Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ecd857ec-bcff-41df-b23a-19087481169e.roa
File: ecd857ec-bcff-41df-b23a-19087481169e.roa (raw, json)
Hash identifier: zhdH/qXgDj0kSYhSoFPhvUzpBtcouvv2mJF+41jYC4U=
Subject key identifier: 5D:4B:DA:B9:8C:37:78:50:E0:90:A8:84:04:00:8F:19:81:E8:91:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69EAECAC4D324AF0EE35259420002E4D003DED1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ecd857ec-bcff-41df-b23a-19087481169e.roa
Signing time: Mon 26 Oct 2026 04:50:41 +0000
ROA not before: Mon 26 Oct 2026 04:50:41 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ea:ec:ac:4d:32:4a:f0:ee:35:25:94:20:00:2e:4d:00:3d:ed:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:50:41 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9f320ad96fbb0552ab10fa8df3707a55bc67345c5061d203b9f620d86dd7f027, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:b7:94:6f:62:e7:e1:8a:6a:d7:f4:20:e2:
e4:4e:9c:39:36:ce:8a:be:87:43:8f:70:a3:5c:1c:
9a:24:dd:8d:26:9d:e8:ac:7d:62:9b:14:da:a4:92:
ed:dd:ca:36:67:7c:b1:e3:45:c4:0d:ad:82:e5:c9:
ea:ab:f0:51:4c:aa:c1:d6:7a:56:6d:f9:62:b0:36:
da:c6:4c:f2:9c:64:81:93:77:e1:60:1e:ac:26:00:
c5:ab:3e:e3:81:3b:f7:04:83:e7:39:a9:4e:a2:54:
28:11:e8:81:ef:1a:42:03:08:2e:d8:d5:c3:d0:a2:
04:90:8e:14:34:60:cc:05:7d:c2:29:23:e9:ed:19:
53:de:21:c3:f7:c9:6f:04:8c:86:47:6b:aa:fd:27:
56:75:3a:22:6c:4f:a8:e6:ec:4a:6a:1a:53:d0:ae:
54:08:1b:c0:84:5d:9e:2c:06:d4:e2:6c:1b:d7:15:
1e:07:a7:74:b6:30:09:2c:69:9a:c6:26:ef:dd:fe:
75:a4:99:60:53:0c:8e:bb:77:61:f5:80:3d:32:cd:
b6:53:fc:78:75:ea:6f:54:77:f0:1e:18:ed:48:59:
85:4c:c4:f3:a7:7c:49:6d:ba:3e:ca:f2:c5:01:bd:
91:e9:a8:2b:49:a7:08:a4:81:fb:82:ed:12:78:21:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:DA:B9:8C:37:78:50:E0:90:A8:84:04:00:8F:19:81:E8:91:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ecd857ec-bcff-41df-b23a-19087481169e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:26:06:37:db:75:1c:bb:43:d7:a2:e7:43:60:0d:0d:4c:a6:
5d:6d:0f:45:4d:92:b4:9f:e2:83:bd:4a:bd:e6:d4:79:bd:4a:
9b:27:9a:5a:1f:1a:99:55:41:e5:95:46:d0:44:d7:6d:56:35:
c3:2d:3a:09:cf:7a:b8:5a:16:c0:c6:76:d0:ba:8d:5c:6a:57:
d5:be:0e:45:09:91:b5:c4:af:e3:8f:36:45:61:46:04:92:2a:
c9:c2:5e:d3:2e:fd:37:c5:25:4b:0c:e6:bd:72:4a:6a:07:62:
78:73:d7:cd:7a:32:0c:5d:11:38:df:1a:85:cb:af:27:3b:04:
d7:de:df:fd:35:08:4d:b3:4d:c7:bc:0c:93:5c:88:fd:43:19:
54:13:ca:9d:34:b2:79:90:11:52:db:31:14:2b:85:a3:35:3b:
5b:c9:23:8e:c8:ab:41:b4:e2:c0:31:78:68:2f:24:ba:b6:d5:
86:55:32:6f:c6:c2:8d:ce:5a:3b:5c:4e:ad:a0:73:5a:7e:ed:
cc:7a:ee:ae:14:35:20:93:bc:bd:2d:25:d4:d5:b1:9e:f4:14:
ee:45:08:9f:9a:36:fa:c2:e3:1a:e9:b1:e7:fd:91:c6:19:60:
69:e6:2c:fd:f9:df:96:0f:ca:ef:d6:20:ac:be:e8:f6:6a:54:
ce:58:45:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaersrE0ySvDuNSWUIAAuTQA97R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNDUwNDFaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDlmMzIwYWQ5NmZiYjA1NTJhYjEwZmE4ZGYzNzA3YTU1YmM2NzM0NWM1MDYx
ZDIwM2I5ZjYyMGQ4NmRkN2YwMjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhOt5RvYufhimrX9CDi5E6cOTbOir6HQ49wo1wcmiTdjSad6Kx9YpsU2qSS
7d3KNmd8seNFxA2tguXJ6qvwUUyqwdZ6Vm35YrA22sZM8pxkgZN34WAerCYAxas+
44E79wSD5zmpTqJUKBHoge8aQgMILtjVw9CiBJCOFDRgzAV9wikj6e0ZU94hw/fJ
bwSMhkdrqv0nVnU6ImxPqObsSmoaU9CuVAgbwIRdniwG1OJsG9cVHgendLYwCSxp
msYm793+daSZYFMMjrt3YfWAPTLNtlP8eHXqb1R38B4Y7UhZhUzE86d8SW26Psry
xQG9kemoK0mnCKSB+4LtEngh88ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRdS9q5
jDd4UOCQqIQEAI8ZgeiR9DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWNkODU3ZWMtYmNmZi00MWRmLWIyM2EtMTkwODc0ODExNjllLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQDFJgY323Ucu0PXoudDYA0NTKZdbQ9FTZK0n+KD
vUq95tR5vUqbJ5paHxqZVUHllUbQRNdtVjXDLToJz3q4WhbAxnbQuo1calfVvg5F
CZG1xK/jjzZFYUYEkirJwl7TLv03xSVLDOa9ckpqB2J4c9fNejIMXRE43xqFy68n
OwTX3t/9NQhNs03HvAyTXIj9QxlUE8qdNLJ5kBFS2zEUK4WjNTtbySOOyKtBtOLA
MXhoLyS6ttWGVTJvxsKNzlo7XE6toHNafu3Meu6uFDUgk7y9LSXU1bGe9BTuRQif
mjb6wuMa6bHn/ZHGGWBp5iz9+d+WD8rv1iCsvuj2alTOWEVB
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:45:40 2026 by rpki-client