Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfdd4a60-616b-491d-981f-cc5c5f83b308.roa
File: cfdd4a60-616b-491d-981f-cc5c5f83b308.roa (raw, json)
Hash identifier: 4hvt5iZvt6CCMj0W+ZmW/lLyR4vGy08AUVx0CeXQvlo=
Subject key identifier: D5:D1:41:51:5C:8B:49:45:7A:D7:00:28:0C:CB:7A:A8:58:D8:AC:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: D4B4CA05828E750B937177EACB564FA7D21C44
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfdd4a60-616b-491d-981f-cc5c5f83b308.roa
Signing time: Sat 07 Nov 2026 00:50:07 +0000
ROA not before: Sat 07 Nov 2026 00:50:07 +0000
ROA not after: Fri 05 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05a:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d4:b4:ca:05:82:8e:75:0b:93:71:77:ea:cb:56:4f:a7:d2:1c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 00:50:07 2026 GMT
Not After : Feb 5 23:59:59 2027 GMT
Subject: serialNumber=f47e436cf7963e39060e645fd4a4fde190a63cc28f1f60de59c6cebb3c246eb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:29:cf:de:b7:60:1b:03:36:d5:e4:40:ac:
d0:59:b4:01:4e:1b:23:5b:86:c7:2d:65:37:18:49:
8f:b3:ef:58:09:69:41:23:4a:d3:56:ac:40:9f:4c:
bc:00:df:d9:46:73:54:03:0f:39:6e:83:cb:21:48:
79:fb:fa:e0:05:2e:be:0f:af:8e:3e:8d:70:a0:07:
5e:bb:43:fa:00:9d:09:c0:c2:29:ea:0f:38:98:47:
8e:90:7c:d7:56:e0:5e:07:d0:69:66:bb:2f:a2:93:
12:23:d5:e6:93:d6:2b:f7:4d:67:c3:68:fe:b6:09:
25:84:2b:19:8a:11:46:4b:35:12:11:27:0d:33:40:
f7:19:f7:1b:8a:55:ae:cb:e4:15:e6:a4:06:44:c6:
10:b9:30:71:f7:00:15:8f:24:20:1a:c5:ae:bd:3f:
22:b9:27:6e:04:4d:31:11:1b:fc:f3:e1:4b:a3:11:
27:04:91:e6:0a:cd:98:e1:75:84:74:ba:03:0a:70:
fc:45:d4:40:15:00:af:89:4f:92:cd:b2:af:83:c0:
d1:12:a4:4f:8e:7f:75:8e:60:79:b0:9d:53:67:ab:
e8:5a:ae:b9:9a:1e:03:9d:b6:62:e3:92:6b:74:48:
b5:58:90:73:3c:20:b4:3d:20:34:5c:00:ea:77:54:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:41:51:5C:8B:49:45:7A:D7:00:28:0C:CB:7A:A8:58:D8:AC:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfdd4a60-616b-491d-981f-cc5c5f83b308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05a:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
c2:67:ba:da:14:7f:ab:29:cd:89:de:ca:20:eb:b1:4f:b5:89:
1c:a6:04:72:33:72:24:00:c6:61:57:e3:26:8e:4a:a5:c6:30:
48:07:03:73:78:fd:0c:e3:6a:47:1d:be:dc:0b:90:14:54:74:
64:94:9b:02:5d:d5:26:37:ad:40:98:98:cb:90:9d:8e:f2:a5:
e8:cb:fc:4c:33:15:28:ed:1d:32:b5:61:d0:7f:97:d8:c7:0f:
68:55:61:d1:aa:56:b2:dc:fd:a1:71:a9:b0:92:52:df:57:d6:
54:d1:ae:91:a1:95:21:cb:e5:cd:98:bb:19:dc:01:e0:aa:c4:
38:ad:a7:73:a3:b7:75:4a:c7:ad:66:84:d7:ec:eb:cb:81:9e:
00:7b:9d:73:76:05:b3:2c:cb:92:4c:fd:0c:c7:aa:d4:5f:fa:
a8:ce:be:3f:16:ac:6b:18:fe:c0:74:58:b6:14:29:06:45:35:
10:17:3a:8b:28:6d:af:84:e0:a5:5d:9e:e3:e2:b8:64:51:8a:
58:6b:0e:8e:7f:4f:24:7d:b0:3d:b7:06:12:9e:83:b8:36:26:
d3:cc:8a:06:ee:d7:89:63:54:f3:90:ac:09:ec:41:8a:44:06:
d8:ba:b6:6b:54:bc:0f:5b:24:76:08:2d:63:d5:d7:0e:d8:08:
fb:51:54:9f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUANS0ygWCjnULk3F36stWT6fSHEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjExMDcwMDUwMDdaFw0yNzAyMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0N2U0MzZjZjc5NjNlMzkwNjBlNjQ1ZmQ0YTRmZGUxOTBhNjNjYzI4ZjFm
NjBkZTU5YzZjZWJiM2MyNDZlYjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKoCKc/et2AbAzbV5ECs0Fm0AU4bI1uGxy1lNxhJj7PvWAlpQSNK01asQJ9M
vADf2UZzVAMPOW6DyyFIefv64AUuvg+vjj6NcKAHXrtD+gCdCcDCKeoPOJhHjpB8
11bgXgfQaWa7L6KTEiPV5pPWK/dNZ8No/rYJJYQrGYoRRks1EhEnDTNA9xn3G4pV
rsvkFeakBkTGELkwcfcAFY8kIBrFrr0/IrknbgRNMREb/PPhS6MRJwSR5grNmOF1
hHS6Awpw/EXUQBUAr4lPks2yr4PA0RKkT45/dY5gebCdU2er6FquuZoeA522YuOS
a3RItViQczwgtD0gNFwA6ndUMGcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTV0UFR
XItJRXrXACgMy3qoWNisbzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2ZkZDRhNjAtNjE2Yi00OTFkLTk4MWYtY2M1YzVmODNiMzA4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Fpg
wDANBgkqhkiG9w0BAQsFAAOCAQEAwme62hR/qynNid7KIOuxT7WJHKYEcjNyJADG
YVfjJo5KpcYwSAcDc3j9DONqRx2+3AuQFFR0ZJSbAl3VJjetQJiYy5CdjvKl6Mv8
TDMVKO0dMrVh0H+X2McPaFVh0apWstz9oXGpsJJS31fWVNGukaGVIcvlzZi7GdwB
4KrEOK2nc6O3dUrHrWaE1+zry4GeAHudc3YFsyzLkkz9DMeq1F/6qM6+Pxasaxj+
wHRYthQpBkU1EBc6iyhtr4TgpV2e4+K4ZFGKWGsOjn9PJH2wPbcGEp6DuDYm08yK
Bu7XiWNU85CsCexBikQG2Lq2a1S8D1skdggtY9XXDtgI+1FUnw==
-----END CERTIFICATE-----
Generated at Sat Nov 7 14:13:26 2026 by rpki-client