Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier: c7XVwUtjGHEH1f0SbzoHEnvW29kK/iyEIeE2dKbiUng=
Subject key identifier: A3:A4:A7:E5:80:17:28:0C:43:44:52:E2:07:33:BA:47:15:5D:83:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F1BF726CBA08E1C1CB9EAF4F185A92059D129D7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time: Fri 07 Aug 2026 05:40:39 +0000
ROA not before: Fri 07 Aug 2026 05:40:39 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1b:f7:26:cb:a0:8e:1c:1c:b9:ea:f4:f1:85:a9:20:59:d1:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:40:39 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f409c7d4db1f73b48d1ac949db9a23f677879ed048b1c750a6ae1d9da4b63ec4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:2c:4d:eb:e0:c7:85:57:bd:72:da:7a:f3:
86:4a:43:68:55:67:5a:6c:7d:61:aa:73:ab:31:4e:
bc:5a:7c:f5:64:6d:11:9d:18:fd:10:d7:fc:b7:b4:
98:69:f2:13:97:21:bc:d1:4b:9b:38:4e:a1:32:62:
27:7e:5f:ad:4b:6b:71:fb:2b:52:87:46:61:a4:aa:
8e:ec:e5:6e:a1:53:90:80:b9:83:cc:11:81:3f:6f:
b2:6c:2e:c3:9b:ce:2f:8b:2c:e2:d5:ee:3f:9d:7b:
cc:a5:d4:fa:c7:6e:4c:c5:87:ab:d5:1a:4c:d3:54:
ef:4c:ef:95:71:a4:f5:0d:59:c1:8b:29:b7:ab:17:
e5:9f:b8:9d:64:05:fd:c9:e9:b2:09:50:46:7c:40:
b5:8b:60:34:93:7b:d7:46:f0:b3:70:05:2a:35:42:
98:7f:a1:6a:89:33:3f:15:6d:26:81:f6:2a:cc:6a:
13:a1:0a:4d:1b:f8:c7:cc:6a:75:b7:23:13:c4:79:
81:88:38:f9:31:8b:f6:39:b9:62:e2:60:04:22:02:
47:68:95:4e:d2:21:32:9a:d6:1a:f8:18:40:d6:9b:
00:92:b3:3f:cb:9a:b3:94:ba:a8:7b:69:15:27:33:
97:fe:29:66:c1:61:de:70:d1:f6:09:e4:14:c9:90:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A4:A7:E5:80:17:28:0C:43:44:52:E2:07:33:BA:47:15:5D:83:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:800::/38
Signature Algorithm: sha256WithRSAEncryption
47:3b:fd:66:c5:e9:6b:c7:26:3d:ba:b1:e5:09:f6:b9:da:35:
81:f1:68:96:f2:ec:16:67:6c:63:1b:8c:a2:39:4a:ef:d1:9d:
bc:a1:af:52:bd:ca:a5:c0:0f:56:cf:fd:d8:51:67:48:41:5c:
19:02:93:28:4f:e2:9e:7d:11:bf:af:cb:5c:74:ff:b5:2b:2e:
94:a8:46:42:e3:0d:f7:e9:74:b1:27:0a:58:4d:db:4b:f7:d1:
c3:74:53:56:86:b6:d6:8b:ab:5b:fd:03:95:71:0e:7d:f4:12:
39:0d:70:7d:7d:a8:5d:2d:4e:b0:b5:1b:d0:f6:dc:ff:3c:d8:
c3:36:f1:92:97:bd:e9:a0:71:05:77:be:f2:4e:be:57:88:db:
fa:ca:ae:03:a9:22:75:a5:fe:86:c4:4d:c8:97:83:2e:36:63:
4c:95:10:26:7e:97:81:3c:6e:d1:44:ed:1c:dc:74:9a:38:85:
94:8e:cf:f7:91:96:f2:3d:58:11:7f:9f:a9:6b:58:ed:cc:e7:
19:ec:91:dc:ce:3f:24:92:3d:fd:8a:76:cd:7e:43:cd:eb:f3:
ce:0a:ef:d9:af:e0:03:27:f3:21:11:e6:07:27:41:cd:23:8c:
50:0c:af:2f:81:e7:1e:b5:dd:c2:74:2a:07:cd:fa:de:29:3b:
0e:b7:a0:cb
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPxv3Jsugjhwcuer08YWpIFnRKdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTQwMzlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGY0MDljN2Q0ZGIxZjczYjQ4ZDFhYzk0OWRiOWEyM2Y2Nzc4NzllZDA0OGIx
Yzc1MGE2YWUxZDlkYTRiNjNlYzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFQLE3r4MeFV71y2nrzhkpDaFVnWmx9YapzqzFOvFp89WRtEZ0Y/RDX/Le0
mGnyE5chvNFLmzhOoTJiJ35frUtrcfsrUodGYaSqjuzlbqFTkIC5g8wRgT9vsmwu
w5vOL4ss4tXuP517zKXU+sduTMWHq9UaTNNU70zvlXGk9Q1ZwYspt6sX5Z+4nWQF
/cnpsglQRnxAtYtgNJN710bws3AFKjVCmH+haokzPxVtJoH2KsxqE6EKTRv4x8xq
dbcjE8R5gYg4+TGL9jm5YuJgBCICR2iVTtIhMprWGvgYQNabAJKzP8uas5S6qHtp
FSczl/4pZsFh3nDR9gnkFMmQdo0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSjpKfl
gBcoDENEUuIHM7pHFV2DOjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI
MA0GCSqGSIb3DQEBCwUAA4IBAQBHO/1mxelrxyY9urHlCfa52jWB8WiW8uwWZ2xj
G4yiOUrv0Z28oa9SvcqlwA9Wz/3YUWdIQVwZApMoT+KefRG/r8tcdP+1Ky6UqEZC
4w336XSxJwpYTdtL99HDdFNWhrbWi6tb/QOVcQ599BI5DXB9fahdLU6wtRvQ9tz/
PNjDNvGSl73poHEFd77yTr5XiNv6yq4DqSJ1pf6GxE3Il4MuNmNMlRAmfpeBPG7R
RO0c3HSaOIWUjs/3kZbyPVgRf5+pa1jtzOcZ7JHczj8kkj39inbNfkPN6/POCu/Z
r+ADJ/MhEeYHJ0HNI4xQDK8vgecetd3CdCoHzfreKTsOt6DL
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:58 2026 by rpki-client