Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c99f8ad2-0825-4cff-9527-ce53cd41757a.roa
File: c99f8ad2-0825-4cff-9527-ce53cd41757a.roa (raw, json)
Hash identifier: DSOMbYeRV/KPMfkz/Y12R7A9seicue304BlsBBKTOK4=
Subject key identifier: 4D:37:20:2C:7C:AD:02:EA:9E:60:EA:A6:99:3A:84:3D:11:0C:6E:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CAE24034A89F8827801C0D003AF7E5E26A7B060
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c99f8ad2-0825-4cff-9527-ce53cd41757a.roa
Signing time: Thu 08 Oct 2026 17:24:36 +0000
ROA not before: Thu 08 Oct 2026 17:24:36 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:8800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ae:24:03:4a:89:f8:82:78:01:c0:d0:03:af:7e:5e:26:a7:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:36 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=ac80304eef0064b34bfa46c37bfec6d6dc017bbe09afa2908f51882b10c81d74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:18:bf:91:9f:ac:69:0e:c5:09:6a:d6:aa:
74:95:bd:1a:3a:c9:31:41:ab:16:69:52:8e:42:a2:
66:65:60:39:f5:a4:64:ca:a3:83:65:bd:8d:8e:c8:
92:da:8d:a4:27:2b:86:05:88:99:fd:ce:76:4e:5f:
d6:66:80:42:c8:9a:2c:07:25:82:0f:6a:b6:d7:71:
83:79:03:64:0a:33:b7:58:cf:77:ba:49:55:2c:d5:
23:0f:dc:45:95:b3:20:4a:c2:de:27:0c:ef:6e:7e:
51:09:9b:9f:30:20:c1:73:98:6e:c8:e3:ba:a7:22:
0e:2f:4d:80:e4:c1:92:9e:bf:4e:39:ea:c2:db:47:
ff:00:28:4f:91:39:60:67:2e:31:46:73:1e:d7:f0:
ce:dd:56:54:2a:f0:a7:af:4b:67:1e:5f:36:61:f2:
50:a1:44:6d:00:be:05:81:db:38:0b:75:86:8c:6e:
a5:a5:54:df:d3:32:3c:04:db:06:a4:ff:a6:21:f2:
59:f2:c9:f2:08:92:fe:b1:aa:14:83:1b:1c:78:c3:
8e:06:85:76:3e:71:14:d5:4e:bc:93:19:0d:05:47:
ca:52:59:b0:1d:82:69:80:6d:79:08:13:4d:5f:3d:
58:d7:46:68:65:d5:ec:28:6c:10:d0:86:d9:00:13:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:20:2C:7C:AD:02:EA:9E:60:EA:A6:99:3A:84:3D:11:0C:6E:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c99f8ad2-0825-4cff-9527-ce53cd41757a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:8800::/40
Signature Algorithm: sha256WithRSAEncryption
64:fd:87:7e:4b:af:22:ba:d9:d9:5e:f5:81:70:e0:fe:3e:8c:
ab:bb:8e:0e:77:e4:88:2d:03:86:c0:1a:6c:31:e6:44:a3:d2:
10:83:3f:03:91:6e:b8:0f:b4:82:1f:1a:d6:a6:e4:59:bc:1a:
be:1b:9e:01:2d:68:3e:07:c5:d6:a8:80:9f:0f:58:87:26:61:
bc:02:e5:fb:12:0a:0f:15:56:3a:64:ee:df:f2:2c:53:8e:e7:
2d:eb:e4:15:b9:c4:1d:e0:23:26:a6:45:15:14:5e:8e:43:3b:
59:ce:3f:74:d6:c5:16:45:14:54:83:96:40:19:57:e9:71:12:
17:3a:c5:cd:f4:5d:92:63:4f:aa:d4:30:1b:73:14:a8:2d:db:
2a:a7:f0:02:f2:d0:0c:8f:5f:da:4b:36:e4:7c:e0:53:eb:29:
da:e2:54:4b:b3:9f:2b:39:f2:75:83:1b:06:f8:f8:02:50:7d:
a7:c3:38:b7:19:87:b4:68:86:a7:bd:c0:cd:1c:a5:92:47:fc:
43:bc:35:8a:9c:1b:1b:d1:0f:c2:90:ea:b8:84:77:c9:76:a2:
14:42:c9:c9:25:92:79:c2:22:9f:46:b1:b4:a4:3d:94:e2:90:
7d:9d:d5:46:ec:1d:60:dc:20:f5:e8:21:dd:93:e1:b5:52:0e:
f7:3f:f0:1d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPK4kA0qJ+IJ4AcDQA69+XiansGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDgxNzI0MzZaFw0yNzAxMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGFjODAzMDRlZWYwMDY0YjM0YmZhNDZjMzdiZmVjNmQ2ZGMwMTdiYmUwOWFm
YTI5MDhmNTE4ODJiMTBjODFkNzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJyvGL+Rn6xpDsUJataqdJW9GjrJMUGrFmlSjkKiZmVgOfWkZMqjg2W9jY7I
ktqNpCcrhgWImf3Odk5f1maAQsiaLAclgg9qttdxg3kDZAozt1jPd7pJVSzVIw/c
RZWzIErC3icM725+UQmbnzAgwXOYbsjjuqciDi9NgOTBkp6/TjnqwttH/wAoT5E5
YGcuMUZzHtfwzt1WVCrwp69LZx5fNmHyUKFEbQC+BYHbOAt1hoxupaVU39MyPATb
BqT/piHyWfLJ8giS/rGqFIMbHHjDjgaFdj5xFNVOvJMZDQVHylJZsB2CaYBteQgT
TV89WNdGaGXV7ChsENCG2QATRm0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRNNyAs
fK0C6p5g6qaZOoQ9EQxuOjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Yzk5ZjhhZDItMDgyNS00Y2ZmLTk1MjctY2U1M2NkNDE3NTdhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GCI
MA0GCSqGSIb3DQEBCwUAA4IBAQBk/Yd+S68iutnZXvWBcOD+Poyru44Od+SILQOG
wBpsMeZEo9IQgz8DkW64D7SCHxrWpuRZvBq+G54BLWg+B8XWqICfD1iHJmG8AuX7
EgoPFVY6ZO7f8ixTjuct6+QVucQd4CMmpkUVFF6OQztZzj901sUWRRRUg5ZAGVfp
cRIXOsXN9F2SY0+q1DAbcxSoLdsqp/AC8tAMj1/aSzbkfOBT6yna4lRLs58rOfJ1
gxsG+PgCUH2nwzi3GYe0aIanvcDNHKWSR/xDvDWKnBsb0Q/CkOq4hHfJdqIUQsnJ
JZJ5wiKfRrG0pD2U4pB9ndVG7B1g3CD16CHdk+G1Ug73P/Ad
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:32:36 2026 by rpki-client