Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6cff4db-a45e-4379-9b45-e102e88e2716.roa
File: a6cff4db-a45e-4379-9b45-e102e88e2716.roa (raw, json)
Hash identifier: htPayJRkUWMRIYsTH5M9leSPsvAIFy0r9vyAHShUFCA=
Subject key identifier: A2:94:A5:86:B4:A4:6C:A2:51:F0:6E:15:4D:90:E3:7F:EB:A5:1A:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20AC264348885D3699321CDD6BB597133739C7C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6cff4db-a45e-4379-9b45-e102e88e2716.roa
Signing time: Fri 06 Nov 2026 00:10:08 +0000
ROA not before: Fri 06 Nov 2026 00:10:08 +0000
ROA not after: Thu 04 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d033:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ac:26:43:48:88:5d:36:99:32:1c:dd:6b:b5:97:13:37:39:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 6 00:10:08 2026 GMT
Not After : Feb 4 23:59:59 2027 GMT
Subject: serialNumber=87526fa8538619593175a73904f5d44f5dd2e2c7a49d71eb0f20c6f561b22e87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:74:4b:52:03:dc:60:ec:62:e0:39:27:ef:
5a:f5:0f:59:64:a6:d6:17:42:9a:3b:a3:6e:af:d9:
9e:05:d1:22:6c:d2:d0:5c:a0:d8:f8:75:b0:03:68:
9a:d6:d2:1c:a4:6f:2a:f5:ef:ca:16:5d:d3:09:ce:
1c:0f:39:aa:16:27:00:0c:cd:38:37:df:67:3d:e2:
a5:4a:82:c6:5b:dc:a1:58:7c:f8:1e:bb:45:f6:a5:
3f:5a:31:8f:9e:b0:04:a6:4b:78:dc:c5:8a:d8:6f:
18:ce:b6:bb:54:40:4d:74:e8:e5:f4:2e:23:75:1c:
be:e2:6c:11:e6:90:09:58:34:7d:81:6e:e1:72:ba:
25:53:fc:40:5a:b8:a8:0c:11:14:14:6b:c1:e9:24:
bd:05:da:37:fa:12:f2:03:54:29:50:60:99:2e:28:
0b:bd:b6:06:83:93:ba:d0:a8:e3:ac:02:e9:6f:76:
56:d0:43:0a:81:4d:ca:f9:96:5d:e2:57:8a:b6:39:
b8:f1:c4:9c:05:07:d4:7a:e6:93:2e:fe:19:61:ba:
2a:1d:38:8b:b5:36:c2:fa:71:12:19:d3:c7:66:0a:
cb:46:00:8f:9b:1e:45:65:55:b4:cc:7a:7c:79:e0:
4c:cd:d6:ed:dd:b7:cb:7d:9f:70:12:ce:f4:32:18:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:A5:86:B4:A4:6C:A2:51:F0:6E:15:4D:90:E3:7F:EB:A5:1A:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6cff4db-a45e-4379-9b45-e102e88e2716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d033:1000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:45:de:01:23:10:a8:92:ab:04:61:bf:45:27:39:35:55:87:
f3:5e:34:aa:32:aa:2b:76:9c:0f:35:53:35:38:67:0f:b2:50:
74:3e:42:83:96:c6:18:92:20:1b:60:a1:e8:da:b1:e7:92:9f:
10:a6:a3:fc:21:d6:e9:64:5c:1a:ba:dd:f0:27:37:ed:f1:a5:
6d:b6:c6:8e:f3:2c:5b:e2:7d:a2:89:76:46:48:58:3d:f8:ac:
0f:ae:44:64:04:5c:0f:ac:1a:57:45:00:82:e3:65:d7:90:1b:
00:a6:d7:2a:63:2e:6c:3d:bd:58:36:58:fc:44:2d:fa:af:39:
62:37:62:71:b7:23:b2:1d:5d:d7:fb:3d:38:5b:24:ec:c6:35:
8a:3a:cc:64:b7:25:f7:fb:25:85:c8:67:34:83:97:88:6a:35:
79:84:57:c3:0f:d1:79:e8:60:8e:65:65:fc:84:3e:e4:76:55:
5b:e1:8f:bf:75:69:6a:d1:4d:80:d2:e0:8b:15:55:bb:c2:1d:
9f:9e:bb:fd:f0:fd:2a:57:97:ec:6b:60:4f:5a:25:98:7e:57:
bb:7d:0b:b6:b6:45:d4:b5:97:52:e1:82:47:ed:a8:9d:63:53:
27:b2:ef:33:82:a2:88:05:4b:f4:9b:47:f0:38:76:7e:98:e8:
41:8e:6e:7c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIKwmQ0iIXTaZMhzda7WXEzc5x8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjExMDYwMDEwMDhaFw0yNzAyMDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDg3NTI2ZmE4NTM4NjE5NTkzMTc1YTczOTA0ZjVkNDRmNWRkMmUyYzdhNDlk
NzFlYjBmMjBjNmY1NjFiMjJlODcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJMedEtSA9xg7GLgOSfvWvUPWWSm1hdCmjujbq/ZngXRImzS0Fyg2Ph1sANo
mtbSHKRvKvXvyhZd0wnOHA85qhYnAAzNODffZz3ipUqCxlvcoVh8+B67RfalP1ox
j56wBKZLeNzFithvGM62u1RATXTo5fQuI3UcvuJsEeaQCVg0fYFu4XK6JVP8QFq4
qAwRFBRrwekkvQXaN/oS8gNUKVBgmS4oC722BoOTutCo46wC6W92VtBDCoFNyvmW
XeJXirY5uPHEnAUH1Hrmky7+GWG6Kh04i7U2wvpxEhnTx2YKy0YAj5seRWVVtMx6
fHngTM3W7d23y32fcBLO9DIYWjMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSilKWG
tKRsolHwbhVNkON/66Ua9DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZjZmY0ZGItYTQ1ZS00Mzc5LTliNDUtZTEwMmU4OGUyNzE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DMQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAPRd4BIxCokqsEYb9FJzk1VYfzXjSqMqordpwP
NVM1OGcPslB0PkKDlsYYkiAbYKHo2rHnkp8QpqP8IdbpZFwaut3wJzft8aVttsaO
8yxb4n2iiXZGSFg9+KwPrkRkBFwPrBpXRQCC42XXkBsAptcqYy5sPb1YNlj8RC36
rzliN2JxtyOyHV3X+z04WyTsxjWKOsxktyX3+yWFyGc0g5eIajV5hFfDD9F56GCO
ZWX8hD7kdlVb4Y+/dWlq0U2A0uCLFVW7wh2fnrv98P0qV5fsa2BPWiWYfle7fQu2
tkXUtZdS4YJH7aidY1Mnsu8zgqKIBUv0m0fwOHZ+mOhBjm58
-----END CERTIFICATE-----
Generated at Wed Nov 11 11:41:30 2026 by rpki-client