Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa
File: cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa (raw, json)
Hash identifier: vE9oyeg51Y2ElUIiTOJqklY8azOdHJz698wJ19SN6+g=
Subject key identifier: 5D:3E:6D:39:9E:CB:B0:1D:2C:03:04:8D:2F:6A:96:F2:09:43:55:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D23BAB63DC14719C12920B5C4ABB6637DE6FC2A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa
Signing time: Thu 29 Oct 2026 01:03:05 +0000
ROA not before: Thu 29 Oct 2026 01:03:05 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:23:ba:b6:3d:c1:47:19:c1:29:20:b5:c4:ab:b6:63:7d:e6:fc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:03:05 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=95ecca6eae9dea8a5e8235d77df860d5d148dd7aa1d6e52750422f0ca1de8a96, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:96:a1:c2:2a:7a:ca:1c:fa:27:76:32:40:
9d:b3:21:60:88:81:96:6e:36:79:5a:61:b0:4e:cc:
99:6c:d5:8a:cf:02:09:8d:bd:b9:0c:5a:4f:72:34:
e6:bc:87:d8:f8:48:c7:f6:03:03:ea:73:64:80:06:
98:d0:80:1f:d2:c9:6e:b1:95:e5:bb:d6:35:29:14:
b9:20:93:d3:91:6e:71:03:a3:ff:11:e5:d7:ba:73:
04:24:a5:9a:d6:d0:d5:e2:98:e4:73:b0:0d:11:41:
3e:e5:56:a7:70:96:94:8d:50:71:ff:09:51:90:2b:
2a:84:cc:70:e6:d2:3e:42:35:8f:0f:a7:c0:30:12:
a3:90:12:25:87:00:47:4b:4b:2b:54:5c:05:40:af:
01:2e:18:0f:78:1f:6f:23:dd:ab:55:97:96:89:b0:
d6:8e:a9:a2:e3:33:b5:61:11:ff:97:64:a1:b6:dc:
6c:1b:27:34:8d:a3:e3:09:c5:22:84:d3:9b:6e:50:
68:dc:28:ec:b9:a3:b6:fd:29:80:c8:5d:b4:71:1c:
73:b0:cb:3a:2e:c2:10:50:95:29:5a:3f:51:9c:77:
ef:78:56:60:fd:e4:b1:91:9e:77:1f:0c:92:2f:3c:
8e:72:d1:81:69:b1:98:b3:8c:c5:38:db:af:94:16:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3E:6D:39:9E:CB:B0:1D:2C:03:04:8D:2F:6A:96:F2:09:43:55:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdcd69a2-24ce-44e6-adc9-b1a1349a422a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:6000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:ae:19:e3:73:ed:e7:96:10:26:df:f9:aa:33:f9:08:b5:3f:
3a:9f:bf:8b:99:b7:60:03:db:9d:2b:53:63:01:71:ac:ff:bd:
28:fd:96:bb:0d:b0:94:1d:38:77:f2:43:70:5d:31:43:49:35:
5d:27:c6:a2:d0:7d:83:88:b5:9d:b4:bd:46:c9:bb:24:cb:83:
24:ce:94:6c:cb:16:98:ff:98:b8:3e:de:9b:d9:a2:97:a0:eb:
ad:fe:8f:93:8a:26:96:4c:74:e0:ad:79:0b:43:5e:cf:54:ed:
f1:57:c1:c1:c9:e3:36:53:d1:1d:45:2c:f4:ef:52:b7:54:96:
7a:d0:8b:01:cd:94:f6:86:bc:61:81:24:4c:e4:59:43:36:b7:
63:59:7c:14:10:10:cb:6c:87:07:ac:c1:49:6d:74:7a:37:66:
f5:84:92:0e:33:d7:ed:84:19:ca:25:ca:da:89:37:18:61:b3:
ab:21:90:2b:69:63:1c:ea:97:f8:90:54:e5:52:ae:9f:7f:9c:
b1:48:e3:a5:b2:a1:c7:e5:8d:fd:b3:65:1e:a1:12:e1:a4:7c:
76:96:da:22:df:75:d0:55:7b:64:6c:e7:65:6d:cb:36:6a:24:
ce:d2:80:a6:03:40:5c:a5:c8:e3:a4:8c:28:e5:5d:66:93:16:
00:15:8a:dc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDSO6tj3BRxnBKSC1xKu2Y33m/CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjkwMTAzMDVaFw0yNzAxMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQDk1ZWNjYTZlYWU5ZGVhOGE1ZTgyMzVkNzdkZjg2MGQ1ZDE0OGRkN2FhMWQ2
ZTUyNzUwNDIyZjBjYTFkZThhOTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6olqHCKnrKHPondjJAnbMhYIiBlm42eVphsE7MmWzVis8CCY29uQxaT3I0
5ryH2PhIx/YDA+pzZIAGmNCAH9LJbrGV5bvWNSkUuSCT05FucQOj/xHl17pzBCSl
mtbQ1eKY5HOwDRFBPuVWp3CWlI1Qcf8JUZArKoTMcObSPkI1jw+nwDASo5ASJYcA
R0tLK1RcBUCvAS4YD3gfbyPdq1WXlomw1o6pouMztWER/5dkobbcbBsnNI2j4wnF
IoTTm25QaNwo7Lmjtv0pgMhdtHEcc7DLOi7CEFCVKVo/UZx373hWYP3ksZGedx8M
ki88jnLRgWmxmLOMxTjbr5QWOy0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRdPm05
nsuwHSwDBI0vapbyCUNVRDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2RjZDY5YTItMjRjZS00NGU2LWFkYzktYjFhMTM0OWE0MjJhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DFg
MA0GCSqGSIb3DQEBCwUAA4IBAQCwrhnjc+3nlhAm3/mqM/kItT86n7+LmbdgA9ud
K1NjAXGs/70o/Za7DbCUHTh38kNwXTFDSTVdJ8ai0H2DiLWdtL1Gybsky4MkzpRs
yxaY/5i4Pt6b2aKXoOut/o+TiiaWTHTgrXkLQ17PVO3xV8HByeM2U9EdRSz071K3
VJZ60IsBzZT2hrxhgSRM5FlDNrdjWXwUEBDLbIcHrMFJbXR6N2b1hJIOM9fthBnK
JcraiTcYYbOrIZAraWMc6pf4kFTlUq6ff5yxSOOlsqHH5Y39s2UeoRLhpHx2ltoi
33XQVXtkbOdlbcs2aiTO0oCmA0BcpcjjpIwo5V1mkxYAFYrc
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:22:57 2026 by rpki-client