Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4b6eaee-12a7-4a5f-8dc1-7ff775f5a967.roa
File: e4b6eaee-12a7-4a5f-8dc1-7ff775f5a967.roa (raw, json)
Hash identifier: gk1TsJqB06Fn1O/LyswPPColuWPqPTw+S33aEVh4Nqw=
Subject key identifier: A3:F5:03:92:1A:5E:EA:B6:EE:8B:FE:89:DD:C6:18:1F:92:42:C2:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D6C1F0E444F9C5F9D0A1E9043F088AE3E40905C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4b6eaee-12a7-4a5f-8dc1-7ff775f5a967.roa
Signing time: Fri 09 Oct 2026 01:30:36 +0000
ROA not before: Fri 09 Oct 2026 01:30:36 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6c:1f:0e:44:4f:9c:5f:9d:0a:1e:90:43:f0:88:ae:3e:40:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:36 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=7addb564be06520e66db4f1172f6becfa48b8006656ae79aa87cf741358bb919, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:de:e6:62:95:73:6e:d2:73:78:2f:9f:dc:
5e:6b:76:5e:a0:72:ed:70:e5:76:94:c5:ba:c4:33:
5d:0f:48:9d:a1:5e:6e:c1:52:c1:64:00:9a:c6:1d:
c5:bd:06:7c:7b:da:5c:69:15:2b:6e:ac:8c:c6:38:
d5:a7:dd:77:4a:e1:04:03:7d:a2:47:1a:b3:66:71:
86:e4:2d:84:a1:7b:9a:8a:b6:d5:a1:a6:de:f3:80:
0c:f4:2b:be:a4:83:11:b8:4c:2f:2c:24:9a:fd:b3:
23:0b:e6:3f:ac:14:c6:89:7f:7d:c7:e3:3d:ad:19:
09:dc:0c:ff:8d:bc:c4:5d:bf:ae:d3:49:f6:13:9c:
08:85:c2:21:2c:ac:0e:0d:cd:9b:5a:8c:b1:25:e0:
ab:92:d5:dd:87:8e:5d:bb:21:e1:e7:2b:08:55:70:
41:fe:b5:2d:dd:9f:55:80:fc:05:13:8a:d7:1e:bb:
4e:50:2a:a4:2a:05:1a:68:00:62:41:a0:58:f6:fc:
9b:37:a4:04:dc:d0:42:a3:35:b4:ae:cd:d0:e9:78:
71:d1:75:4a:09:48:d6:b2:dc:ff:22:21:e9:51:25:
9f:30:5a:3c:66:81:8c:01:69:ed:2c:a8:8f:e6:ff:
8b:97:75:7c:09:f0:d9:5d:41:38:a9:02:00:aa:23:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:03:92:1A:5E:EA:B6:EE:8B:FE:89:DD:C6:18:1F:92:42:C2:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4b6eaee-12a7-4a5f-8dc1-7ff775f5a967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:880::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ce:c4:db:1e:93:66:13:1e:ec:fa:51:ba:b8:69:5b:6e:68:
4f:d8:5e:75:6b:14:99:fc:95:2e:43:89:3c:71:1e:ef:82:d2:
b3:c9:2c:57:86:35:27:d1:ca:6c:f8:53:68:ce:b0:23:04:e3:
b2:b7:ff:5a:db:ca:53:2e:c7:e6:83:04:a6:b0:a2:eb:1a:5d:
cf:24:ca:e2:ca:e5:db:fc:6b:63:f6:89:52:e7:38:83:73:40:
ae:b3:fd:cd:08:b2:19:80:22:87:09:5d:68:b5:fd:eb:90:9e:
b7:03:64:d5:bf:17:91:a9:4d:fb:65:d1:1e:2b:aa:2f:1a:0f:
0a:5b:f4:72:b6:b2:6c:08:27:dd:8d:fd:b9:99:f0:0c:83:e8:
03:1f:37:6f:52:f9:fe:d8:28:c2:8e:16:8a:b6:01:30:ea:c4:
b5:5f:14:bc:07:1a:96:d9:45:00:bd:8b:f3:76:de:d3:d4:7b:
70:6d:3a:89:59:72:2b:be:6c:42:9c:d6:d9:1d:9e:fb:5e:87:
69:01:67:5b:d7:41:da:41:d3:85:d6:f0:f8:7a:22:a1:6d:7a:
23:17:f0:5a:f8:99:a0:5b:76:d7:55:3d:b3:07:ea:4c:7d:77:
f3:e6:6a:26:20:18:cc:87:7e:4f:01:90:51:a1:c4:ef:db:eb:
fc:e0:27:e1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbWwfDkRPnF+dCh6QQ/CIrj5AkFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMDkwMTMwMzZaFw0yNzAxMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDdhZGRiNTY0YmUwNjUyMGU2NmRiNGYxMTcyZjZiZWNmYTQ4YjgwMDY2NTZh
ZTc5YWE4N2NmNzQxMzU4YmI5MTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMUC3uZilXNu0nN4L5/cXmt2XqBy7XDldpTFusQzXQ9InaFebsFSwWQAmsYd
xb0GfHvaXGkVK26sjMY41afdd0rhBAN9okcas2ZxhuQthKF7moq21aGm3vOADPQr
vqSDEbhMLywkmv2zIwvmP6wUxol/fcfjPa0ZCdwM/428xF2/rtNJ9hOcCIXCISys
Dg3Nm1qMsSXgq5LV3YeOXbsh4ecrCFVwQf61Ld2fVYD8BROK1x67TlAqpCoFGmgA
YkGgWPb8mzekBNzQQqM1tK7N0Ol4cdF1SglI1rLc/yIh6VElnzBaPGaBjAFp7Syo
j+b/i5d1fAnw2V1BOKkCAKojGuMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSj9QOS
Gl7qtu6L/ondxhgfkkLCdTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTRiNmVhZWUtMTJhNy00YTVmLThkYzEtN2ZmNzc1ZjVhOTY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GoI
gDANBgkqhkiG9w0BAQsFAAOCAQEAb87E2x6TZhMe7PpRurhpW25oT9hedWsUmfyV
LkOJPHEe74LSs8ksV4Y1J9HKbPhTaM6wIwTjsrf/WtvKUy7H5oMEprCi6xpdzyTK
4srl2/xrY/aJUuc4g3NArrP9zQiyGYAihwldaLX965CetwNk1b8XkalN+2XRHiuq
LxoPClv0craybAgn3Y39uZnwDIPoAx83b1L5/tgowo4WirYBMOrEtV8UvAcaltlF
AL2L83be09R7cG06iVlyK75sQpzW2R2e+16HaQFnW9dB2kHThdbw+HoioW16Ixfw
WviZoFt211U9swfqTH138+ZqJiAYzId+TwGQUaHE79vr/OAn4Q==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:57 2026 by rpki-client