Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
File: 375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa (raw, json)
Hash identifier: KQXBtMBnxeGXAt6i6semalfmPk6yQ/017mNtPyGIcqY=
Subject key identifier: E6:CC:D4:68:8A:B1:F7:8C:23:4E:E7:F3:86:64:88:14:37:6E:DF:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A524C399C8450FC194E47AD3A3B1523536725C2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
Signing time: Fri 07 Aug 2026 05:00:29 +0000
ROA not before: Fri 07 Aug 2026 05:00:29 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:52:4c:39:9c:84:50:fc:19:4e:47:ad:3a:3b:15:23:53:67:25:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:29 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=91e27447782f54c0f7094407a36cb72d06beda364b93e6862573eeb7d754050c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:c0:7f:b0:0c:56:69:79:de:42:a8:16:b1:
ad:68:da:2b:12:48:8a:8b:a0:ae:30:49:a0:af:2c:
50:ef:ba:72:83:4d:19:9c:b6:a7:f5:56:52:31:90:
74:02:dc:2e:aa:f9:fb:42:a8:aa:8f:8c:50:18:88:
2e:da:23:8a:bc:88:7d:ce:0e:44:16:60:14:74:8b:
c4:08:2c:7c:d8:b0:15:3a:ae:4c:af:1b:a3:38:a2:
5b:98:d3:4e:ce:7d:f6:8d:54:54:e4:65:33:ab:fa:
76:21:db:1b:3c:a6:1c:6c:f7:61:af:ef:c2:60:b0:
51:22:a2:4b:80:19:5a:cb:e2:02:e0:28:65:59:12:
c1:d8:1e:87:de:bc:f0:59:bb:fb:84:d7:ec:89:53:
1b:8f:23:52:51:ac:4f:be:ec:e0:6b:02:c2:8f:8d:
e0:93:ab:71:2b:67:ce:7f:b2:81:90:eb:4c:4a:a0:
b9:ef:10:43:b6:7a:2b:4e:90:4b:2e:2c:6c:7e:a9:
a0:c7:aa:3f:83:45:28:5a:61:3b:f6:50:bd:7b:95:
7a:39:41:4b:63:96:f7:46:04:41:f5:67:9e:0c:70:
d8:e1:dd:b2:80:2d:5e:c1:73:45:e9:9c:58:65:41:
4b:e2:a7:47:89:15:21:ef:2a:72:5e:aa:c6:67:57:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:D4:68:8A:B1:F7:8C:23:4E:E7:F3:86:64:88:14:37:6E:DF:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
11:fb:b2:fb:c6:4e:68:fe:02:de:a0:8c:93:f3:97:52:6f:dc:
fe:df:1f:45:fe:36:e4:56:93:94:19:e7:82:03:48:af:7e:06:
a5:f6:c1:75:d8:ad:e1:4a:d1:a8:0c:32:18:a0:1f:44:75:e2:
86:62:0c:23:e7:c2:2d:0d:b9:ab:0f:8d:34:3e:75:22:e6:86:
50:3d:b2:f6:c0:fe:a7:09:8a:88:d1:61:91:90:1b:b5:35:28:
7c:b9:d0:fd:c5:1a:53:5a:d8:5b:d2:74:9e:9c:94:4c:fe:23:
dd:a7:7e:0a:ba:4d:32:a4:a8:1b:16:00:aa:e4:b7:a7:88:ae:
70:c2:a5:c6:0a:d2:a3:9f:2e:89:3f:90:9c:2f:b9:05:f0:e7:
a3:f1:1f:3a:17:e6:f6:3f:e5:35:bb:64:b2:7f:bf:09:33:9a:
aa:37:32:91:5a:37:e2:5a:c6:c0:ff:c1:6b:5a:3f:be:0e:69:
cd:c9:d9:f1:7e:ca:00:dc:60:fd:38:d2:eb:1b:58:ad:cd:f5:
89:84:28:59:9d:5b:90:39:2c:a5:d7:59:8e:3e:17:9e:68:f3:
01:46:7b:77:90:16:29:9b:a0:cb:97:28:78:7e:cc:35:d8:6c:
3a:c7:c5:ec:d6:df:b8:b5:f7:a9:d5:98:8c:e0:a6:c2:f5:02:
98:5f:2d:cc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOlJMOZyEUPwZTketOjsVI1NnJcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTAwMjlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxZTI3NDQ3NzgyZjU0YzBmNzA5NDQwN2EzNmNiNzJkMDZiZWRhMzY0Yjkz
ZTY4NjI1NzNlZWI3ZDc1NDA1MGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+IwH+wDFZped5CqBaxrWjaKxJIiougrjBJoK8sUO+6coNNGZy2p/VWUjGQ
dALcLqr5+0Koqo+MUBiILtojiryIfc4ORBZgFHSLxAgsfNiwFTquTK8boziiW5jT
Ts599o1UVORlM6v6diHbGzymHGz3Ya/vwmCwUSKiS4AZWsviAuAoZVkSwdgeh968
8Fm7+4TX7IlTG48jUlGsT77s4GsCwo+N4JOrcStnzn+ygZDrTEqgue8QQ7Z6K06Q
Sy4sbH6poMeqP4NFKFphO/ZQvXuVejlBS2OW90YEQfVnngxw2OHdsoAtXsFzRemc
WGVBS+KnR4kVIe8qcl6qxmdXfk8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTmzNRo
irH3jCNO5/OGZIgUN27fxDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mzc1YjJhMzEtMmJmNS00OWFlLTg3M2YtNjExY2IzZWZkNmU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dog
MA0GCSqGSIb3DQEBCwUAA4IBAQAR+7L7xk5o/gLeoIyT85dSb9z+3x9F/jbkVpOU
GeeCA0ivfgal9sF12K3hStGoDDIYoB9EdeKGYgwj58ItDbmrD400PnUi5oZQPbL2
wP6nCYqI0WGRkBu1NSh8udD9xRpTWthb0nSenJRM/iPdp34Kuk0ypKgbFgCq5Len
iK5wwqXGCtKjny6JP5CcL7kF8Oej8R86F+b2P+U1u2Syf78JM5qqNzKRWjfiWsbA
/8FrWj++DmnNydnxfsoA3GD9ONLrG1itzfWJhChZnVuQOSyl11mOPheeaPMBRnt3
kBYpm6DLlyh4fsw12Gw6x8Xs1t+4tfep1ZiM4KbC9QKYXy3M
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:55 2026 by rpki-client