Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
File: 2331f846-3447-4dea-ac7a-63323853ebb9.roa (raw, json)
Hash identifier: vfvP7e25LztDYNtcgWaxWwDfnV/k63DM2dl0vdc2shM=
Subject key identifier: CA:96:87:F7:62:36:41:46:97:8F:D1:BD:7C:AE:03:C4:C0:0A:9D:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42B579F08A651BF6BB3389D8D31B8C69B1E6EE36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
Signing time: Fri 07 Aug 2026 05:00:34 +0000
ROA not before: Fri 07 Aug 2026 05:00:34 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b5:79:f0:8a:65:1b:f6:bb:33:89:d8:d3:1b:8c:69:b1:e6:ee:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:34 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=76d016e19b83dd704638406aed0838762474fef4f206ad1644ced81e25dd6035, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:53:a0:fd:cd:24:75:be:a5:5c:f6:40:22:
98:f8:f2:55:0d:51:aa:ff:3f:ae:71:5b:98:e7:13:
2b:b6:2a:09:83:ca:a2:dd:d3:70:0f:12:8f:d1:9f:
1d:8d:74:61:69:29:3e:6f:ae:23:63:13:64:3b:cf:
dc:14:df:db:97:1e:ba:5b:9b:d9:d1:d9:37:f6:d8:
3f:66:d9:4e:ce:8c:b1:a1:17:d9:e6:32:ac:5c:7d:
57:c7:bf:cf:07:8a:3e:ef:ec:ce:f2:83:55:df:70:
99:bc:45:29:d4:91:02:1e:9c:04:9b:9f:cb:75:92:
b1:88:d0:7f:fd:23:a0:08:44:0b:ab:c0:19:34:e0:
85:fc:63:46:47:6a:34:92:b0:59:27:17:08:cd:fb:
5f:ee:6d:10:c9:16:de:10:37:05:8d:a9:d3:5f:fd:
48:6e:5e:f8:fd:d9:14:79:0a:0c:59:5e:4c:1d:dc:
eb:98:27:47:6b:f3:d2:49:5f:0b:b0:10:54:02:59:
aa:a7:05:d4:ec:fe:fd:99:fd:7e:24:1b:ba:d9:31:
c1:ca:dc:8a:7e:b6:d5:e1:bb:90:3f:8e:c4:48:b7:
47:0a:87:e0:b0:12:43:c7:83:7d:0f:ff:62:ff:0e:
e4:e0:3d:e7:30:91:08:b2:1b:5d:0f:a6:a7:0f:93:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:87:F7:62:36:41:46:97:8F:D1:BD:7C:AE:03:C4:C0:0A:9D:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
13:ab:23:68:b5:a3:32:5e:5c:a7:4f:c8:86:e0:57:cd:2a:0d:
99:3f:89:51:cf:32:0e:34:5d:fa:8d:57:48:68:bf:b0:7e:de:
72:68:5c:b7:9b:59:02:ff:13:60:a3:88:2a:7c:1f:4d:4c:37:
c3:ab:8b:58:6b:50:06:cc:f4:d2:94:00:2f:21:6b:89:d5:16:
f7:b9:1f:69:c0:81:1e:5e:b3:c3:8a:32:92:36:aa:d8:6d:de:
90:3b:26:c7:43:16:a7:a3:8d:f0:42:04:16:4c:f6:4f:fd:ae:
a7:15:c8:5a:df:04:1f:54:d0:8d:02:d1:d4:c5:af:b3:96:77:
21:32:8a:2d:6d:90:90:b3:1a:fb:0d:2f:23:ac:d8:bf:c3:1d:
60:cb:7f:8b:7d:43:59:21:e4:c9:89:6f:ad:3f:44:4d:64:93:
d9:bb:92:9e:d1:de:c0:9f:3d:10:c6:da:ef:1c:bb:dd:9d:5b:
46:d1:3e:64:74:33:6a:49:cb:55:f3:8f:3d:af:9c:ce:8e:87:
a5:8f:bc:f1:3e:36:59:30:76:f3:00:70:76:b8:98:88:ca:c8:
43:f2:8f:70:d1:8d:4b:ef:77:6a:9b:85:4a:40:34:95:bb:74:
04:81:70:bc:66:3b:7d:8c:7a:c0:08:0e:32:00:ab:17:b7:ce:
a7:c5:c0:fd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQrV58IplG/a7M4nY0xuMabHm7jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTAwMzRaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDc2ZDAxNmUxOWI4M2RkNzA0NjM4NDA2YWVkMDgzODc2MjQ3NGZlZjRmMjA2
YWQxNjQ0Y2VkODFlMjVkZDYwMzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFAU6D9zSR1vqVc9kAimPjyVQ1Rqv8/rnFbmOcTK7YqCYPKot3TcA8Sj9Gf
HY10YWkpPm+uI2MTZDvP3BTf25ceulub2dHZN/bYP2bZTs6MsaEX2eYyrFx9V8e/
zweKPu/szvKDVd9wmbxFKdSRAh6cBJufy3WSsYjQf/0joAhEC6vAGTTghfxjRkdq
NJKwWScXCM37X+5tEMkW3hA3BY2p01/9SG5e+P3ZFHkKDFleTB3c65gnR2vz0klf
C7AQVAJZqqcF1Oz+/Zn9fiQbutkxwcrcin621eG7kD+OxEi3RwqH4LASQ8eDfQ//
Yv8O5OA95zCRCLIbXQ+mpw+T/WkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTKlof3
YjZBRpeP0b18rgPEwAqddzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjMzMWY4NDYtMzQ0Ny00ZGVhLWFjN2EtNjMzMjM4NTNlYmI5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G8g
MA0GCSqGSIb3DQEBCwUAA4IBAQATqyNotaMyXlynT8iG4FfNKg2ZP4lRzzIONF36
jVdIaL+wft5yaFy3m1kC/xNgo4gqfB9NTDfDq4tYa1AGzPTSlAAvIWuJ1Rb3uR9p
wIEeXrPDijKSNqrYbd6QOybHQxano43wQgQWTPZP/a6nFcha3wQfVNCNAtHUxa+z
lnchMootbZCQsxr7DS8jrNi/wx1gy3+LfUNZIeTJiW+tP0RNZJPZu5Ke0d7Anz0Q
xtrvHLvdnVtG0T5kdDNqSctV8489r5zOjoelj7zxPjZZMHbzAHB2uJiIyshD8o9w
0Y1L73dqm4VKQDSVu3QEgXC8Zjt9jHrACA4yAKsXt86nxcD9
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:52 2026 by rpki-client