Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
File: cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa (raw, json)
Hash identifier: GMIFDEwDxjbIad5EPJX0OuaUvq8nvcb0ykV/IMdhJ2Y=
Subject key identifier: AE:B1:22:89:41:2B:FF:48:8E:7B:5D:75:79:CC:F3:D3:C6:8E:13:9D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34D56FE9271AC53973D5CAA701B75CA5D46CAF2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
Signing time: Sat 24 Oct 2026 02:02:56 +0000
ROA not before: Sat 24 Oct 2026 02:02:56 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d5:6f:e9:27:1a:c5:39:73:d5:ca:a7:01:b7:5c:a5:d4:6c:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 02:02:56 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=ff88eb7639a399264d3845925e9489ae5755c598aaa2b42f7292b37b86e6aaf5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:9a:9e:b2:83:54:0a:aa:b2:2f:1b:a9:c4:
50:7a:2b:c3:2b:af:8c:a9:46:c5:55:e7:1e:23:81:
5e:fa:16:7a:ba:32:e2:dd:b2:7a:a7:74:33:e9:46:
df:3b:0b:53:3c:cc:f2:f4:73:9f:2d:a5:3a:e6:df:
6a:45:92:cf:56:f4:ef:7e:01:33:3c:f1:e2:69:75:
5e:63:df:e6:ac:8a:a5:13:7d:a2:a6:ec:7e:94:fc:
2a:ff:96:aa:c9:21:99:13:c2:69:4a:f6:46:b6:b1:
96:c0:d9:c8:8f:04:3e:91:4a:91:3b:99:eb:c5:e7:
4f:c4:7a:f6:3c:65:26:68:ee:7a:f6:2e:2f:b4:44:
87:a1:d4:0e:ae:90:72:54:75:e4:ee:4a:ec:0f:fe:
a1:de:25:08:2b:e5:51:17:06:48:41:9e:73:69:30:
74:d0:af:be:0d:f4:0c:ca:3a:3d:d4:49:de:63:5f:
09:42:e4:b8:48:44:4e:bc:4f:6f:2b:38:c4:fb:32:
33:f5:d6:5f:10:9f:06:93:03:d0:a4:ab:25:7c:94:
1d:d4:07:2e:b0:fa:eb:0c:7f:97:98:2e:2e:fc:6c:
3e:25:d7:ba:97:76:9f:6c:75:dc:7a:5f:32:35:a4:
a4:45:a6:21:61:fe:e6:d1:df:50:42:d6:24:ef:b6:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:22:89:41:2B:FF:48:8E:7B:5D:75:79:CC:F3:D3:C6:8E:13:9D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:800::/40
Signature Algorithm: sha256WithRSAEncryption
61:09:cc:56:b1:9c:f6:90:47:25:23:02:99:59:0b:f2:ad:d4:
fd:12:99:be:87:67:10:04:74:ca:73:f2:f1:52:43:e1:ca:38:
b2:99:0d:6e:a4:3f:2e:a1:e3:54:2d:8b:29:80:65:86:4e:d0:
ff:e1:32:42:58:f1:fb:76:53:a9:c6:14:ef:1d:63:d4:01:24:
de:ae:47:4a:57:62:ac:6b:1b:d8:86:15:1a:7c:05:bc:68:9c:
6c:15:df:03:61:eb:80:07:43:a2:c9:01:f4:d8:e9:50:6d:e7:
2d:91:f4:b0:4a:bf:eb:91:cb:2f:a5:08:15:bc:67:a2:da:03:
0a:13:8f:6f:f2:44:cc:26:ae:7b:1e:a9:4a:1b:6e:19:f3:55:
3c:0b:b4:57:21:ce:64:53:a8:10:c9:0f:bf:ac:4a:52:7d:b8:
99:b3:40:16:44:68:5c:f0:bf:c9:0b:63:37:5d:22:09:04:9a:
19:88:b9:86:e9:4d:2f:f7:c1:ba:e8:28:f7:72:f8:3a:a9:78:
75:5b:c4:2e:65:97:35:59:d6:3b:08:68:4d:1f:66:5e:f9:f5:
c2:dc:ca:6c:70:bf:3f:ba:96:9d:a5:1c:2e:15:a0:d3:25:a9:
e3:81:f0:0d:67:a7:7d:28:78:14:af:47:9a:ce:cf:41:32:b5:
4b:82:0d:db
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNNVv6ScaxTlz1cqnAbdcpdRsrywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjQwMjAyNTZaFw0yNzAxMjIyMzU5NTlaMHoxSTBHBgNV
BAUTQGZmODhlYjc2MzlhMzk5MjY0ZDM4NDU5MjVlOTQ4OWFlNTc1NWM1OThhYWEy
YjQyZjcyOTJiMzdiODZlNmFhZjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoomp6yg1QKqrIvG6nEUHorwyuvjKlGxVXnHiOBXvoWeroy4t2yeqd0M+lG
3zsLUzzM8vRzny2lOubfakWSz1b0734BMzzx4ml1XmPf5qyKpRN9oqbsfpT8Kv+W
qskhmRPCaUr2RraxlsDZyI8EPpFKkTuZ68XnT8R69jxlJmjuevYuL7REh6HUDq6Q
clR15O5K7A/+od4lCCvlURcGSEGec2kwdNCvvg30DMo6PdRJ3mNfCULkuEhETrxP
bys4xPsyM/XWXxCfBpMD0KSrJXyUHdQHLrD66wx/l5guLvxsPiXXupd2n2x13Hpf
MjWkpEWmIWH+5tHfUELWJO+2yFcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSusSKJ
QSv/SI57XXV5zPPTxo4TnTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Q0Y2U1ZDctMWRjYy00Nzc3LWIyOTktYjBkOTdkMzMxNWY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HII
MA0GCSqGSIb3DQEBCwUAA4IBAQBhCcxWsZz2kEclIwKZWQvyrdT9Epm+h2cQBHTK
c/LxUkPhyjiymQ1upD8uoeNULYspgGWGTtD/4TJCWPH7dlOpxhTvHWPUASTerkdK
V2KsaxvYhhUafAW8aJxsFd8DYeuAB0OiyQH02OlQbectkfSwSr/rkcsvpQgVvGei
2gMKE49v8kTMJq57HqlKG24Z81U8C7RXIc5kU6gQyQ+/rEpSfbiZs0AWRGhc8L/J
C2M3XSIJBJoZiLmG6U0v98G66Cj3cvg6qXh1W8QuZZc1WdY7CGhNH2Ze+fXC3Mps
cL8/upadpRwuFaDTJanjgfANZ6d9KHgUr0eazs9BMrVLgg3b
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:35:03 2026 by rpki-client