Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
File: c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json)
Hash identifier: xX/cGIAXWj5ZMv1gmprUSkq+rvN47geecKGE8XZnB80=
Subject key identifier: FA:B3:B7:B2:E4:6C:11:9C:37:DD:1F:66:71:36:54:F5:F4:0A:81:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1605C98B2D0B50A517D8D7DE833569FDF7A086D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
Signing time: Sun 11 Oct 2026 15:10:11 +0000
ROA not before: Sun 11 Oct 2026 15:10:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:05:c9:8b:2d:0b:50:a5:17:d8:d7:de:83:35:69:fd:f7:a0:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=204468deb1a01def6eb1f2f9e93adb25fe0bdd8770b8a8be61d4f4effddd599e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:92:84:1a:44:da:64:84:43:50:d9:c5:3b:
59:b0:dc:1b:9b:19:a4:b0:e1:20:ce:56:ec:91:e6:
76:cd:dc:ca:39:08:a3:7c:8c:57:9e:d1:32:a2:87:
6a:36:cb:af:f6:36:6c:76:b9:51:23:2d:a2:7d:a6:
6c:df:d0:c3:07:3a:44:d7:e4:4a:60:eb:c7:b6:31:
7d:17:f3:3e:2f:00:9e:f9:10:51:94:cd:2e:e9:be:
c1:eb:62:49:5e:7c:7a:c5:05:d8:e5:e4:6a:1e:0c:
25:cd:e5:18:57:cd:a3:f3:62:14:8f:1c:74:b5:2f:
36:11:7d:ab:23:1e:12:16:6f:68:30:30:64:18:ef:
d8:e6:64:37:39:e7:ab:14:4b:4c:fc:ef:7e:ed:af:
2d:b2:0d:54:bc:79:ff:55:ce:b7:18:66:70:3a:8f:
46:ed:48:7f:12:85:22:b7:29:be:31:5e:14:c1:91:
1a:09:93:7b:cd:4f:78:9a:89:2d:80:32:78:a5:61:
5a:c5:8e:f8:44:45:f8:fc:a0:6f:41:e4:e3:89:1a:
c5:d7:f3:74:00:4d:50:1e:73:f0:bf:3d:b1:ac:5b:
7c:50:95:e9:ef:12:19:c2:f4:80:a3:80:eb:f5:ef:
1e:f3:b0:e3:5f:00:20:49:0f:e3:43:23:a6:5d:5a:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:B7:B2:E4:6C:11:9C:37:DD:1F:66:71:36:54:F5:F4:0A:81:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
70:e6:25:55:98:be:6f:2f:76:4f:bf:29:bd:72:67:29:36:96:
c4:27:c6:68:17:da:d8:2c:82:ce:04:3c:27:64:5c:91:c2:a7:
93:fe:ba:a1:38:13:5c:79:94:cf:1d:19:6b:46:e2:0a:9d:f5:
4a:8e:41:e5:3f:38:48:83:40:f1:43:43:a3:26:80:6d:5c:f4:
e2:5d:da:1a:1a:d2:39:e2:62:64:00:2c:82:76:8a:37:ec:b9:
a9:05:90:c9:b1:93:68:92:5c:4b:6f:05:f1:4d:40:2c:99:b3:
c4:17:21:e9:ce:b5:b1:15:ca:fc:82:5a:9a:6d:54:c1:fa:76:
17:d0:e5:49:3e:b1:ca:f4:83:d3:96:85:f9:c7:0d:cb:24:6d:
ef:93:8b:f7:11:ec:07:ce:da:67:c2:90:cc:dd:0c:b2:3e:f6:
42:e9:dd:3a:5a:4f:0e:9c:5e:3c:bf:25:aa:3a:29:df:ac:b4:
c0:19:b9:55:a7:ee:a0:17:74:bc:46:5c:5b:fc:7b:8b:3c:4b:
fc:b1:25:c3:d7:e1:dc:bc:97:4c:94:a3:0b:c1:c3:e4:e8:f1:
ec:a0:e6:00:53:9e:3f:4b:c0:ce:74:85:d6:74:6d:1b:c5:ff:
40:95:21:18:1a:8a:79:d4:75:3e:11:77:c0:5d:12:ee:d3:d9:
60:2d:70:bf
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFgXJiy0LUKUX2NfegzVp/feghtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTEwMTFaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDIwNDQ2OGRlYjFhMDFkZWY2ZWIxZjJmOWU5M2FkYjI1ZmUwYmRkODc3MGI4
YThiZTYxZDRmNGVmZmRkZDU5OWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALpSkoQaRNpkhENQ2cU7WbDcG5sZpLDhIM5W7JHmds3cyjkIo3yMV57RMqKH
ajbLr/Y2bHa5USMton2mbN/Qwwc6RNfkSmDrx7YxfRfzPi8AnvkQUZTNLum+weti
SV58esUF2OXkah4MJc3lGFfNo/NiFI8cdLUvNhF9qyMeEhZvaDAwZBjv2OZkNznn
qxRLTPzvfu2vLbINVLx5/1XOtxhmcDqPRu1IfxKFIrcpvjFeFMGRGgmTe81PeJqJ
LYAyeKVhWsWO+ERF+Pygb0Hk44kaxdfzdABNUB5z8L89saxbfFCV6e8SGcL0gKOA
6/XvHvOw418AIEkP40Mjpl1auo8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT6s7ey
5GwRnDfdH2ZxNlT19AqBoTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzQ3ZDliZjctM2U5Yi00YWQ1LTk1OGEtZGRlN2NhZGZhODlmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNA
wDANBgkqhkiG9w0BAQsFAAOCAQEAcOYlVZi+by92T78pvXJnKTaWxCfGaBfa2CyC
zgQ8J2RckcKnk/66oTgTXHmUzx0Za0biCp31So5B5T84SINA8UNDoyaAbVz04l3a
GhrSOeJiZAAsgnaKN+y5qQWQybGTaJJcS28F8U1ALJmzxBch6c61sRXK/IJamm1U
wfp2F9DlST6xyvSD05aF+ccNyyRt75OL9xHsB87aZ8KQzN0Msj72QundOlpPDpxe
PL8lqjop36y0wBm5VafuoBd0vEZcW/x7izxL/LElw9fh3LyXTJSjC8HD5Ojx7KDm
AFOeP0vAznSF1nRtG8X/QJUhGBqKedR1PhF3wF0S7tPZYC1wvw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:41:59 2026 by rpki-client