Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
File: e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa (raw, json)
Hash identifier: N4vVWMFUXpKSVzBKZeB5PWYh5qqSsk3kmJwbdsjKNXU=
Subject key identifier: 36:67:28:5D:6B:20:7C:BB:09:62:B0:71:DD:D3:D6:E6:94:18:BD:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AA98D6BDF86387AE5DE79A9B85CA1FB041074D6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
Signing time: Thu 15 Oct 2026 03:20:05 +0000
ROA not before: Thu 15 Oct 2026 03:20:05 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a9:8d:6b:df:86:38:7a:e5:de:79:a9:b8:5c:a1:fb:04:10:74:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 15 03:20:05 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=c43043fcc3e03c1f134b5d4764215feffff6c410926647617d77f12cad878153, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:c7:a9:29:04:4f:66:14:ac:88:ca:84:8c:
2a:15:3d:81:37:89:ab:4d:ab:b1:5d:ea:5d:ae:21:
27:70:4b:b9:22:d1:7a:9d:83:4d:f9:90:bc:d2:fb:
93:fa:24:cf:49:19:f0:51:e4:da:4d:da:8c:d9:d8:
e7:ec:df:46:06:b8:db:30:69:77:c3:c0:68:ac:cd:
49:d2:ed:8f:a9:db:78:72:2f:da:74:fd:74:65:25:
15:df:8a:f1:e1:66:af:a3:e6:e5:4f:3c:91:ee:53:
ce:dc:8d:0f:18:14:49:fa:44:29:51:cd:71:06:71:
2e:eb:19:d3:90:6e:88:cf:0f:ef:81:3e:6b:73:40:
dc:15:e5:a4:ef:d9:06:d7:ed:5b:52:cb:06:75:ca:
6a:60:31:dc:ea:39:7b:33:c1:d3:02:f2:43:64:d2:
ca:63:62:c4:5b:86:70:77:55:c4:e1:84:01:03:a2:
3f:04:39:31:cc:5c:01:01:a0:06:81:75:c4:cd:57:
4c:63:0e:f4:f0:f4:6a:06:dd:f7:49:10:5e:4a:c9:
e0:2d:a0:7d:bf:8b:d1:f3:77:28:c5:22:4d:3c:78:
82:4c:47:82:04:f6:e8:2e:18:33:c7:b1:b4:1d:7f:
bd:fb:e3:c4:39:e3:18:15:bd:cd:1d:4c:5c:67:07:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:67:28:5D:6B:20:7C:BB:09:62:B0:71:DD:D3:D6:E6:94:18:BD:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e4db6273-cb2c-44bf-aa41-f7252d8c56b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:880::/48
Signature Algorithm: sha256WithRSAEncryption
4a:57:0b:8e:c3:60:a2:23:b9:16:15:48:eb:df:cf:77:fd:81:
9c:51:2e:b9:61:e9:26:e4:75:11:f1:f3:5c:41:1c:06:49:fa:
d9:c8:1f:1c:ca:24:67:09:03:08:41:2f:87:9c:74:6d:c9:cb:
72:71:6b:93:09:a0:81:46:3e:0e:31:63:75:e7:26:5b:31:08:
4c:0e:d0:ac:0b:22:fe:50:59:52:dd:6b:80:35:73:f6:d3:23:
00:41:de:9d:1f:fb:00:ef:58:84:fd:3d:c9:d8:fb:02:46:fa:
7e:db:9f:be:20:6b:60:41:41:96:7c:ac:6a:8e:8e:3a:62:f4:
d9:d3:11:9f:34:96:36:75:5e:e9:7b:b2:03:6f:9b:7f:3f:f5:
ff:32:c2:34:9f:99:fa:5e:ae:e3:3a:89:b7:8f:31:88:44:cc:
28:e0:23:09:13:d7:f6:87:e9:fd:79:c5:90:c0:d5:8e:bf:da:
ef:79:bc:c3:6e:09:95:af:9a:36:49:d4:31:5a:44:cb:3b:73:
56:a8:01:93:ba:10:0f:96:73:20:c5:26:0c:7f:6d:11:33:3d:
35:24:01:f2:81:f7:7e:bd:1f:03:55:55:36:dc:34:f3:fb:dd:
ba:9a:82:0e:cb:a5:d9:70:37:4d:ec:b2:e8:78:db:74:9d:73:
6e:8b:9d:7d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUaqmNa9+GOHrl3nmpuFyh+wQQdNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTUwMzIwMDVaFw0yNzAxMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQGM0MzA0M2ZjYzNlMDNjMWYxMzRiNWQ0NzY0MjE1ZmVmZmZmNmM0MTA5MjY2
NDc2MTdkNzdmMTJjYWQ4NzgxNTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANeKx6kpBE9mFKyIyoSMKhU9gTeJq02rsV3qXa4hJ3BLuSLRep2DTfmQvNL7
k/okz0kZ8FHk2k3ajNnY5+zfRga42zBpd8PAaKzNSdLtj6nbeHIv2nT9dGUlFd+K
8eFmr6Pm5U88ke5TztyNDxgUSfpEKVHNcQZxLusZ05BuiM8P74E+a3NA3BXlpO/Z
BtftW1LLBnXKamAx3Oo5ezPB0wLyQ2TSymNixFuGcHdVxOGEAQOiPwQ5McxcAQGg
BoF1xM1XTGMO9PD0agbd90kQXkrJ4C2gfb+L0fN3KMUiTTx4gkxHggT26C4YM8ex
tB1/vfvjxDnjGBW9zR1MXGcHj5cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ2Zyhd
ayB8uwlisHHd09bmlBi9hzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTRkYjYyNzMtY2IyYy00NGJmLWFhNDEtZjcyNTJkOGM1NmIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAI
gDANBgkqhkiG9w0BAQsFAAOCAQEASlcLjsNgoiO5FhVI69/Pd/2BnFEuuWHpJuR1
EfHzXEEcBkn62cgfHMokZwkDCEEvh5x0bcnLcnFrkwmggUY+DjFjdecmWzEITA7Q
rAsi/lBZUt1rgDVz9tMjAEHenR/7AO9YhP09ydj7Akb6ftufviBrYEFBlnysao6O
OmL02dMRnzSWNnVe6XuyA2+bfz/1/zLCNJ+Z+l6u4zqJt48xiETMKOAjCRPX9ofp
/XnFkMDVjr/a73m8w24Jla+aNknUMVpEyztzVqgBk7oQD5ZzIMUmDH9tETM9NSQB
8oH3fr0fA1VVNtw08/vdupqCDsul2XA3Teyy6HjbdJ1zboudfQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:38 2026 by rpki-client