMP5QUs8LZ2sOwoAX29d660XKmqUX52bX
AP0Pvcge0wgA4Yb+9ylAR0Cng414H9D+lqoCBA5jmodm6ivuqHd8Ogl962ahSOKH
6OJRsREwftE+rH+6e44wJuWutB38YwdkmHO3lw+zm3gNqGdIU+lxTuqekq6A8bti
fRAGjKH4bzLsTpLo2z9DwYllmUFcKtyUt3YlOXRGTsqr8oyY+4POwN7DNU5JEzXq
kw34E4Gn8l5B/2SePhAU+Ju/BC4FoQM/7zs6pYqIC0tzLO/LRuiGWg91IiTrj5CN
hSVIt0VNO/tUj8g/u52tsZh9QGkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSJsOr1
TqBBHszj/IGEJpmOAH50nDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmU3ZjA1YTYtN2E0OS00OGFiLWFlYzQtNGFiNjVkYjdmMmYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GLg
MA0GCSqGSIb3DQEBCwUAA4IBAQCx//1BWhXUvqA/Wkfth0KCBKk516U1a/i0lE3x
dqbHDccekir5les3xnXn8mDgSxdjmMnZskSf6QNV1U7uLA1gmbp9UVsJKXOd5yxs
ZpBi24E7fWtBBREq9EoDgGFCJv7bxaheeN6+uSBd5ciIyOmDF653freuuEJwUxNl
IhWysUMx9E1ZddGzVz1Fzqly3YOOPhK/jXLxiHX4jLLDYaw9fCeW1ucYCF4M61CF
AfDhWOVLv3MqmqXTvmLMwJrqp9yXvVH4TlEtqOwLGTystn5chQZGvrbaOREKZyQN
MINOmTRSoqyFqclcZ77kLjn9H0zhu009WSdnKlouNYife329
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:37 2026 by rpki-client