Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
File: cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa (raw, json)
Hash identifier: JrwGQGLBTgnJdxUj5qpAOs4Pd6pIznwh+iekVAo6rC4=
Subject key identifier: F9:C3:68:81:4B:E6:C5:57:9B:F8:99:16:62:1D:68:CE:86:11:58:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C911AA5DCD6785D81BF63AF68EC52D269F6F9C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
Signing time: Fri 09 Oct 2026 01:30:18 +0000
ROA not before: Fri 09 Oct 2026 01:30:18 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:91:1a:a5:dc:d6:78:5d:81:bf:63:af:68:ec:52:d2:69:f6:f9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:18 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=dee61d5c7a0bfb962b7db60d6ba3840fe66550017ac2f4c28174f8666a0ec2fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:db:c6:9b:ea:f3:dd:d2:e7:d3:cf:84:3a:
ab:e9:91:ba:b9:85:a4:ed:0d:64:0e:45:ba:d7:63:
5e:d3:e7:d9:05:78:44:87:fe:7a:8c:30:4f:4d:f6:
69:d8:26:1e:68:8f:d5:33:74:a5:b2:93:77:35:0d:
6e:e0:a2:f0:d2:76:15:76:c7:50:5c:35:a0:e3:b5:
52:94:1f:54:4f:ba:1e:98:2b:69:3b:d8:70:8c:3e:
0e:f7:1b:64:2f:f3:ef:8e:1c:b1:1f:fc:38:3e:b6:
e1:38:62:f6:94:b0:07:73:1b:6b:a6:7a:da:84:ff:
70:4f:9f:70:e1:48:aa:a2:12:12:d8:99:05:eb:84:
13:7f:34:9b:68:ac:c9:03:0c:a0:44:0a:41:9d:e4:
78:0a:a6:37:28:69:30:88:6b:50:42:80:98:27:5c:
a5:14:a3:85:dc:6e:d8:5d:9f:7d:3c:bc:ee:24:b6:
9c:ea:49:45:aa:df:f2:21:48:cf:4f:62:cb:09:0f:
47:79:ef:71:39:7d:4d:ee:82:cb:79:28:36:46:04:
e5:f9:88:bf:ce:c4:92:f7:8d:b8:08:f3:cb:5b:fa:
ed:16:6d:88:81:65:40:18:c6:05:df:c0:2d:7b:42:
32:20:76:26:bb:ed:5a:79:9e:b2:36:1c:25:70:9a:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:68:81:4B:E6:C5:57:9B:F8:99:16:62:1D:68:CE:86:11:58:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd47a5a2-5bb4-4fe1-bd59-7f64ed4bfa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c020::/48
Signature Algorithm: sha256WithRSAEncryption
33:4b:58:fe:64:63:f8:dc:f0:5d:af:c2:2d:06:9f:0f:84:7f:
8d:94:75:57:7f:57:02:f5:46:cc:36:1d:c6:9e:e7:18:5f:1a:
be:18:e9:3d:3d:d8:a6:15:23:f9:79:67:cf:75:54:bb:bd:17:
fc:f0:51:fb:70:ec:fe:aa:3c:a6:19:1b:67:29:f6:48:dd:9e:
4b:15:93:93:00:64:4a:20:fe:b4:05:54:f2:7d:65:a9:8c:bd:
eb:86:17:41:85:a1:4a:46:19:10:5e:d0:8f:c6:d2:18:80:ac:
4c:af:67:3a:db:b1:69:94:af:92:6c:8b:a3:0f:fb:ec:07:4a:
ee:d3:84:10:78:c6:df:db:e0:1c:8e:ca:a9:50:98:34:c1:0f:
ce:88:bb:80:5b:42:4f:aa:60:64:90:1e:18:21:7f:53:08:b3:
5a:54:c9:d7:f1:a3:44:53:8d:59:c6:8f:fc:24:bf:6f:d5:af:
9d:0c:70:fa:2d:3c:a9:c8:1e:7a:7e:eb:70:5b:85:c6:e8:c2:
aa:92:54:b8:db:99:d5:71:e4:d5:71:0a:92:7b:ef:eb:92:6f:
ac:47:fd:e6:6d:47:6d:30:73:62:fb:38:9a:04:fd:45:36:7e:
77:9c:1e:9a:ab:28:f2:bd:6f:55:bf:9d:9e:18:ff:dc:ef:94:
74:6e:09:a5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbJEapdzWeF2Bv2OvaOxS0mn2+cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTMwMThaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQGRlZTYxZDVjN2EwYmZiOTYyYjdkYjYwZDZiYTM4NDBmZTY2NTUwMDE3YWMy
ZjRjMjgxNzRmODY2NmEwZWMyZmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJgF28ab6vPd0ufTz4Q6q+mRurmFpO0NZA5FutdjXtPn2QV4RIf+eowwT032
adgmHmiP1TN0pbKTdzUNbuCi8NJ2FXbHUFw1oOO1UpQfVE+6HpgraTvYcIw+Dvcb
ZC/z744csR/8OD624Thi9pSwB3Mba6Z62oT/cE+fcOFIqqISEtiZBeuEE380m2is
yQMMoEQKQZ3keAqmNyhpMIhrUEKAmCdcpRSjhdxu2F2ffTy87iS2nOpJRarf8iFI
z09iywkPR3nvcTl9Te6Cy3koNkYE5fmIv87EkveNuAjzy1v67RZtiIFlQBjGBd/A
LXtCMiB2JrvtWnmesjYcJXCaAwMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT5w2iB
S+bFV5v4mRZiHWjOhhFYMjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Q0N2E1YTItNWJiNC00ZmUxLWJkNTktN2Y2NGVkNGJmYTJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GrA
IDANBgkqhkiG9w0BAQsFAAOCAQEAM0tY/mRj+NzwXa/CLQafD4R/jZR1V39XAvVG
zDYdxp7nGF8avhjpPT3YphUj+Xlnz3VUu70X/PBR+3Ds/qo8phkbZyn2SN2eSxWT
kwBkSiD+tAVU8n1lqYy964YXQYWhSkYZEF7Qj8bSGICsTK9nOtuxaZSvkmyLow/7
7AdK7tOEEHjG39vgHI7KqVCYNMEPzoi7gFtCT6pgZJAeGCF/UwizWlTJ1/GjRFON
WcaP/CS/b9WvnQxw+i08qcgeen7rcFuFxujCqpJUuNuZ1XHk1XEKknvv65JvrEf9
5m1HbTBzYvs4mgT9RTZ+d5wemqso8r1vVb+dnhj/3O+UdG4JpQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:24:39 2026 by rpki-client