Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb69b216-60d5-4f56-b2b8-3401f331f31e.roa
File: eb69b216-60d5-4f56-b2b8-3401f331f31e.roa (raw, json)
Hash identifier: Q/FR3+uGbwmiGcYDnCEnk90IzlPCaiflkDjnZD95BvE=
Subject key identifier: 83:C4:E9:C3:F6:08:F9:86:1E:7D:B2:DA:20:1D:B7:1C:B5:94:28:2B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CFBB1EA0A85D1560407C2AC0CB44A838C7F8C8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb69b216-60d5-4f56-b2b8-3401f331f31e.roa
Signing time: Mon 26 Oct 2026 05:10:18 +0000
ROA not before: Mon 26 Oct 2026 05:10:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fb:b1:ea:0a:85:d1:56:04:07:c2:ac:0c:b4:4a:83:8c:7f:8c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e19cbc9bf286d1886c65c74f1a24e8c2bcab6cea1a27d7465e95223833c6572f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:f8:31:a9:93:1f:5b:55:67:00:f8:39:32:
4a:53:90:a8:5e:b0:8c:c3:47:16:2a:0d:6a:1c:8c:
49:b9:bf:50:d5:6b:77:8a:b9:95:a7:9f:f3:30:2b:
16:20:c9:42:9c:5d:43:f4:98:bf:5a:0e:ff:f3:be:
1c:b2:33:1a:0a:d1:60:df:fc:e8:ec:57:7d:57:25:
9a:66:77:1d:3c:c6:97:b5:3d:71:9a:3f:3a:b2:13:
34:93:07:10:85:86:f1:13:45:30:07:a0:45:5e:ab:
73:e7:a8:ca:07:2b:4a:9a:4f:96:3a:80:c8:7b:73:
13:88:73:8d:e3:02:58:27:7e:cb:e7:b3:8f:d7:a7:
e2:94:fc:b2:d7:33:21:83:31:ce:1b:ab:e9:4f:36:
2a:c0:ab:50:3e:09:ca:82:f2:d4:5a:91:fa:a3:0f:
f8:76:cb:a6:79:3e:76:10:51:03:eb:8e:f1:80:ce:
6a:cb:b0:8e:08:b2:b6:be:31:82:8f:86:2e:81:7b:
60:fe:29:1e:3a:bb:47:f1:90:da:77:10:d2:13:55:
47:c2:fa:de:80:69:d0:e4:ea:9f:2f:1d:04:72:2e:
1c:55:5a:22:14:0a:38:04:9f:5f:1d:79:9c:67:7b:
9a:1a:75:8b:6d:dd:87:da:46:42:07:9e:b0:62:b0:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C4:E9:C3:F6:08:F9:86:1E:7D:B2:DA:20:1D:B7:1C:B5:94:28:2B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb69b216-60d5-4f56-b2b8-3401f331f31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
30:ea:0c:6d:10:db:a2:0e:48:60:5d:b4:a1:e0:7d:84:bf:31:
48:a2:48:84:ce:28:e6:ed:39:9c:4a:d0:52:2b:67:67:b6:4b:
f8:65:eb:40:c6:ab:b9:d4:c7:a8:5d:d7:09:11:00:8b:1e:10:
b8:56:0c:34:eb:0a:95:7e:70:1b:39:03:1c:06:44:b1:e4:fa:
0d:3f:ea:47:55:da:85:d2:c0:01:16:92:3e:55:dd:4f:26:87:
03:b6:13:ce:1a:e4:30:c7:9d:37:06:8f:e2:ff:29:b4:29:10:
53:d8:8e:fe:82:a9:48:00:cc:1d:45:0e:b6:c3:c7:67:33:1a:
f6:05:a2:04:74:45:fc:87:dc:61:0e:10:f8:c1:a2:9c:ca:53:
79:da:43:52:ad:23:8d:49:f3:ae:43:cb:69:63:1e:bc:75:7b:
e1:5c:44:f1:42:52:8c:73:e1:2f:07:06:4c:a9:89:f9:07:b5:
f2:5a:e1:db:98:ce:ad:ce:7a:bb:f1:a2:e6:18:fa:25:f7:33:
3d:34:f2:be:a6:7d:fd:2e:41:79:f6:f1:9e:15:b4:02:45:5b:
08:cc:ff:ef:93:11:9e:b1:e6:6d:a3:dd:82:3c:4b:9b:5c:3e:
d5:ff:22:85:0f:ae:32:2d:91:df:d2:34:e3:73:75:23:d3:8b:
4f:16:81:9f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbPux6gqF0VYEB8KsDLRKg4x/jIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTEwMThaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGUxOWNiYzliZjI4NmQxODg2YzY1Yzc0ZjFhMjRlOGMyYmNhYjZjZWExYTI3
ZDc0NjVlOTUyMjM4MzNjNjU3MmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKOg+DGpkx9bVWcA+DkySlOQqF6wjMNHFioNahyMSbm/UNVrd4q5laef8zAr
FiDJQpxdQ/SYv1oO//O+HLIzGgrRYN/86OxXfVclmmZ3HTzGl7U9cZo/OrITNJMH
EIWG8RNFMAegRV6rc+eoygcrSppPljqAyHtzE4hzjeMCWCd+y+ezj9en4pT8stcz
IYMxzhur6U82KsCrUD4JyoLy1FqR+qMP+HbLpnk+dhBRA+uO8YDOasuwjgiytr4x
go+GLoF7YP4pHjq7R/GQ2ncQ0hNVR8L63oBp0OTqny8dBHIuHFVaIhQKOASfXx15
nGd7mhp1i23dh9pGQgeesGKwceUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSDxOnD
9gj5hh59stogHbcctZQoKzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWI2OWIyMTYtNjBkNS00ZjU2LWIyYjgtMzQwMWYzMzFmMzFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HpA
MA0GCSqGSIb3DQEBCwUAA4IBAQAw6gxtENuiDkhgXbSh4H2EvzFIokiEzijm7Tmc
StBSK2dntkv4ZetAxqu51MeoXdcJEQCLHhC4Vgw06wqVfnAbOQMcBkSx5PoNP+pH
VdqF0sABFpI+Vd1PJocDthPOGuQwx503Bo/i/ym0KRBT2I7+gqlIAMwdRQ62w8dn
Mxr2BaIEdEX8h9xhDhD4waKcylN52kNSrSONSfOuQ8tpYx68dXvhXETxQlKMc+Ev
BwZMqYn5B7XyWuHbmM6tznq78aLmGPol9zM9NPK+pn39LkF59vGeFbQCRVsIzP/v
kxGeseZto92CPEubXD7V/yKFD64yLZHf0jTjc3Uj04tPFoGf
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:33:15 2026 by rpki-client