Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34a56d6c-2cd9-43c3-8579-8de78d10c5b5.roa
File: 34a56d6c-2cd9-43c3-8579-8de78d10c5b5.roa (raw, json)
Hash identifier: QHv+Mp9Edizj7B207mpCI1rDdobGrliDnrwhfBrUoGw=
Subject key identifier: 45:56:13:FA:69:86:71:7C:68:A1:79:55:97:42:71:F5:EE:3F:72:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 701B09A34963B84FD4D6D972A385F91922FCDF53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34a56d6c-2cd9-43c3-8579-8de78d10c5b5.roa
Signing time: Wed 09 Sep 2026 16:15:19 +0000
ROA not before: Wed 09 Sep 2026 16:15:19 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1b:09:a3:49:63:b8:4f:d4:d6:d9:72:a3:85:f9:19:22:fc:df:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 16:15:19 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=36ae39f20418f9dd3cd164ed79dfef80b0d6a93aab5ab928787755d21b3d42a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:07:bd:e5:e5:26:b3:6a:dc:1e:5a:13:bd:
4c:07:ba:d6:1e:7f:57:ce:e0:3e:91:a5:51:57:cc:
d3:93:2d:90:54:b3:05:c9:c5:ee:24:b6:55:57:3c:
bd:b3:34:3e:a4:aa:01:5e:35:ff:2b:1c:72:d8:4c:
5e:b9:a5:4e:78:47:4d:b4:5a:db:00:e8:a2:a6:05:
e0:b5:90:9b:fe:50:e3:01:45:b0:a3:7e:b3:97:16:
9d:27:34:4e:a1:62:18:42:c4:91:5f:13:2c:18:4e:
f6:93:7c:ab:5c:e0:b1:5f:6e:10:89:21:3f:2b:64:
66:16:89:19:09:77:2c:c4:e4:82:5b:bf:b0:b1:0c:
a1:cc:af:67:a0:13:88:7e:5b:dd:0c:21:10:fc:98:
1b:95:74:6e:c9:52:a3:d2:95:86:54:6f:07:3c:a6:
87:22:bb:ad:5e:e8:84:a6:1e:b8:37:a8:60:05:70:
fd:f5:78:16:b0:12:1d:d3:6b:b6:9c:95:31:8c:57:
1b:d2:82:b2:32:44:16:f9:4d:2a:c1:56:b3:b1:5c:
61:11:f9:9d:1d:c5:57:b7:f9:c0:6e:87:a3:f0:53:
8d:02:c4:a5:38:b9:92:93:4d:61:fd:71:17:9a:c7:
da:dc:64:5c:1b:58:1f:95:5f:51:4a:6a:3e:4c:3d:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:13:FA:69:86:71:7C:68:A1:79:55:97:42:71:F5:EE:3F:72:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/34a56d6c-2cd9-43c3-8579-8de78d10c5b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:8800::/40
Signature Algorithm: sha256WithRSAEncryption
99:3f:38:d1:48:2e:bc:81:75:dd:eb:7c:93:20:de:ce:3e:84:
c1:40:a7:e1:d1:0f:66:58:12:b4:25:03:69:a5:c8:49:02:b7:
d3:87:54:93:5c:c1:fe:a6:c3:19:e1:c3:28:48:b9:3a:a4:2d:
4f:7d:d4:a6:93:ba:ad:6b:0a:e1:44:07:97:5c:ff:64:69:67:
3c:67:3b:02:2a:71:91:e2:d4:6c:05:e8:05:83:fe:d7:0b:1d:
15:cf:a1:58:24:db:d2:10:27:53:25:48:b3:f5:bd:c3:4e:90:
12:0c:29:07:de:04:fd:a6:d5:e5:cb:c1:57:37:5c:92:c4:31:
97:57:31:cf:9d:b5:2f:55:f1:e9:3f:da:af:fb:27:a9:e9:ae:
1c:9a:50:b7:16:2e:b8:2a:d4:1a:6c:ae:76:ef:fa:d5:b8:f9:
f8:a5:e6:11:e1:b2:23:e0:c3:be:b4:ca:38:03:93:7a:a9:83:
96:30:e5:df:df:1d:4d:e4:7f:66:60:05:0a:93:3b:4c:64:17:
05:b6:25:66:bf:cd:45:d3:2c:d3:e8:e6:25:7b:5b:ec:f7:e6:
3d:82:b2:7e:c6:e3:05:be:db:17:e6:c2:5e:c8:fd:68:b9:2a:
9d:8a:7c:aa:66:ae:b1:32:91:e2:e9:d7:ea:14:30:9b:a9:b2:
46:31:31:e8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcBsJo0ljuE/U1tlyo4X5GSL831MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MDkxNjE1MTlaFw0yNjEyMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDM2YWUzOWYyMDQxOGY5ZGQzY2QxNjRlZDc5ZGZlZjgwYjBkNmE5M2FhYjVh
YjkyODc4Nzc1NWQyMWIzZDQyYTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJtnB73l5SazatweWhO9TAe61h5/V87gPpGlUVfM05MtkFSzBcnF7iS2VVc8
vbM0PqSqAV41/ysccthMXrmlTnhHTbRa2wDooqYF4LWQm/5Q4wFFsKN+s5cWnSc0
TqFiGELEkV8TLBhO9pN8q1zgsV9uEIkhPytkZhaJGQl3LMTkglu/sLEMocyvZ6AT
iH5b3QwhEPyYG5V0bslSo9KVhlRvBzymhyK7rV7ohKYeuDeoYAVw/fV4FrASHdNr
tpyVMYxXG9KCsjJEFvlNKsFWs7FcYRH5nR3FV7f5wG6Ho/BTjQLEpTi5kpNNYf1x
F5rH2txkXBtYH5VfUUpqPkw9uQ0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRFVhP6
aYZxfGiheVWXQnH17j9yZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzRhNTZkNmMtMmNkOS00M2MzLTg1NzktOGRlNzhkMTBjNWI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FiI
MA0GCSqGSIb3DQEBCwUAA4IBAQCZPzjRSC68gXXd63yTIN7OPoTBQKfh0Q9mWBK0
JQNppchJArfTh1STXMH+psMZ4cMoSLk6pC1PfdSmk7qtawrhRAeXXP9kaWc8ZzsC
KnGR4tRsBegFg/7XCx0Vz6FYJNvSECdTJUiz9b3DTpASDCkH3gT9ptXly8FXN1yS
xDGXVzHPnbUvVfHpP9qv+yep6a4cmlC3Fi64KtQabK527/rVuPn4peYR4bIj4MO+
tMo4A5N6qYOWMOXf3x1N5H9mYAUKkztMZBcFtiVmv81F0yzT6OYle1vs9+Y9grJ+
xuMFvtsX5sJeyP1ouSqdinyqZq6xMpHi6dfqFDCbqbJGMTHo
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:47:33 2026 by rpki-client