Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
File: 3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa (raw, json)
Hash identifier: HHumvv9l1DlwmcOqHq3URTJ6+zBp8p5PueTM4Stxe4k=
Subject key identifier: F9:40:7B:A9:13:93:F9:3B:6C:65:AD:A6:F9:73:B5:40:39:9E:A6:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F98D0BF7FC6701299C483E0C5DECCE5CC9CF93B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
Signing time: Fri 07 Aug 2026 05:00:09 +0000
ROA not before: Fri 07 Aug 2026 05:00:09 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:98:d0:bf:7f:c6:70:12:99:c4:83:e0:c5:de:cc:e5:cc:9c:f9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:00:09 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9c960dc65a1238a057fc6cf187c4c090d8716cd8f125afac49cf48838141d034, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:c2:1a:43:fe:7c:ae:02:c3:2e:cf:f3:06:
9f:d9:f0:74:dc:ae:49:53:2c:1e:2c:66:c4:ed:8f:
1e:6d:fb:fd:14:c7:9d:f6:d8:e6:aa:ae:10:b4:ca:
76:6a:b6:09:ff:80:e0:ad:c6:45:09:75:86:4d:62:
18:ea:89:e7:1e:45:65:b4:fa:cf:37:80:a1:3b:52:
d8:72:10:5e:60:47:d2:ce:57:bb:90:25:c3:7e:d4:
23:20:5d:d9:00:9c:53:41:85:d6:3a:3a:3c:7f:75:
27:14:49:ac:e2:95:4c:89:6f:ef:23:56:56:f2:3b:
eb:42:75:41:8f:2a:5d:e3:3a:9f:ee:d4:3c:8f:46:
0a:36:9d:4b:b6:2e:2a:f7:36:c5:7d:13:c0:96:31:
3f:4e:2e:65:62:18:eb:54:3c:40:80:d5:fb:15:90:
4f:da:09:e3:46:91:c7:ca:e2:d4:cc:a3:d0:d3:a1:
90:a2:be:dd:41:52:c2:72:ee:41:6d:15:16:1f:83:
a7:ec:3a:2e:b8:ca:09:54:71:ab:74:fb:ae:80:f3:
a3:d8:3a:f9:87:56:43:94:e3:00:f6:88:3c:74:d8:
da:6b:26:90:c1:c4:23:cb:2d:6b:c7:0a:16:2e:78:
30:94:f0:4d:bd:3e:22:af:4a:f0:86:a1:c0:1d:5d:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:7B:A9:13:93:F9:3B:6C:65:AD:A6:F9:73:B5:40:39:9E:A6:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:a2:4a:9c:7e:23:1d:55:5a:79:4d:14:72:71:e3:c0:fa:6e:
b9:ed:72:5c:89:b1:c6:dc:12:15:ac:17:a7:5f:cb:ff:3c:a7:
40:f7:97:1a:49:29:0f:cb:f9:98:8f:47:28:1b:bb:cb:d9:b8:
82:9d:3c:0b:b9:15:e1:5c:7a:02:63:4f:df:71:d5:51:2b:25:
88:c3:41:a0:ee:2d:92:2b:eb:84:13:c8:eb:bb:93:3f:13:59:
c8:93:e1:59:0a:7f:c4:52:7c:9d:25:88:7a:0c:d0:85:19:03:
19:a1:0e:bf:9f:f3:22:38:03:41:9e:15:19:5e:97:3d:25:cf:
0d:43:c6:4a:94:eb:7b:f6:c2:7a:2b:5c:74:bb:d2:43:1d:7f:
bd:79:b1:77:da:03:c0:38:6e:4e:2c:df:aa:8f:9b:a2:42:a6:
34:fd:fe:80:0f:ed:cc:6e:a0:c8:ff:f3:5d:d6:f1:14:3b:fd:
3f:09:6a:90:72:92:f9:37:e9:17:2a:89:6f:e1:bc:30:3b:f1:
03:9f:8d:8b:e4:b6:f0:5d:7e:8d:c4:a6:13:bd:58:fb:2d:3b:
15:41:01:69:14:34:72:5e:9b:69:29:bb:32:45:9e:ff:66:6c:
fb:69:8f:0e:ad:6b:2e:16:3b:cd:1c:5d:4f:34:98:22:c1:d2:
f5:8b:66:43
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUP5jQv3/GcBKZxIPgxd7M5cyc+TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTAwMDlaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDljOTYwZGM2NWExMjM4YTA1N2ZjNmNmMTg3YzRjMDkwZDg3MTZjZDhmMTI1
YWZhYzQ5Y2Y0ODgzODE0MWQwMzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKemwhpD/nyuAsMuz/MGn9nwdNyuSVMsHixmxO2PHm37/RTHnfbY5qquELTK
dmq2Cf+A4K3GRQl1hk1iGOqJ5x5FZbT6zzeAoTtS2HIQXmBH0s5Xu5Alw37UIyBd
2QCcU0GF1jo6PH91JxRJrOKVTIlv7yNWVvI760J1QY8qXeM6n+7UPI9GCjadS7Yu
Kvc2xX0TwJYxP04uZWIY61Q8QIDV+xWQT9oJ40aRx8ri1Myj0NOhkKK+3UFSwnLu
QW0VFh+Dp+w6LrjKCVRxq3T7roDzo9g6+YdWQ5TjAPaIPHTY2msmkMHEI8sta8cK
Fi54MJTwTb0+Iq9K8IahwB1duT0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT5QHup
E5P5O2xlrab5c7VAOZ6m9DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2E2YWJhMWYtNDQwZS00ODc0LTkxOTMtYTNhMWY2ZWEzZWVjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HKw
MA0GCSqGSIb3DQEBCwUAA4IBAQCmokqcfiMdVVp5TRRycePA+m657XJcibHG3BIV
rBenX8v/PKdA95caSSkPy/mYj0coG7vL2biCnTwLuRXhXHoCY0/fcdVRKyWIw0Gg
7i2SK+uEE8jru5M/E1nIk+FZCn/EUnydJYh6DNCFGQMZoQ6/n/MiOANBnhUZXpc9
Jc8NQ8ZKlOt79sJ6K1x0u9JDHX+9ebF32gPAOG5OLN+qj5uiQqY0/f6AD+3MbqDI
//Nd1vEUO/0/CWqQcpL5N+kXKolv4bwwO/EDn42L5LbwXX6NxKYTvVj7LTsVQQFp
FDRyXptpKbsyRZ7/Zmz7aY8OrWsuFjvNHF1PNJgiwdL1i2ZD
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:59:52 2026 by rpki-client