Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
File: 1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa (raw, json)
Hash identifier: s9V288TUKtKhlPpQKyvWjylP6nINydh0Ng4FCaWKGRY=
Subject key identifier: D9:53:14:BF:CF:93:F3:2D:4C:99:AC:B1:F2:A5:D9:36:10:FA:1D:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F6BAC62AC88A444C82C463B4D5F7E49E7333917
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
Signing time: Sat 07 Nov 2026 01:02:23 +0000
ROA not before: Sat 07 Nov 2026 01:02:23 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6b:ac:62:ac:88:a4:44:c8:2c:46:3b:4d:5f:7e:49:e7:33:39:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 01:02:23 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=3d703d8a25815774f9299b7c4dbdb5f0dc0d8830d5f7c8997b8b178f9c67fbfd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:ec:98:64:ae:c0:4d:02:ef:62:76:fa:59:
fe:0e:39:bf:d7:59:7c:0b:a3:3e:77:cb:22:d8:41:
67:1f:eb:f2:b4:ff:9a:3a:50:9e:26:17:ba:78:6f:
cb:62:3f:a2:b7:e2:61:51:44:ce:70:f8:6b:ed:5a:
7a:23:52:c0:92:17:22:8b:ed:d9:cc:14:4a:4d:79:
83:d3:bd:22:16:96:de:03:99:af:25:39:61:8b:ef:
54:23:44:c7:1d:a3:09:fe:32:47:ba:a9:2d:55:b9:
6a:49:56:74:0c:64:23:46:9c:82:9b:bb:84:06:9e:
41:56:fa:82:ec:11:09:14:b7:9d:65:4c:48:29:6d:
54:cf:c8:17:71:a3:7f:6e:29:32:68:60:e1:f6:6c:
b8:9d:69:48:59:8c:ad:19:c5:ee:88:81:a5:8f:44:
5f:0d:ab:15:6e:8b:1f:0b:b6:16:e4:58:8c:4a:e1:
eb:af:b2:b4:33:53:97:ba:10:85:37:6c:ce:7c:61:
06:0e:2e:ba:17:2c:5b:eb:c8:9e:6d:9b:f7:30:28:
63:15:54:2a:a2:51:9f:e0:27:2a:d1:f8:64:3d:f3:
65:66:cf:e4:1f:96:ce:46:47:e0:ed:ac:92:f5:75:
13:7c:67:b3:f6:f3:68:b9:de:6e:77:2a:c4:f5:e5:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:53:14:BF:CF:93:F3:2D:4C:99:AC:B1:F2:A5:D9:36:10:FA:1D:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1623b90b-155f-4e0b-ac49-6dc2208ab35d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
a4:3f:50:a7:c3:46:f8:99:2c:1f:73:90:0b:fb:9d:00:5d:de:
16:15:1c:02:ad:f9:8f:f1:3c:75:24:61:36:04:92:ff:67:d9:
c7:92:ca:fc:a7:4f:5f:34:46:52:9f:33:53:fd:15:88:f4:2b:
8d:4a:ec:11:72:0b:5e:be:b4:96:51:91:82:da:53:ed:38:87:
dd:10:d7:a1:a7:74:7d:d1:c2:22:61:d5:6e:54:e8:21:a4:53:
0b:9a:10:6e:39:e6:51:81:7e:2e:b5:68:c3:5b:a9:89:51:1a:
d5:f0:40:bc:27:16:27:14:26:05:25:44:56:85:b9:a7:e9:dd:
e1:bd:c0:8c:cf:df:83:55:18:6e:2a:c6:89:b6:f6:f2:9d:a7:
fb:48:d9:f7:8d:6f:30:2f:b9:a1:4b:3a:7d:49:d7:f9:a1:c8:
14:aa:c2:8d:1c:b1:15:92:59:5c:29:a9:5d:6e:d4:9d:20:ae:
39:26:1d:21:e4:e0:ec:19:e5:56:05:fc:a3:fe:44:be:b9:fe:
f6:6e:52:4b:64:6e:88:4b:e4:81:9f:f8:99:82:c4:f0:72:41:
95:da:a9:4d:e9:70:50:81:3a:ad:61:f0:6d:3e:1e:a6:9e:55:
7c:2f:08:7d:e6:a4:59:c4:b2:ed:b6:9e:b8:bd:4e:56:41:24:
23:ec:56:27
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUb2usYqyIpETILEY7TV9+SeczORcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjExMDcwMTAyMjNaFw0yNzAyMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkNzAzZDhhMjU4MTU3NzRmOTI5OWI3YzRkYmRiNWYwZGMwZDg4MzBkNWY3
Yzg5OTdiOGIxNzhmOWM2N2ZiZmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALPw7JhkrsBNAu9idvpZ/g45v9dZfAujPnfLIthBZx/r8rT/mjpQniYXunhv
y2I/orfiYVFEznD4a+1aeiNSwJIXIovt2cwUSk15g9O9IhaW3gOZryU5YYvvVCNE
xx2jCf4yR7qpLVW5aklWdAxkI0acgpu7hAaeQVb6guwRCRS3nWVMSCltVM/IF3Gj
f24pMmhg4fZsuJ1pSFmMrRnF7oiBpY9EXw2rFW6LHwu2FuRYjErh66+ytDNTl7oQ
hTdsznxhBg4uuhcsW+vInm2b9zAoYxVUKqJRn+AnKtH4ZD3zZWbP5B+WzkZH4O2s
kvV1E3xns/bzaLnebncqxPXlqBkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTZUxS/
z5PzLUyZrLHypdk2EPodRzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTYyM2I5MGItMTU1Zi00ZTBiLWFjNDktNmRjMjIwOGFiMzVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H0I
wDANBgkqhkiG9w0BAQsFAAOCAQEApD9Qp8NG+JksH3OQC/udAF3eFhUcAq35j/E8
dSRhNgSS/2fZx5LK/KdPXzRGUp8zU/0ViPQrjUrsEXILXr60llGRgtpT7TiH3RDX
oad0fdHCImHVblToIaRTC5oQbjnmUYF+LrVow1upiVEa1fBAvCcWJxQmBSVEVoW5
p+nd4b3AjM/fg1UYbirGibb28p2n+0jZ941vMC+5oUs6fUnX+aHIFKrCjRyxFZJZ
XCmpXW7UnSCuOSYdIeTg7BnlVgX8o/5Evrn+9m5SS2RuiEvkgZ/4mYLE8HJBldqp
TelwUIE6rWHwbT4epp5VfC8IfeakWcSy7baeuL1OVkEkI+xWJw==
-----END CERTIFICATE-----
Generated at Sun Nov 8 04:09:06 2026 by rpki-client