Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d31e4b1b-0fa9-4549-a6fa-3a6eb94eef2c.roa
File: d31e4b1b-0fa9-4549-a6fa-3a6eb94eef2c.roa (raw, json)
Hash identifier: KwJChAJIr2w9D9Yjc4H7eCQzRkIS97jIBLUjsefjxuI=
Subject key identifier: FE:8A:41:00:EA:FA:81:DB:A0:D3:4E:66:9C:28:CE:AB:7E:D2:D8:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61CC2A46579B7BDC8CE03692EAC8CD9F806B6519
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d31e4b1b-0fa9-4549-a6fa-3a6eb94eef2c.roa
Signing time: Sun 11 Oct 2026 15:10:10 +0000
ROA not before: Sun 11 Oct 2026 15:10:10 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:840::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:cc:2a:46:57:9b:7b:dc:8c:e0:36:92:ea:c8:cd:9f:80:6b:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 11 15:10:10 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=d46ff3f1ad853a6f6b0f825876d01290754b01ff7c30189da66ef9bb71a8a686, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f0:fb:f8:c1:a5:c6:74:9a:8c:c4:23:64:04:
6a:20:5a:b4:24:a6:7a:b7:aa:8b:6b:d6:a1:fa:c4:
f9:81:95:c4:e0:eb:d8:cd:72:3b:03:72:8a:3c:e8:
2f:ba:5b:c4:f7:1e:e6:7b:c8:96:13:06:ed:b1:f8:
c0:ef:10:89:a7:3d:8d:87:31:ac:2e:39:b3:b9:a3:
93:0e:52:73:a8:9e:8b:98:57:b2:37:56:b0:07:c3:
4e:a4:c9:5c:c5:59:de:0d:50:38:58:54:03:cd:08:
b7:ae:4c:1b:58:93:c0:2e:39:62:f6:b9:c4:64:ec:
f3:94:f2:f2:f0:e3:c2:39:f6:cc:b6:91:c7:a5:6d:
b4:c7:22:c4:32:81:58:62:1f:1d:4a:df:c1:8a:5b:
33:1b:71:4b:96:0d:68:f7:b4:36:0b:31:1e:5d:5e:
f5:0d:3b:76:cc:2c:a5:e5:3b:91:d2:e6:02:10:e6:
35:6c:93:52:40:49:fb:ae:f1:29:e5:8d:e4:3a:76:
ae:cf:9e:0c:27:30:6c:6d:f4:0c:45:05:48:45:bc:
d6:1b:ce:e3:35:51:57:a3:b0:fe:43:dc:88:3d:cd:
10:d6:15:c9:88:88:1f:8a:68:7f:f9:74:3a:f9:65:
18:ae:72:c8:ef:11:e2:81:19:04:59:2a:cb:ad:93:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:41:00:EA:FA:81:DB:A0:D3:4E:66:9C:28:CE:AB:7E:D2:D8:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d31e4b1b-0fa9-4549-a6fa-3a6eb94eef2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:840::/46
Signature Algorithm: sha256WithRSAEncryption
b4:07:45:5b:75:4b:26:0d:e2:1f:5d:c8:8b:fb:f8:83:f2:62:
30:8f:ad:dc:00:7b:5b:17:1a:b9:95:88:a9:3a:e7:bf:c4:1e:
35:13:06:a8:89:5f:a9:0a:87:9c:36:75:3e:a1:2f:d6:f3:49:
50:f2:ec:df:e1:af:ac:0e:73:52:37:d0:9b:8f:d1:a8:a8:e6:
10:a8:3c:39:c1:43:65:ad:ef:53:87:c0:68:15:f5:7c:aa:4a:
b6:80:78:78:22:09:43:13:30:01:5a:38:5e:fe:41:9c:b9:e4:
1c:a4:e1:cf:ee:65:22:eb:b2:32:28:78:91:a3:41:69:73:67:
fd:a5:92:45:4c:77:dd:b5:97:1c:a5:4e:67:1e:21:e8:fb:95:
5e:2f:d1:18:96:c4:6e:06:5d:15:18:ec:8e:5a:53:c6:a5:c4:
98:db:a8:fa:33:1d:63:0c:38:26:e0:bc:d8:7b:3c:ce:b1:91:
4d:7f:6e:b5:c0:12:3c:f2:a9:2f:1d:9f:26:96:38:dd:e0:c7:
33:c4:34:bf:a7:c0:8d:26:5a:75:b6:d1:2d:06:d7:5c:86:24:
fc:9f:f3:3a:ef:3a:c7:b9:d0:41:3a:ed:7b:4f:3a:72:a1:0f:
49:fd:d2:6a:8e:56:2d:4a:0b:fd:c9:82:ed:6f:a8:a0:4c:7e:
6f:63:60:30
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUYcwqRlebe9yM4DaS6sjNn4BrZRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTExNTEwMTBaFw0yNzAxMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ0NmZmM2YxYWQ4NTNhNmY2YjBmODI1ODc2ZDAxMjkwNzU0YjAxZmY3YzMw
MTg5ZGE2NmVmOWJiNzFhOGE2ODYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPTw+/jBpcZ0mozEI2QEaiBatCSmereqi2vWofrE+YGVxODr2M1yOwNyijzo
L7pbxPce5nvIlhMG7bH4wO8Qiac9jYcxrC45s7mjkw5Sc6iei5hXsjdWsAfDTqTJ
XMVZ3g1QOFhUA80It65MG1iTwC45Yva5xGTs85Ty8vDjwjn2zLaRx6VttMcixDKB
WGIfHUrfwYpbMxtxS5YNaPe0NgsxHl1e9Q07dswspeU7kdLmAhDmNWyTUkBJ+67x
KeWN5Dp2rs+eDCcwbG30DEUFSEW81hvO4zVRV6Ow/kPciD3NENYVyYiIH4pof/l0
OvllGK5yyO8R4oEZBFkqy62T2XECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT+ikEA
6vqB26DTTmacKM6rftLYizAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDMxZTRiMWItMGZhOS00NTQ5LWE2ZmEtM2E2ZWI5NGVlZjJjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HMI
QDANBgkqhkiG9w0BAQsFAAOCAQEAtAdFW3VLJg3iH13Ii/v4g/JiMI+t3AB7Wxca
uZWIqTrnv8QeNRMGqIlfqQqHnDZ1PqEv1vNJUPLs3+GvrA5zUjfQm4/RqKjmEKg8
OcFDZa3vU4fAaBX1fKpKtoB4eCIJQxMwAVo4Xv5BnLnkHKThz+5lIuuyMih4kaNB
aXNn/aWSRUx33bWXHKVOZx4h6PuVXi/RGJbEbgZdFRjsjlpTxqXEmNuo+jMdYww4
JuC82Hs8zrGRTX9utcASPPKpLx2fJpY43eDHM8Q0v6fAjSZadbbRLQbXXIYk/J/z
Ou86x7nQQTrte086cqEPSf3Sao5WLUoL/cmC7W+ooEx+b2NgMA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 18:46:57 2026 by rpki-client