Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7037317e-bcf9-40f3-b066-0973d33451f2.roa
File: 7037317e-bcf9-40f3-b066-0973d33451f2.roa (raw, json)
Hash identifier: L+DqFXDLoxV4hURqvdGfNFqipKlKuhNhqH3h4kO+NYE=
Subject key identifier: 55:C0:6A:D3:FD:4D:22:78:19:D1:BD:A2:64:51:D5:ED:B2:D4:A3:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E72401BA9043AE8558B4E2ABD75756485B30E13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7037317e-bcf9-40f3-b066-0973d33451f2.roa
Signing time: Mon 26 Oct 2026 05:21:00 +0000
ROA not before: Mon 26 Oct 2026 05:21:00 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:72:40:1b:a9:04:3a:e8:55:8b:4e:2a:bd:75:75:64:85:b3:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:21:00 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2e4148653ce22940b3eaf63f77585ccf4a2eefb4111824bb0d88d27144f3f7df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:75:b5:8c:cc:a9:65:ac:e0:a6:15:38:e8:
db:ce:39:8b:09:0e:b0:df:49:dc:ff:49:08:4f:30:
eb:21:f3:ba:20:bc:2f:15:b8:80:23:ed:ee:79:6e:
d7:e4:93:70:ed:fc:0a:ae:7f:bc:b5:65:67:b4:33:
d6:be:7e:44:01:83:2e:11:fc:34:de:a3:d6:bb:bd:
dc:d4:57:8c:4d:d9:28:58:ea:ec:13:8b:22:e2:11:
47:cf:c3:af:c6:f4:ae:55:b7:5c:77:fb:e9:cd:80:
02:a6:66:aa:67:78:47:6b:c5:32:aa:57:bb:d7:ec:
3a:d9:f1:33:02:c5:cf:dc:9a:3b:c5:50:5b:86:05:
c0:52:0b:67:1b:61:b4:b7:4a:2d:ad:c2:18:93:da:
ca:a1:b6:ce:ba:99:17:c9:74:d4:30:e7:6c:54:34:
15:4e:88:81:0c:7c:fb:11:18:5f:19:6e:5c:00:0c:
13:d3:e5:9a:44:8f:38:60:1a:91:4b:ca:a4:5f:13:
87:b8:34:cc:48:87:0b:f4:c4:8d:c8:59:87:cf:3a:
31:d8:aa:8a:e1:a3:52:5f:4c:5e:00:e2:2d:ed:50:
f6:d2:43:21:49:43:d2:37:7d:e5:94:ee:09:37:a9:
77:d8:7a:8e:74:84:00:06:c9:89:0c:40:f1:9b:8b:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C0:6A:D3:FD:4D:22:78:19:D1:BD:A2:64:51:D5:ED:B2:D4:A3:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7037317e-bcf9-40f3-b066-0973d33451f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:9000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:d8:24:a3:ce:8a:f1:8c:25:84:6c:1d:35:6e:c0:98:7f:36:
34:d3:af:a1:39:da:85:5e:4b:38:5d:e9:8c:1b:13:be:ef:e4:
48:53:1f:2d:7f:d8:7d:d1:e6:47:10:a5:1c:dc:c9:b4:84:ed:
16:87:0a:0b:f9:69:a1:bf:ad:00:56:7c:fe:d3:af:f5:ad:4b:
f6:84:fb:5c:a8:a3:69:86:56:dc:d7:9e:b3:b1:60:6c:48:e6:
57:39:c9:e4:33:b8:d3:50:9e:e4:b8:62:a5:a3:0b:50:97:4e:
77:00:7f:65:b5:71:8c:0d:ff:fe:35:bc:24:8f:05:e5:10:a7:
8c:ca:a9:89:0c:ec:52:59:84:11:2c:98:96:70:4b:46:96:93:
6c:6a:23:c4:17:8a:41:af:5d:62:e3:ee:62:d1:03:04:09:b3:
0b:d3:6f:4f:5c:cf:86:3b:18:cd:51:61:5e:36:7f:14:5c:68:
7c:b9:99:da:72:a4:6f:99:2b:98:43:8d:fb:7a:46:cb:9e:82:
e9:5a:f7:1c:b2:c2:a5:73:77:9c:46:69:62:78:a4:0b:71:93:
84:c3:66:9a:e2:62:78:26:0b:8e:12:13:fd:23:dd:e3:ad:e8:
4a:a0:81:e0:ae:3f:9c:b9:4d:3f:28:5e:80:a3:e3:04:63:90:
c0:9b:18:cb
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTnJAG6kEOuhVi04qvXV1ZIWzDhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTIxMDBaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDJlNDE0ODY1M2NlMjI5NDBiM2VhZjYzZjc3NTg1Y2NmNGEyZWVmYjQxMTE4
MjRiYjBkODhkMjcxNDRmM2Y3ZGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALz5dbWMzKllrOCmFTjo2845iwkOsN9J3P9JCE8w6yHzuiC8LxW4gCPt7nlu
1+STcO38Cq5/vLVlZ7Qz1r5+RAGDLhH8NN6j1ru93NRXjE3ZKFjq7BOLIuIRR8/D
r8b0rlW3XHf76c2AAqZmqmd4R2vFMqpXu9fsOtnxMwLFz9yaO8VQW4YFwFILZxth
tLdKLa3CGJPayqG2zrqZF8l01DDnbFQ0FU6IgQx8+xEYXxluXAAME9PlmkSPOGAa
kUvKpF8Th7g0zEiHC/TEjchZh886MdiqiuGjUl9MXgDiLe1Q9tJDIUlD0jd95ZTu
CTepd9h6jnSEAAbJiQxA8ZuL7dkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRVwGrT
/U0ieBnRvaJkUdXtstSj7zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzAzNzMxN2UtYmNmOS00MGYzLWIwNjYtMDk3M2QzMzQ1MWYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HiQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB/2CSjzorxjCWEbB01bsCYfzY006+hOdqFXks4
XemMGxO+7+RIUx8tf9h90eZHEKUc3Mm0hO0WhwoL+Wmhv60AVnz+06/1rUv2hPtc
qKNphlbc156zsWBsSOZXOcnkM7jTUJ7kuGKlowtQl053AH9ltXGMDf/+NbwkjwXl
EKeMyqmJDOxSWYQRLJiWcEtGlpNsaiPEF4pBr11i4+5i0QMECbML029PXM+GOxjN
UWFeNn8UXGh8uZnacqRvmSuYQ437ekbLnoLpWvccssKlc3ecRmlieKQLcZOEw2aa
4mJ4JguOEhP9I93jrehKoIHgrj+cuU0/KF6Ao+MEY5DAmxjL
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:16:46 2026 by rpki-client