Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b335fe6-f4fb-45b7-9424-51f574ab2742.roa
File: 0b335fe6-f4fb-45b7-9424-51f574ab2742.roa (raw, json)
Hash identifier: gLIrpD5fwrWVqShMFENBQdRiRbaJJhy4pq+F5Ezcwyw=
Subject key identifier: 8E:B0:BE:29:CC:88:EC:DB:67:7A:8D:44:6C:61:3E:FA:AE:36:68:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C4C0AB9151B5E8E13D9E2E4513E2BF4237CE6AF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b335fe6-f4fb-45b7-9424-51f574ab2742.roa
Signing time: Mon 03 Aug 2026 01:30:14 +0000
ROA not before: Mon 03 Aug 2026 01:30:14 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4c:0a:b9:15:1b:5e:8e:13:d9:e2:e4:51:3e:2b:f4:23:7c:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 01:30:14 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=e7495c0dff16abfed93de8fdc3bb0ff03f673d5a36c5e8b1a4e669c6aec1593a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:c0:4c:68:ba:fa:d0:c2:b1:27:1c:ec:7c:
15:fb:35:15:89:a7:8c:6f:85:52:4d:e3:c6:27:d0:
19:3b:ee:0a:ce:17:29:86:bc:75:b2:08:81:b0:a1:
2a:a2:66:ec:bc:4b:71:ed:d5:2b:7b:56:70:33:37:
4e:c1:88:ea:4c:f8:31:d5:7a:6a:af:a4:cb:2c:48:
e7:3c:33:8a:49:96:4a:49:e1:c8:22:f8:ab:95:b4:
70:f2:e3:d2:c0:f0:c9:ca:f7:4d:73:00:92:48:1f:
df:f4:d3:4a:80:9b:f8:88:01:1e:08:c6:1a:50:85:
6d:b8:1f:87:b7:02:7f:4b:e2:f1:f0:db:b8:52:b4:
95:dc:42:12:b7:94:c3:9c:79:ce:8e:9c:92:3c:6e:
77:9e:74:80:61:ab:83:f6:3a:9f:90:f5:ba:6a:1e:
19:09:43:fa:91:33:67:92:f1:75:ed:28:24:51:9f:
e6:d0:c9:d6:49:a6:da:db:69:2a:87:21:9f:03:01:
42:29:19:f9:1b:be:7c:a0:4b:28:4d:ae:b9:23:b0:
e9:80:7e:93:59:dc:a3:6b:96:47:83:74:04:7f:db:
f9:53:87:69:88:43:9a:f2:75:2e:d7:34:75:e7:e3:
64:fd:cb:49:34:fc:68:f2:58:af:44:c7:33:cc:0e:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:BE:29:CC:88:EC:DB:67:7A:8D:44:6C:61:3E:FA:AE:36:68:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b335fe6-f4fb-45b7-9424-51f574ab2742.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:800::/48
Signature Algorithm: sha256WithRSAEncryption
a2:2e:42:84:67:93:f9:bc:ad:f3:80:8e:2d:e8:86:c5:75:42:
20:a5:e4:03:6f:f1:23:64:69:e4:2b:6c:4b:07:8a:6e:fd:b7:
e4:5f:b3:40:58:09:28:7b:7c:b8:90:8a:10:57:8a:1c:d0:6e:
fe:a8:d9:3b:e9:e3:2e:fc:53:55:5f:ad:85:32:ca:c2:47:b9:
3e:af:99:f2:f5:9c:6d:35:d3:2d:af:8c:b4:3f:21:b4:bb:ff:
e8:21:8a:f3:01:b4:14:15:fe:6c:0d:ba:dc:98:44:94:b2:9e:
29:68:f6:ed:31:c6:0e:df:fe:70:7e:83:50:dd:f5:56:8c:08:
08:7a:cf:54:d5:3e:14:91:49:96:dc:12:57:98:48:d7:7c:d9:
43:12:fc:63:bd:b2:ed:3c:2b:dc:1d:e1:7f:f7:b7:e8:df:9c:
98:24:70:0e:8f:b6:03:02:69:5a:00:b5:32:38:b2:20:e4:b5:
a6:42:5d:f6:c8:f2:71:ec:44:bb:04:c0:9e:a4:1f:d1:d9:c2:
72:07:81:f4:7d:37:2c:8e:15:44:cf:6a:f1:33:94:80:d6:d4:
23:eb:80:da:b3:06:8c:61:1d:a7:6f:92:b9:95:fb:73:dd:da:
d2:48:10:f4:e2:0d:3a:66:60:75:d5:44:f4:5f:43:ad:70:8e:
8a:35:29:d7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUPEwKuRUbXo4T2eLkUT4r9CN85q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDMwMTMwMTRaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGU3NDk1YzBkZmYxNmFiZmVkOTNkZThmZGMzYmIwZmYwM2Y2NzNkNWEzNmM1
ZThiMWE0ZTY2OWM2YWVjMTU5M2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL50wExouvrQwrEnHOx8Ffs1FYmnjG+FUk3jxifQGTvuCs4XKYa8dbIIgbCh
KqJm7LxLce3VK3tWcDM3TsGI6kz4MdV6aq+kyyxI5zwzikmWSknhyCL4q5W0cPLj
0sDwycr3TXMAkkgf3/TTSoCb+IgBHgjGGlCFbbgfh7cCf0vi8fDbuFK0ldxCEreU
w5x5zo6ckjxud550gGGrg/Y6n5D1umoeGQlD+pEzZ5Lxde0oJFGf5tDJ1kmm2ttp
KochnwMBQikZ+Ru+fKBLKE2uuSOw6YB+k1nco2uWR4N0BH/b+VOHaYhDmvJ1Ltc0
defjZP3LSTT8aPJYr0THM8wO8CMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSOsL4p
zIjs22d6jURsYT76rjZoiDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGIzMzVmZTYtZjRmYi00NWI3LTk0MjQtNTFmNTc0YWIyNzQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GwI
ADANBgkqhkiG9w0BAQsFAAOCAQEAoi5ChGeT+byt84COLeiGxXVCIKXkA2/xI2Rp
5CtsSweKbv235F+zQFgJKHt8uJCKEFeKHNBu/qjZO+njLvxTVV+thTLKwke5Pq+Z
8vWcbTXTLa+MtD8htLv/6CGK8wG0FBX+bA263JhElLKeKWj27THGDt/+cH6DUN31
VowICHrPVNU+FJFJltwSV5hI13zZQxL8Y72y7Twr3B3hf/e36N+cmCRwDo+2AwJp
WgC1MjiyIOS1pkJd9sjycexEuwTAnqQf0dnCcgeB9H03LI4VRM9q8TOUgNbUI+uA
2rMGjGEdp2+SuZX7c93a0kgQ9OINOmZgddVE9F9DrXCOijUp1w==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:12:55 2026 by rpki-client