Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc9ad4aa-ba08-4742-a01e-4ec10dd46ef2.roa
File: fc9ad4aa-ba08-4742-a01e-4ec10dd46ef2.roa (raw, json)
Hash identifier: UqiXZ0ZqE6Xi8tZSj5TXoeu/aexBVZ+CyeDyHvsxX+8=
Subject key identifier: 20:D2:F1:FB:FA:50:1C:80:E5:BB:FA:86:91:E3:66:2D:DC:54:26:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6156D5E1747143A6D9E70E13657AA1F29EF57DEF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc9ad4aa-ba08-4742-a01e-4ec10dd46ef2.roa
Signing time: Mon 19 Oct 2026 00:10:08 +0000
ROA not before: Mon 19 Oct 2026 00:10:08 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:56:d5:e1:74:71:43:a6:d9:e7:0e:13:65:7a:a1:f2:9e:f5:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 19 00:10:08 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=4063f920c1d904f23e4ed341272b6f6d430ac7078fd29a2c2ab4e46aa7291728, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:a7:fd:79:76:40:dc:39:8c:67:b8:e1:fe:
c1:67:fa:a5:44:f2:2c:e8:75:0d:90:b6:78:5c:43:
c0:e6:2b:aa:d6:57:20:36:11:bc:56:c3:6f:44:81:
a1:e3:41:75:db:8d:f6:dc:ba:c5:5b:82:03:8c:64:
80:3f:68:d7:cc:f9:9b:6c:8c:11:43:34:53:66:29:
ae:e4:c8:04:30:3a:9d:ea:d9:17:ad:73:57:48:4d:
1b:32:80:8b:fb:f4:4f:eb:3c:12:b7:f4:2d:cf:59:
38:b1:33:9e:c8:77:19:2f:5a:04:e7:d1:2f:f1:93:
2e:83:09:3b:bc:da:0c:21:0e:d9:3f:5c:50:94:b6:
7f:3b:4a:2a:e1:cf:9b:6c:d9:f6:66:bd:2f:11:e6:
a2:0b:83:f3:c9:30:31:15:c2:04:46:ac:32:b0:91:
3f:0e:2d:5c:96:3c:74:da:40:f7:ad:f6:f0:52:3a:
f5:f9:e4:7e:09:8c:ff:a6:73:a4:99:7b:85:cb:b7:
26:a0:be:7f:73:ef:6d:38:c4:50:d5:5a:af:eb:57:
54:3e:71:a4:30:e1:aa:9e:5e:76:48:c8:e1:1f:00:
c0:a1:b2:6a:72:43:da:db:d1:b7:8d:cd:1c:93:7b:
65:2b:dc:5d:51:cb:9a:ee:0e:07:41:7e:c9:46:ed:
45:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:F1:FB:FA:50:1C:80:E5:BB:FA:86:91:E3:66:2D:DC:54:26:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc9ad4aa-ba08-4742-a01e-4ec10dd46ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:c000::/48
Signature Algorithm: sha256WithRSAEncryption
86:42:f4:fb:bb:aa:28:98:bd:d0:61:f0:ca:ee:48:2e:0f:e2:
4f:e9:df:7b:ea:b8:07:d7:ae:14:46:21:59:8a:61:fc:54:0b:
2d:20:dc:15:f5:b7:81:f1:53:eb:a8:3a:33:28:7a:9c:04:d3:
06:de:7f:e0:22:1e:3c:c0:0c:0d:d7:85:20:12:47:3b:5d:7f:
d8:e8:f5:aa:3b:64:28:8f:ae:26:95:2e:93:ce:19:88:3f:87:
bb:f5:66:49:86:77:e3:13:64:93:6e:ef:71:6c:e2:43:df:75:
42:8a:b1:c2:30:78:cc:cc:f0:62:7c:35:55:6f:c2:63:94:5d:
6f:06:52:6d:ff:10:69:b5:e6:f5:b1:9a:ea:0b:59:34:b3:a7:
6c:07:81:f8:52:b5:64:b1:24:55:c8:7a:f5:e8:57:95:41:43:
d8:91:21:c2:da:ec:45:9a:48:55:89:42:b6:69:cf:c8:b0:45:
0e:99:67:14:63:d7:63:ce:df:6a:ea:5a:55:2b:0d:16:40:18:
13:b6:b7:cb:40:7a:48:11:65:ec:89:03:56:94:54:fa:f5:61:
30:cd:50:aa:62:40:04:de:c2:bf:71:4f:e6:eb:45:2d:11:15:
00:1b:44:43:fb:63:37:85:a7:7b:21:78:dd:7c:c0:c9:78:c2:
02:b7:01:bb
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUYVbV4XRxQ6bZ5w4TZXqh8p71fe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMTkwMDEwMDhaFw0yNzAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwNjNmOTIwYzFkOTA0ZjIzZTRlZDM0MTI3MmI2ZjZkNDMwYWM3MDc4ZmQy
OWEyYzJhYjRlNDZhYTcyOTE3MjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANLKp/15dkDcOYxnuOH+wWf6pUTyLOh1DZC2eFxDwOYrqtZXIDYRvFbDb0SB
oeNBdduN9ty6xVuCA4xkgD9o18z5m2yMEUM0U2YpruTIBDA6nerZF61zV0hNGzKA
i/v0T+s8Erf0Lc9ZOLEznsh3GS9aBOfRL/GTLoMJO7zaDCEO2T9cUJS2fztKKuHP
m2zZ9ma9LxHmoguD88kwMRXCBEasMrCRPw4tXJY8dNpA96328FI69fnkfgmM/6Zz
pJl7hcu3JqC+f3PvbTjEUNVar+tXVD5xpDDhqp5edkjI4R8AwKGyanJD2tvRt43N
HJN7ZSvcXVHLmu4OB0F+yUbtRVsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQg0vH7
+lAcgOW7+oaR42Yt3FQm7zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmM5YWQ0YWEtYmEwOC00NzQyLWEwMWUtNGVjMTBkZDQ2ZWYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HbA
ADANBgkqhkiG9w0BAQsFAAOCAQEAhkL0+7uqKJi90GHwyu5ILg/iT+nfe+q4B9eu
FEYhWYph/FQLLSDcFfW3gfFT66g6Myh6nATTBt5/4CIePMAMDdeFIBJHO11/2Oj1
qjtkKI+uJpUuk84ZiD+Hu/VmSYZ34xNkk27vcWziQ991QoqxwjB4zMzwYnw1VW/C
Y5RdbwZSbf8QabXm9bGa6gtZNLOnbAeB+FK1ZLEkVch69ehXlUFD2JEhwtrsRZpI
VYlCtmnPyLBFDplnFGPXY87faupaVSsNFkAYE7a3y0B6SBFl7IkDVpRU+vVhMM1Q
qmJABN7Cv3FP5utFLREVABtEQ/tjN4WneyF43XzAyXjCArcBuw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:29 2026 by rpki-client