Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
File: ed0f44c7-c286-45c9-9156-5644f580ab41.roa (raw, json)
Hash identifier: 9G79T7qXDXd6dKiFnAJleVm5eNpiYy/+mH9mlcYopwA=
Subject key identifier: 56:7D:20:9B:EA:FF:46:F4:2E:4F:C1:51:F7:F2:3C:15:2B:D0:79:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06FA5661A82203095FEDA830B4E601D818EF33D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
Signing time: Mon 26 Oct 2026 05:10:07 +0000
ROA not before: Mon 26 Oct 2026 05:10:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fa:56:61:a8:22:03:09:5f:ed:a8:30:b4:e6:01:d8:18:ef:33:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=9fdb879bfdf5129de9a775513b3ba181b9e5613780fc6066515224d059cd26bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:58:30:55:91:cf:24:59:21:2b:13:de:d9:
9b:6a:ed:18:91:89:c4:c0:68:ea:0d:94:04:33:8c:
5a:3d:42:d1:5a:af:51:25:45:d6:ad:3b:ca:32:2d:
c8:55:77:d3:fe:bb:41:ce:7c:94:b7:ff:b1:2d:2a:
4f:ea:f5:f5:29:ab:c7:12:9d:34:69:83:e5:55:ea:
bb:c7:5a:47:65:3f:d4:5e:9d:f5:4d:61:b8:88:dd:
c1:bb:b4:d1:92:24:d4:65:e5:90:a8:dc:84:e0:d4:
a6:1d:4f:68:50:a1:d1:d5:15:83:3a:81:1d:56:d9:
fb:4a:00:b5:ef:17:c0:c9:33:5a:cd:6d:6b:91:a1:
40:d0:e7:d4:91:c6:f5:50:20:79:28:05:0a:96:a9:
80:f3:ed:3d:8d:2a:3f:b0:f3:51:4e:3f:99:76:98:
d1:4d:91:96:8c:96:4a:a7:29:46:52:7b:35:75:d9:
24:b9:6c:4a:61:56:c5:a6:c4:c8:f4:97:51:37:50:
fc:83:0d:9a:91:d9:e8:49:f4:b1:31:28:d4:c7:30:
98:8b:fe:70:f0:3a:5e:29:b7:d6:15:38:e1:b6:54:
ec:df:fb:40:23:12:80:06:77:bb:49:fa:22:c6:8e:
57:2d:cb:75:6d:6c:f2:64:41:cb:8f:66:cf:c2:59:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:20:9B:EA:FF:46:F4:2E:4F:C1:51:F7:F2:3C:15:2B:D0:79:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed0f44c7-c286-45c9-9156-5644f580ab41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:b000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:27:38:81:7e:ea:42:f1:9c:26:34:50:f5:6a:2e:c3:b6:41:
68:09:3e:19:4f:59:93:ad:25:b0:7e:e5:e4:17:af:14:28:cf:
af:11:5f:f2:2b:b9:20:48:80:ae:ed:e2:55:d4:2e:f2:4b:6b:
61:1f:f8:83:1e:64:94:21:02:b4:b6:a6:8b:50:05:50:66:9e:
ef:ab:19:cd:2d:5f:b5:6f:9f:3b:a8:5c:e6:e9:47:62:8a:91:
11:22:f7:8f:9d:44:e4:c1:6d:65:5a:bf:af:ad:c3:7a:20:bb:
48:06:eb:57:72:02:83:c7:84:2d:d2:52:48:af:1a:51:e9:cf:
48:1f:17:07:07:9a:fb:aa:b2:b4:45:e3:e9:e3:83:5e:bc:eb:
8c:e6:01:fb:80:d7:57:a3:c9:53:3b:43:86:1f:2a:1a:33:eb:
89:b3:0e:6d:db:56:db:cb:96:38:8a:63:3d:ec:b8:c9:3e:72:
d2:40:2b:86:bc:b2:9e:f1:b6:fe:9c:b9:48:ec:41:8f:29:0f:
34:fa:f3:f1:22:9d:b7:98:a0:8c:7a:e0:30:d6:ff:b1:ba:f7:
51:6a:04:21:3f:7c:17:b4:dd:00:48:1a:86:5b:e9:e8:be:0a:
57:8a:c1:75:a9:2a:12:9f:0c:16:64:0b:66:8e:1a:92:ca:5d:
7d:fc:73:78
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBvpWYagiAwlf7agwtOYB2BjvM9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTEwMDdaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDlmZGI4NzliZmRmNTEyOWRlOWE3NzU1MTNiM2JhMTgxYjllNTYxMzc4MGZj
NjA2NjUxNTIyNGQwNTljZDI2YmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGEWDBVkc8kWSErE97Zm2rtGJGJxMBo6g2UBDOMWj1C0VqvUSVF1q07yjIt
yFV30/67Qc58lLf/sS0qT+r19SmrxxKdNGmD5VXqu8daR2U/1F6d9U1huIjdwbu0
0ZIk1GXlkKjchODUph1PaFCh0dUVgzqBHVbZ+0oAte8XwMkzWs1ta5GhQNDn1JHG
9VAgeSgFCpapgPPtPY0qP7DzUU4/mXaY0U2RloyWSqcpRlJ7NXXZJLlsSmFWxabE
yPSXUTdQ/IMNmpHZ6En0sTEo1McwmIv+cPA6Xim31hU44bZU7N/7QCMSgAZ3u0n6
IsaOVy3LdW1s8mRBy49mz8JZOq8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRWfSCb
6v9G9C5PwVH38jwVK9B5TjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWQwZjQ0YzctYzI4Ni00NWM5LTkxNTYtNTY0NGY1ODBhYjQxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fiw
MA0GCSqGSIb3DQEBCwUAA4IBAQBuJziBfupC8ZwmNFD1ai7DtkFoCT4ZT1mTrSWw
fuXkF68UKM+vEV/yK7kgSICu7eJV1C7yS2thH/iDHmSUIQK0tqaLUAVQZp7vqxnN
LV+1b587qFzm6UdiipERIvePnUTkwW1lWr+vrcN6ILtIButXcgKDx4Qt0lJIrxpR
6c9IHxcHB5r7qrK0RePp44NevOuM5gH7gNdXo8lTO0OGHyoaM+uJsw5t21bby5Y4
imM97LjJPnLSQCuGvLKe8bb+nLlI7EGPKQ80+vPxIp23mKCMeuAw1v+xuvdRagQh
P3wXtN0ASBqGW+novgpXisF1qSoSnwwWZAtmjhqSyl19/HN4
-----END CERTIFICATE-----
Generated at Sun Nov 1 00:58:22 2026 by rpki-client