Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df8831dc-bb19-478d-b4c5-7bfa213f4a50.roa
File: df8831dc-bb19-478d-b4c5-7bfa213f4a50.roa (raw, json)
Hash identifier: ztHGw5e3GGqW03+GH8EVQksolETw4wXMRUF0HUGxvPk=
Subject key identifier: 07:BB:54:76:B7:5C:07:43:EF:2B:DC:16:4E:0C:B1:67:A6:87:73:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AD6BB29A30F8159BD18344720746A6C7FCE0A15
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df8831dc-bb19-478d-b4c5-7bfa213f4a50.roa
Signing time: Thu 29 Oct 2026 01:02:49 +0000
ROA not before: Thu 29 Oct 2026 01:02:49 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d6:bb:29:a3:0f:81:59:bd:18:34:47:20:74:6a:6c:7f:ce:0a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 01:02:49 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=c70b768946df4aeb14f9db86ee39712d9de77307fb15f566b23e65e222817e01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:63:88:95:10:b5:33:e9:59:53:3c:45:2f:
a8:38:da:57:e4:10:e8:b3:17:89:90:dd:bf:c9:d5:
2b:35:a6:d9:af:f8:cd:8c:49:82:d5:e2:c7:d8:65:
a6:88:36:ce:f0:0c:df:da:65:01:07:82:25:ef:e4:
56:35:1e:53:28:6b:68:30:37:66:c4:89:37:1f:4c:
b6:35:28:15:80:2f:43:03:68:be:2c:2c:82:7c:fb:
54:14:71:5a:53:d1:96:00:8d:07:fa:aa:ee:28:62:
56:18:8b:60:f5:18:de:de:f9:73:3b:f1:43:74:09:
eb:16:d3:82:68:79:6a:cb:5f:73:06:74:9f:e7:b9:
a6:bc:61:0a:a9:df:94:57:90:24:6c:3a:81:c2:8a:
1e:fc:ae:c9:0b:2b:4f:94:d6:09:82:3e:24:23:ad:
81:1c:cf:c3:7a:f8:51:b4:2d:a8:ca:78:24:44:f0:
1c:f2:c7:8f:e4:f1:68:6b:fd:98:0a:0b:76:1e:ff:
50:88:bc:8d:52:1a:e2:cf:53:13:d9:9b:87:c5:45:
89:b5:de:3c:cd:8d:72:42:92:47:c4:b9:4b:88:b4:
23:77:cd:14:bb:5b:62:c7:02:4e:7b:ac:16:93:a7:
19:57:d4:6c:32:b5:fd:b4:38:4c:e7:10:50:6f:dd:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BB:54:76:B7:5C:07:43:EF:2B:DC:16:4E:0C:B1:67:A6:87:73:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df8831dc-bb19-478d-b4c5-7bfa213f4a50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:800::/40
Signature Algorithm: sha256WithRSAEncryption
20:ae:62:f7:09:9f:53:f0:66:6a:40:1c:41:f5:3f:f2:0c:06:
35:cd:72:99:aa:85:c1:fa:8f:9f:f7:5e:b9:ef:5c:ef:a3:a6:
2c:bc:f5:5f:5d:3e:01:b0:11:ec:48:36:5d:81:ec:ac:a9:51:
57:4a:8d:96:38:ff:72:a5:01:35:eb:71:65:a5:c5:e2:7e:53:
23:4d:d2:49:d0:49:7a:a9:32:48:18:06:45:13:c4:e3:82:c0:
fb:d7:9f:83:40:f5:8e:9f:f0:d8:61:93:d0:92:70:8f:58:1e:
2a:c0:88:19:2a:bc:68:8d:1f:cb:2b:e0:88:ae:14:2c:58:c2:
49:ac:be:8f:54:32:f0:3d:cd:0d:6a:cf:b4:47:6a:8c:1b:6c:
72:6c:e1:a5:25:40:8c:a3:e5:c0:db:c4:2a:64:91:72:f2:68:
69:a6:03:1f:4e:8a:62:73:c6:26:2a:9b:6e:cf:05:f9:3c:26:
5d:a4:05:81:e3:29:cc:5b:b8:b4:30:eb:81:81:7f:d4:10:6e:
92:ce:a8:ae:44:f1:64:32:a8:7b:29:9a:de:ab:4d:80:90:8f:
44:63:4b:d7:8a:0a:5b:6b:4d:61:d6:04:a2:e2:5f:b7:21:9a:
0b:66:91:3d:1a:6e:a7:3f:92:08:ba:0b:b8:af:f2:bf:7f:07:
a6:bc:d2:df
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWta7KaMPgVm9GDRHIHRqbH/OChUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjkwMTAyNDlaFw0yNzAxMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQGM3MGI3Njg5NDZkZjRhZWIxNGY5ZGI4NmVlMzk3MTJkOWRlNzczMDdmYjE1
ZjU2NmIyM2U2NWUyMjI4MTdlMDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALS3Y4iVELUz6VlTPEUvqDjaV+QQ6LMXiZDdv8nVKzWm2a/4zYxJgtXix9hl
pog2zvAM39plAQeCJe/kVjUeUyhraDA3ZsSJNx9MtjUoFYAvQwNoviwsgnz7VBRx
WlPRlgCNB/qq7ihiVhiLYPUY3t75czvxQ3QJ6xbTgmh5astfcwZ0n+e5prxhCqnf
lFeQJGw6gcKKHvyuyQsrT5TWCYI+JCOtgRzPw3r4UbQtqMp4JETwHPLHj+TxaGv9
mAoLdh7/UIi8jVIa4s9TE9mbh8VFibXePM2NckKSR8S5S4i0I3fNFLtbYscCTnus
FpOnGVfUbDK1/bQ4TOcQUG/dqqMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQHu1R2
t1wHQ+8r3BZODLFnpodzUDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGY4ODMxZGMtYmIxOS00NzhkLWI0YzUtN2JmYTIxM2Y0YTUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GgI
MA0GCSqGSIb3DQEBCwUAA4IBAQAgrmL3CZ9T8GZqQBxB9T/yDAY1zXKZqoXB+o+f
916571zvo6YsvPVfXT4BsBHsSDZdgeysqVFXSo2WOP9ypQE163FlpcXiflMjTdJJ
0El6qTJIGAZFE8TjgsD715+DQPWOn/DYYZPQknCPWB4qwIgZKrxojR/LK+CIrhQs
WMJJrL6PVDLwPc0Nas+0R2qMG2xybOGlJUCMo+XA28QqZJFy8mhppgMfTopic8Ym
KptuzwX5PCZdpAWB4ynMW7i0MOuBgX/UEG6SzqiuRPFkMqh7KZreq02AkI9EY0vX
igpba01h1gSi4l+3IZoLZpE9Gm6nP5IIugu4r/K/fwemvNLf
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:26:18 2026 by rpki-client