Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35a8717c-ecf6-4cf7-a73c-f566f7884a16.roa
File: 35a8717c-ecf6-4cf7-a73c-f566f7884a16.roa (raw, json)
Hash identifier: xhknPEceIHoiaOUOYkd1SBc0qPMxKyjrdsSfjQXjung=
Subject key identifier: 70:7A:D9:23:04:CC:E8:DC:D0:13:C0:F6:68:2D:A2:EE:97:FE:59:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E92836509536FAA92C9650DA424F2B2BAD11DA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35a8717c-ecf6-4cf7-a73c-f566f7884a16.roa
Signing time: Fri 07 Aug 2026 04:30:59 +0000
ROA not before: Fri 07 Aug 2026 04:30:59 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:92:83:65:09:53:6f:aa:92:c9:65:0d:a4:24:f2:b2:ba:d1:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:59 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=44155af0e612bfb10b3a6bd23ba66d62562b49d66de02f8e0bba37359ec6e2a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:1c:48:90:87:d7:86:35:ff:2f:86:7f:eb:
5a:9d:77:da:8c:83:e8:82:eb:2b:f1:34:6c:e2:f1:
d1:7e:20:52:a8:5e:3c:f8:15:7f:bf:a9:e7:ed:e8:
ae:bc:d7:54:e3:92:3b:b5:41:ad:67:5c:fd:95:98:
23:49:d5:01:be:47:ce:4d:9d:e7:aa:d5:cc:4e:73:
fa:1e:8f:82:47:07:67:c5:7f:ee:72:d4:93:c9:a7:
c0:77:a6:0a:43:d2:8e:92:71:ba:2b:2c:80:b8:52:
47:28:02:50:a3:c7:19:f3:e8:ec:7f:d5:29:75:43:
d9:58:e5:41:c7:6e:11:64:e9:0e:b0:21:7d:a1:a0:
07:32:76:10:c2:97:ce:21:55:ea:83:d8:95:82:8b:
8f:60:7f:18:17:e3:49:73:1d:4d:e5:5a:d5:49:3f:
af:e0:53:75:1d:11:ad:a1:4e:57:ab:44:2d:22:95:
52:32:6a:f3:1d:2b:79:84:d6:1f:29:43:5d:b6:1b:
1d:8b:eb:e0:9e:27:37:89:55:2e:23:6b:75:34:ba:
48:c3:5e:fe:23:1b:13:ca:46:00:4d:07:cf:ff:82:
15:40:d9:d7:f8:eb:9b:97:36:3e:29:6a:ed:a7:cb:
b3:62:5c:0a:a0:92:a1:02:6a:ec:96:df:f7:22:2d:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:D9:23:04:CC:E8:DC:D0:13:C0:F6:68:2D:A2:EE:97:FE:59:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35a8717c-ecf6-4cf7-a73c-f566f7884a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:2000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:86:68:30:14:92:86:37:d3:d9:d9:20:fa:29:98:c1:bb:32:
d4:6a:51:ca:f1:37:11:85:d3:5a:8f:e0:27:40:a3:b2:4f:b5:
90:87:f5:ee:a2:2f:55:ea:a4:33:b7:3a:9a:d7:d3:d0:a4:82:
38:46:ee:49:31:a5:25:a1:b8:bf:2a:51:d4:4f:b1:5f:96:55:
71:bb:a3:59:1a:2e:19:ae:bc:43:11:b6:3e:16:de:b6:11:59:
02:2e:58:e3:8f:0d:9f:f5:99:54:27:63:c3:17:7e:ad:ad:89:
ee:be:24:ac:af:9f:d7:9e:f1:ff:79:59:ee:20:b0:52:fa:f1:
a6:28:91:6e:9e:86:b4:87:be:cb:e9:ee:11:e1:ef:68:8d:49:
6e:a9:35:19:4a:08:d9:a9:93:a3:c4:16:d1:18:f3:a8:ec:ec:
82:3e:be:05:9d:e6:1c:93:d9:dc:55:3f:05:2f:12:f7:2f:e7:
25:61:73:96:14:3d:cb:87:e6:fd:2c:b5:09:aa:10:8a:51:74:
93:c9:83:e3:10:da:01:98:c2:77:8b:10:aa:1b:b2:d4:14:1a:
b6:ba:67:8c:8a:e0:1c:e4:66:d6:a8:68:4d:89:90:6c:d7:22:
cf:19:16:ab:18:01:cd:23:a5:bd:83:e5:88:b1:c1:dd:bd:23:
b3:01:d5:5c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHpKDZQlTb6qSyWUNpCTysrrRHaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMwNTlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ0MTU1YWYwZTYxMmJmYjEwYjNhNmJkMjNiYTY2ZDYyNTYyYjQ5ZDY2ZGUw
MmY4ZTBiYmEzNzM1OWVjNmUyYTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+bHEiQh9eGNf8vhn/rWp132oyD6ILrK/E0bOLx0X4gUqhePPgVf7+p5+3o
rrzXVOOSO7VBrWdc/ZWYI0nVAb5Hzk2d56rVzE5z+h6PgkcHZ8V/7nLUk8mnwHem
CkPSjpJxuissgLhSRygCUKPHGfPo7H/VKXVD2VjlQcduEWTpDrAhfaGgBzJ2EMKX
ziFV6oPYlYKLj2B/GBfjSXMdTeVa1Uk/r+BTdR0RraFOV6tELSKVUjJq8x0reYTW
HylDXbYbHYvr4J4nN4lVLiNrdTS6SMNe/iMbE8pGAE0Hz/+CFUDZ1/jrm5c2Pilq
7afLs2JcCqCSoQJq7Jbf9yIt9ZsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRwetkj
BMzo3NATwPZoLaLul/5ZljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzVhODcxN2MtZWNmNi00Y2Y3LWE3M2MtZjU2NmY3ODg0YTE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Fkg
MA0GCSqGSIb3DQEBCwUAA4IBAQCOhmgwFJKGN9PZ2SD6KZjBuzLUalHK8TcRhdNa
j+AnQKOyT7WQh/Xuoi9V6qQztzqa19PQpII4Ru5JMaUlobi/KlHUT7FfllVxu6NZ
Gi4ZrrxDEbY+Ft62EVkCLljjjw2f9ZlUJ2PDF36trYnuviSsr5/XnvH/eVnuILBS
+vGmKJFunoa0h77L6e4R4e9ojUluqTUZSgjZqZOjxBbRGPOo7OyCPr4FneYck9nc
VT8FLxL3L+clYXOWFD3Lh+b9LLUJqhCKUXSTyYPjENoBmMJ3ixCqG7LUFBq2umeM
iuAc5GbWqGhNiZBs1yLPGRarGAHNI6W9g+WIscHdvSOzAdVc
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:23 2026 by rpki-client