Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
File: c153f994-19fd-4682-b6f7-f4e92e6144ea.roa (raw, json)
Hash identifier: +LtuP687TJrST6VDpioErNIa8pWIrdHw8aBI3/GLzsw=
Subject key identifier: 62:C7:47:15:A1:BD:C2:DA:3B:51:5C:3B:C6:39:16:B3:0D:5B:3A:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27DC02A954B5BB7D3BBE2258DCD7C6ED568F61C0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
Signing time: Mon 26 Oct 2026 04:30:41 +0000
ROA not before: Mon 26 Oct 2026 04:30:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:dc:02:a9:54:b5:bb:7d:3b:be:22:58:dc:d7:c6:ed:56:8f:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:30:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=96c80ae7b1c1cf4fd92c72360113613be97a2efa2ac23ad3feb7c5f4256a86f9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:6e:b9:4a:01:d8:fc:90:5b:30:f0:80:fc:
e4:34:fa:e6:92:d7:09:92:13:29:03:40:09:b1:57:
50:8e:24:ea:2f:a3:04:06:a1:aa:42:01:b7:39:94:
7d:4c:50:13:ef:05:c6:7d:7e:64:52:80:8d:22:95:
8b:6d:6b:36:db:6f:0c:e6:f0:91:11:cd:f0:8a:6a:
42:08:52:e3:e1:2d:db:c7:42:c7:00:dd:f5:5a:6a:
af:4b:5d:53:a5:c8:db:4d:fc:83:cd:a8:df:28:96:
cc:d3:77:23:c4:8b:0f:21:6a:0e:da:44:09:14:98:
30:73:bc:b3:73:9b:1b:a7:5d:5b:02:0d:83:7b:32:
f5:c2:4b:86:11:81:93:b7:b6:04:6e:6a:2b:71:a8:
07:fc:87:1d:68:c7:84:46:13:2c:c7:2b:06:68:9d:
d9:03:09:f1:b0:81:5f:4f:7e:21:0c:11:c6:4b:bf:
d7:ad:80:37:f6:50:98:6a:b7:b1:e2:c0:6a:03:e1:
d0:65:fb:74:a2:84:07:aa:a6:1b:07:f0:42:84:78:
55:f3:c2:78:8c:0e:c6:e6:61:52:1b:8c:19:8d:44:
eb:f4:40:da:de:d9:7c:69:bb:bd:fe:76:0f:1e:16:
2b:fb:d5:95:a9:3f:6f:cd:90:0c:27:4a:1b:30:ed:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C7:47:15:A1:BD:C2:DA:3B:51:5C:3B:C6:39:16:B3:0D:5B:3A:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c153f994-19fd-4682-b6f7-f4e92e6144ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:c00::/38
Signature Algorithm: sha256WithRSAEncryption
89:33:31:88:0f:35:ac:91:37:66:6e:e0:98:dc:50:6a:e4:75:
97:bb:61:ff:cb:4f:2f:f9:c7:ee:ca:d5:fa:d9:d4:d3:e0:fa:
dd:16:3d:df:61:02:9f:d6:c2:20:93:d8:73:35:7f:f8:f4:ca:
48:06:5f:a3:3a:7b:8c:5a:80:88:a5:fa:14:60:10:40:db:e9:
f7:2b:66:76:b2:cf:24:09:5d:9b:df:33:ed:7b:40:38:df:4d:
52:1d:86:aa:20:96:2e:db:39:47:ac:3d:c1:3d:21:77:0d:ec:
80:c5:3a:d7:c8:98:97:0c:f6:2b:27:4f:c8:fc:64:9f:99:6d:
87:71:d1:4f:30:70:1a:10:3b:e5:78:3a:25:dc:df:a5:f8:aa:
2c:c4:c5:04:0a:87:14:c1:37:ed:5b:76:8d:04:1a:12:ce:c7:
84:bf:02:85:19:50:06:af:00:a6:a9:0f:a2:b1:32:42:45:5c:
cb:4b:15:8e:8d:21:32:47:5d:a0:bd:9a:b6:4d:7b:91:da:f6:
6d:56:d8:a1:f1:cb:d4:0c:38:9f:2f:b5:21:b2:16:5e:00:30:
fa:67:e1:11:a4:74:ba:8a:aa:1b:6b:28:56:37:88:c7:c7:60:
28:f9:bd:6e:40:5c:35:45:e2:2e:9c:4c:08:2f:3b:05:c0:ff:
2c:dd:2d:f8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJ9wCqVS1u307viJY3NfG7VaPYcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDMwNDFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDk2YzgwYWU3YjFjMWNmNGZkOTJjNzIzNjAxMTM2MTNiZTk3YTJlZmEyYWMy
M2FkM2ZlYjdjNWY0MjU2YTg2ZjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALa+brlKAdj8kFsw8ID85DT65pLXCZITKQNACbFXUI4k6i+jBAahqkIBtzmU
fUxQE+8Fxn1+ZFKAjSKVi21rNttvDObwkRHN8IpqQghS4+Et28dCxwDd9Vpqr0td
U6XI2038g82o3yiWzNN3I8SLDyFqDtpECRSYMHO8s3ObG6ddWwINg3sy9cJLhhGB
k7e2BG5qK3GoB/yHHWjHhEYTLMcrBmid2QMJ8bCBX09+IQwRxku/162AN/ZQmGq3
seLAagPh0GX7dKKEB6qmGwfwQoR4VfPCeIwOxuZhUhuMGY1E6/RA2t7ZfGm7vf52
Dx4WK/vVlak/b82QDCdKGzDtSe8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRix0cV
ob3C2jtRXDvGORazDVs6WjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzE1M2Y5OTQtMTlmZC00NjgyLWI2ZjctZjRlOTJlNjE0NGVhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BwM
MA0GCSqGSIb3DQEBCwUAA4IBAQCJMzGIDzWskTdmbuCY3FBq5HWXu2H/y08v+cfu
ytX62dTT4PrdFj3fYQKf1sIgk9hzNX/49MpIBl+jOnuMWoCIpfoUYBBA2+n3K2Z2
ss8kCV2b3zPte0A4301SHYaqIJYu2zlHrD3BPSF3DeyAxTrXyJiXDPYrJ0/I/GSf
mW2HcdFPMHAaEDvleDol3N+l+KosxMUECocUwTftW3aNBBoSzseEvwKFGVAGrwCm
qQ+isTJCRVzLSxWOjSEyR12gvZq2TXuR2vZtVtih8cvUDDifL7UhshZeADD6Z+ER
pHS6iqobayhWN4jHx2Ao+b1uQFw1ReIunEwILzsFwP8s3S34
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:24 2026 by rpki-client