Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
File: dedc9540-e267-4454-a449-e65933af6f0f.roa (raw, json)
Hash identifier: Ec9CF4xFdblXZ9955/Bg/9vL/9T2ukpQDJoOnQJqxR0=
Subject key identifier: 87:59:56:36:13:16:DB:13:A9:E4:A4:18:47:9D:70:9A:E5:E1:EC:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3ABA2D9EDCEF5FA611A64F0F62639470D3A73437
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
Signing time: Mon 26 Oct 2026 05:30:13 +0000
ROA not before: Mon 26 Oct 2026 05:30:13 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ba:2d:9e:dc:ef:5f:a6:11:a6:4f:0f:62:63:94:70:d3:a7:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:30:13 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=77b1ca35c4cbebddec7fe1875c37f473e42e13f7c2ffd5ea08dea96ad2726654, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:1d:20:16:77:fa:cc:d0:42:b2:ee:eb:18:
86:e4:e0:0f:a8:ed:00:40:54:88:8e:06:86:39:1e:
6d:66:b7:fa:a8:f3:86:f1:a8:9b:8c:27:bc:9f:98:
89:ef:a2:32:b4:22:70:b0:86:36:2e:35:ff:83:53:
cd:c1:67:9d:4a:aa:60:7e:e1:6c:94:41:18:aa:72:
02:f3:4d:b0:7b:79:a1:c9:fa:36:48:79:70:5e:8c:
10:c7:86:6c:48:e6:da:7f:0d:9d:3d:02:6b:59:e8:
4b:57:2b:48:4e:0b:cc:38:b9:bc:85:d6:4f:c8:0b:
d8:05:c1:4f:93:e7:54:1d:5a:93:d6:8c:1b:3f:11:
87:fa:6d:39:fc:eb:3a:1f:dd:1f:e3:5a:81:40:4b:
36:80:62:6b:f0:12:65:c9:41:25:c0:72:bf:b6:29:
2d:dc:30:b1:27:ea:a3:53:0a:26:bb:a2:e7:50:1f:
eb:08:14:e1:02:44:69:2f:65:c4:82:f5:d2:51:c5:
ba:a9:93:29:4b:7c:ea:c1:79:92:7d:e5:e7:45:22:
51:a9:6a:7f:3f:ad:4b:59:11:54:41:a4:73:9e:73:
fa:79:e7:26:94:aa:35:f7:17:81:e0:8b:7b:84:de:
0c:93:1f:18:47:4a:7d:d5:13:69:1d:3b:2a:b7:9e:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:59:56:36:13:16:DB:13:A9:E4:A4:18:47:9D:70:9A:E5:E1:EC:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:1000::/40
Signature Algorithm: sha256WithRSAEncryption
9c:00:bb:f3:ad:ab:72:a4:d8:af:68:51:41:01:60:46:a9:05:
b8:58:6f:0c:d7:a1:3e:52:33:bb:ea:9b:24:77:9e:7e:7e:af:
ee:99:36:7b:fa:ad:14:54:50:ee:79:f0:d4:60:7f:3d:76:6a:
97:a9:02:14:6b:90:0c:13:92:f0:cb:24:bf:d7:4c:af:d0:90:
40:d8:8d:13:7b:f8:ac:82:f3:81:e6:ca:29:8f:85:c8:ba:89:
dd:cb:ab:c0:5d:a6:9e:84:09:a7:dd:c8:c6:27:12:78:f1:8e:
94:b6:d4:38:dc:79:39:9c:38:68:6a:1a:bf:fe:25:91:6a:52:
90:c1:9f:69:db:d3:0c:2c:14:fd:5b:98:8f:ab:c0:59:41:1b:
4b:c5:47:f8:e7:5c:ee:34:67:d0:dc:10:a7:dd:59:cb:93:f1:
1e:04:ed:0a:f2:58:63:b5:b2:aa:50:12:76:f8:66:89:d5:03:
2c:6e:f8:f5:21:94:23:5a:c0:34:f1:ce:d7:27:89:c4:26:e8:
34:d9:ca:61:4c:b1:d6:b6:a1:ed:cb:41:ab:37:70:8e:f8:04:
e8:9d:f3:e7:cc:b4:a5:a6:6f:4f:b4:78:4d:d2:6c:c6:a3:d2:
d3:5b:31:26:9d:1d:e7:e3:fc:31:d7:cf:d0:93:1c:16:d6:45:
57:4b:65:08
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOrotntzvX6YRpk8PYmOUcNOnNDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjEwMjYwNTMwMTNaFw0yNzAxMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDc3YjFjYTM1YzRjYmViZGRlYzdmZTE4NzVjMzdmNDczZTQyZTEzZjdjMmZm
ZDVlYTA4ZGVhOTZhZDI3MjY2NTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALKGHSAWd/rM0EKy7usYhuTgD6jtAEBUiI4GhjkebWa3+qjzhvGom4wnvJ+Y
ie+iMrQicLCGNi41/4NTzcFnnUqqYH7hbJRBGKpyAvNNsHt5ocn6Nkh5cF6MEMeG
bEjm2n8NnT0Ca1noS1crSE4LzDi5vIXWT8gL2AXBT5PnVB1ak9aMGz8Rh/ptOfzr
Oh/dH+NagUBLNoBia/ASZclBJcByv7YpLdwwsSfqo1MKJrui51Af6wgU4QJEaS9l
xIL10lHFuqmTKUt86sF5kn3l50UiUalqfz+tS1kRVEGkc55z+nnnJpSqNfcXgeCL
e4TeDJMfGEdKfdUTaR07KreeUmkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSHWVY2
ExbbE6nkpBhHnXCa5eHs4zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVkYzk1NDAtZTI2Ny00NDU0LWE0NDktZTY1OTMzYWY2ZjBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCcALvzratypNivaFFBAWBGqQW4WG8M16E+UjO7
6pskd55+fq/umTZ7+q0UVFDuefDUYH89dmqXqQIUa5AME5LwyyS/10yv0JBA2I0T
e/isgvOB5sopj4XIuondy6vAXaaehAmn3cjGJxJ48Y6UttQ43Hk5nDhoahq//iWR
alKQwZ9p29MMLBT9W5iPq8BZQRtLxUf451zuNGfQ3BCn3VnLk/EeBO0K8lhjtbKq
UBJ2+GaJ1QMsbvj1IZQjWsA08c7XJ4nEJug02cphTLHWtqHty0GrN3CO+ATonfPn
zLSlpm9PtHhN0mzGo9LTWzEmnR3n4/wx18/QkxwW1kVXS2UI
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:13:43 2026 by rpki-client