Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3161346-1da7-46cb-b4e0-b85303f626b3.roa
File: d3161346-1da7-46cb-b4e0-b85303f626b3.roa (raw, json)
Hash identifier: 3E2Zi+UxOpjrqsWRpAd/G4lDPCbCbE/qt5LFVSgoKXE=
Subject key identifier: 72:A5:DA:D6:86:C0:F8:CB:B1:EA:97:B5:15:01:9C:29:4F:DA:24:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59BE623E1DBA293AF99E45C6635629B29452FFD4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3161346-1da7-46cb-b4e0-b85303f626b3.roa
Signing time: Thu 08 Oct 2026 17:24:37 +0000
ROA not before: Thu 08 Oct 2026 17:24:37 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d060:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:be:62:3e:1d:ba:29:3a:f9:9e:45:c6:63:56:29:b2:94:52:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 8 17:24:37 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=959dc893b4a365214b98a18fbd7b17230350234cd5cd6ec19da115ccc5e2e34a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:cd:39:19:45:e4:70:b1:71:dc:20:5e:a5:
c1:55:6c:f1:ea:61:3c:2c:ee:05:f8:57:4e:c2:f0:
29:9c:98:28:16:77:88:a0:ac:8c:16:02:91:1c:5e:
27:aa:23:a2:6d:2d:56:a5:f8:27:96:40:65:20:43:
e4:fd:b9:bf:91:f5:1c:23:0d:ae:7b:47:71:1f:04:
c7:ef:fd:51:a3:c2:8d:dd:a5:0b:1c:10:68:b4:66:
dc:56:91:ac:6b:a6:0e:ce:92:ff:02:f9:8b:ff:41:
fe:b2:4d:c0:0c:0c:d2:ee:df:96:72:4e:73:ca:2d:
65:08:70:87:58:6b:d0:3f:02:13:b3:d0:b9:56:05:
b3:0b:cd:d7:40:31:08:92:0e:75:55:74:c8:35:15:
db:c6:62:9a:cd:25:db:a3:07:f6:81:d6:89:cd:62:
04:d6:5b:c6:cc:e6:18:c3:8c:0f:12:5e:91:a1:c5:
b5:96:ed:ee:8d:33:e8:b1:bb:ad:1d:65:6e:38:9b:
1d:1d:f9:d4:61:28:6b:21:3c:f0:84:d7:ce:9d:90:
93:9b:25:8a:91:0e:00:c5:39:93:78:4a:73:16:2d:
de:e0:ac:54:27:3e:65:44:02:f2:ee:73:63:6d:f0:
6b:43:af:f5:cf:e0:e2:22:ee:ea:50:fe:57:e2:b8:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:DA:D6:86:C0:F8:CB:B1:EA:97:B5:15:01:9C:29:4F:DA:24:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3161346-1da7-46cb-b4e0-b85303f626b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d060:a000::/40
Signature Algorithm: sha256WithRSAEncryption
83:ff:81:ad:e8:ff:d9:33:6b:9c:89:23:dc:f2:4b:e3:96:b5:
93:d2:8a:dd:2f:17:13:bf:86:fb:49:90:66:91:8b:bf:cf:a4:
cb:a2:84:3b:13:a8:68:5f:85:5f:32:3d:8e:5f:70:d3:c9:9f:
21:19:b7:35:83:80:c7:bf:23:e0:82:16:4d:cc:95:fd:2e:4a:
61:8c:43:b9:49:9f:cc:2b:2d:82:5c:a9:d0:59:ac:5d:41:52:
e8:7e:fa:da:53:cd:c1:c4:9c:21:d2:b2:35:14:2d:c6:ab:7e:
fc:69:f3:02:a4:c6:82:2c:96:f0:9e:07:0e:dd:3b:91:a6:f3:
94:66:31:66:7c:3b:94:fa:6d:ff:b8:4e:e9:a3:98:c6:74:64:
35:c4:e2:17:ec:63:3d:dc:1a:f3:6a:3e:c9:dd:d9:a8:af:0d:
95:06:86:cd:b4:69:4b:1a:21:bf:e5:f2:9d:da:b9:79:3e:b7:
a4:d9:d9:6b:d6:fb:80:34:c6:82:6d:40:69:c8:49:f4:a7:6e:
58:33:52:ca:9c:21:9c:14:8d:a2:25:dc:2d:13:2a:56:93:db:
f9:dd:51:88:e7:c0:25:23:f2:f7:b7:50:72:53:14:c2:6f:34:
1e:45:aa:02:54:e0:ad:c1:a1:b8:b7:9c:02:76:80:af:55:57:
da:59:1b:7b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWb5iPh26KTr5nkXGY1YpspRS/9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDgxNzI0MzdaFw0yNzAxMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDk1OWRjODkzYjRhMzY1MjE0Yjk4YTE4ZmJkN2IxNzIzMDM1MDIzNGNkNWNk
NmVjMTlkYTExNWNjYzVlMmUzNGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALUzzTkZReRwsXHcIF6lwVVs8ephPCzuBfhXTsLwKZyYKBZ3iKCsjBYCkRxe
J6ojom0tVqX4J5ZAZSBD5P25v5H1HCMNrntHcR8Ex+/9UaPCjd2lCxwQaLRm3FaR
rGumDs6S/wL5i/9B/rJNwAwM0u7flnJOc8otZQhwh1hr0D8CE7PQuVYFswvN10Ax
CJIOdVV0yDUV28Zims0l26MH9oHWic1iBNZbxszmGMOMDxJekaHFtZbt7o0z6LG7
rR1lbjibHR351GEoayE88ITXzp2Qk5slipEOAMU5k3hKcxYt3uCsVCc+ZUQC8u5z
Y23wa0Ov9c/g4iLu6lD+V+K49OkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRypdrW
hsD4y7Hql7UVAZwpT9okVTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDMxNjEzNDYtMWRhNy00NmNiLWI0ZTAtYjg1MzAzZjYyNmIzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GCg
MA0GCSqGSIb3DQEBCwUAA4IBAQCD/4Gt6P/ZM2uciSPc8kvjlrWT0ordLxcTv4b7
SZBmkYu/z6TLooQ7E6hoX4VfMj2OX3DTyZ8hGbc1g4DHvyPgghZNzJX9LkphjEO5
SZ/MKy2CXKnQWaxdQVLofvraU83BxJwh0rI1FC3Gq378afMCpMaCLJbwngcO3TuR
pvOUZjFmfDuU+m3/uE7po5jGdGQ1xOIX7GM93Brzaj7J3dmorw2VBobNtGlLGiG/
5fKd2rl5Prek2dlr1vuANMaCbUBpyEn0p25YM1LKnCGcFI2iJdwtEypWk9v53VGI
58AlI/L3t1ByUxTCbzQeRaoCVOCtwaG4t5wCdoCvVVfaWRt7
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:33:12 2026 by rpki-client