Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
File: efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa (raw, json)
Hash identifier: ZNFL6sS1H3Bq2fYkKUoNyTzvs5ZH/nR7k6LoUsil7q8=
Subject key identifier: BB:A4:BE:FA:59:B0:FA:EE:CA:75:CB:07:06:B2:37:05:06:5E:98:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03968D8812182DC53266AE660CD04C62E05D0BE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
Signing time: Thu 22 Oct 2026 01:40:09 +0000
ROA not before: Thu 22 Oct 2026 01:40:09 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:96:8d:88:12:18:2d:c5:32:66:ae:66:0c:d0:4c:62:e0:5d:0b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 01:40:09 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=6f99f37c76864125737f10e1e4b6b42c7d96ede57e59851e8967bfdee7694f92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:c8:4c:54:a5:e0:2e:05:74:5b:9d:b5:2d:
54:e4:a8:4c:d6:eb:bb:9f:0f:bb:7e:af:de:3f:15:
67:2e:b1:87:04:87:28:cf:30:4a:24:74:29:b6:14:
13:21:1a:f7:3e:7d:5d:1c:ae:91:5a:82:79:74:35:
62:8c:33:48:20:60:bc:ad:8d:1b:b0:0a:21:2d:e4:
77:af:f5:ed:ff:b0:26:98:d1:e4:00:ae:5e:24:15:
c3:7e:e3:71:f8:14:00:3c:69:0c:ed:18:d4:15:fb:
ff:2c:5f:86:44:d3:93:59:c8:9a:0f:40:d0:7d:4c:
02:4c:d6:b4:b6:43:3a:f9:e0:ae:27:65:09:4d:fe:
8f:cf:67:a8:86:12:44:04:bc:99:65:a0:ab:60:f0:
1c:86:74:2f:19:b2:d2:f6:7d:43:63:d5:1a:20:62:
bd:ea:3a:2e:ff:35:e9:e6:5d:01:b6:69:c5:3a:0e:
f0:68:98:c6:fd:f1:95:74:9b:f7:24:2b:0f:d2:4e:
7b:b0:7b:a0:e3:a9:cf:39:bc:30:0d:f4:1c:36:a7:
4c:19:59:a5:e3:48:a3:e6:c4:b7:56:97:2e:36:a3:
68:10:8f:de:50:93:f6:85:b4:f2:5e:04:9a:68:d9:
78:d4:45:73:33:ee:82:33:32:9e:d1:21:34:d2:95:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:BE:FA:59:B0:FA:EE:CA:75:CB:07:06:B2:37:05:06:5E:98:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/efc2799b-d173-40c0-a6ee-0c0ad41cbd49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:2000::/48
Signature Algorithm: sha256WithRSAEncryption
71:cb:70:aa:26:cf:21:73:78:4f:36:5d:23:44:d7:36:23:d1:
d7:df:2e:5d:f1:2f:2b:6a:48:85:4f:ad:aa:15:df:d1:88:f3:
47:fa:84:5f:e3:74:59:af:ed:93:45:19:35:ad:87:56:1b:5e:
26:e1:38:d7:52:f8:12:99:6b:f8:1c:49:95:07:aa:12:43:01:
b7:fb:c8:4b:b1:2a:72:88:a1:f9:09:b2:39:a9:f3:e9:a1:94:
e2:a7:f8:63:c5:89:4b:42:34:be:b2:96:7c:b5:ce:c8:0b:63:
92:d2:11:79:e6:0f:32:5a:51:86:88:9d:78:29:58:b7:bc:11:
6b:5f:90:35:ab:8c:d3:26:92:80:e6:5d:f8:c6:67:d1:d8:67:
2c:c9:20:b7:36:5e:ea:6e:16:b9:8e:01:f8:29:eb:6c:fe:05:
b1:d5:a4:a0:7d:5a:fe:eb:42:5e:8f:f3:58:0d:5f:fd:17:1c:
ee:f3:02:25:78:26:fe:2e:59:9a:25:c9:d2:d8:f4:be:6c:ef:
1d:c0:18:0f:3e:2f:34:ed:8c:4d:12:4f:ad:49:2e:b3:f5:e7:
47:88:54:f1:51:9a:2f:11:fc:68:d2:31:0c:87:2d:f6:29:f5:
ad:2c:3e:a7:03:d2:fc:87:26:5f:57:a8:30:cb:1e:28:34:bb:
4e:29:36:7d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUA5aNiBIYLcUyZq5mDNBMYuBdC+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjIwMTQwMDlaFw0yNzAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDZmOTlmMzdjNzY4NjQxMjU3MzdmMTBlMWU0YjZiNDJjN2Q5NmVkZTU3ZTU5
ODUxZTg5NjdiZmRlZTc2OTRmOTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/kyExUpeAuBXRbnbUtVOSoTNbru58Pu36v3j8VZy6xhwSHKM8wSiR0KbYU
EyEa9z59XRyukVqCeXQ1YowzSCBgvK2NG7AKIS3kd6/17f+wJpjR5ACuXiQVw37j
cfgUADxpDO0Y1BX7/yxfhkTTk1nImg9A0H1MAkzWtLZDOvngridlCU3+j89nqIYS
RAS8mWWgq2DwHIZ0Lxmy0vZ9Q2PVGiBiveo6Lv816eZdAbZpxToO8GiYxv3xlXSb
9yQrD9JOe7B7oOOpzzm8MA30HDanTBlZpeNIo+bEt1aXLjajaBCP3lCT9oW08l4E
mmjZeNRFczPugjMyntEhNNKVX2ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS7pL76
WbD67sp1ywcGsjcFBl6YtTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWZjMjc5OWItZDE3My00MGMwLWE2ZWUtMGMwYWQ0MWNiZDQ5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gwg
ADANBgkqhkiG9w0BAQsFAAOCAQEAcctwqibPIXN4TzZdI0TXNiPR198uXfEvK2pI
hU+tqhXf0YjzR/qEX+N0Wa/tk0UZNa2HVhteJuE411L4Eplr+BxJlQeqEkMBt/vI
S7Eqcoih+QmyOanz6aGU4qf4Y8WJS0I0vrKWfLXOyAtjktIReeYPMlpRhoideClY
t7wRa1+QNauM0yaSgOZd+MZn0dhnLMkgtzZe6m4WuY4B+CnrbP4FsdWkoH1a/utC
Xo/zWA1f/Rcc7vMCJXgm/i5ZmiXJ0tj0vmzvHcAYDz4vNO2MTRJPrUkus/XnR4hU
8VGaLxH8aNIxDIct9in1rSw+pwPS/IcmX1eoMMseKDS7Tik2fQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:34:16 2026 by rpki-client