Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
File: 3f1caa71-8276-42c2-bf3a-470ac560fb89.roa (raw, json)
Hash identifier: 2U9Upm9Tuy53qKer4aU5b+oCQDrONcHj8F9Uha6mOTc=
Subject key identifier: 9C:98:25:46:5D:56:0B:05:9A:72:9C:92:54:54:DC:96:65:DE:D7:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BA2D72D8DACED507095BB2123798CD68E0E60DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
Signing time: Fri 07 Aug 2026 04:30:17 +0000
ROA not before: Fri 07 Aug 2026 04:30:17 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a2:d7:2d:8d:ac:ed:50:70:95:bb:21:23:79:8c:d6:8e:0e:60:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:17 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c24bf137b10a40b073e339f74f616eee566ac424d9dc11a5de863f9891830cf4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:b2:95:a9:e4:35:1e:9f:f6:3c:92:50:ea:
29:71:6e:e1:37:4f:36:43:d4:37:3a:f9:55:fe:c6:
35:f1:06:00:10:e4:4c:64:82:e1:bc:a6:0a:70:6d:
f9:74:90:1c:48:46:17:60:80:8a:fc:b5:f9:93:21:
de:ae:c7:9d:f8:cc:f6:ee:33:ee:46:fe:9e:13:66:
db:5a:70:48:29:44:b9:3e:66:18:ba:cd:80:61:2d:
31:40:2d:42:a7:51:c5:88:9f:b6:da:02:87:95:fe:
2a:70:34:05:aa:34:55:40:30:50:65:2f:28:8c:28:
68:e9:5b:5a:65:56:0f:72:b3:59:9c:e3:45:f3:5e:
da:0e:5c:88:b6:7e:95:43:47:ce:b5:5b:bf:12:f6:
42:41:e0:b3:9c:77:e6:c5:ed:ad:db:90:9f:e1:a6:
00:55:10:2d:f2:96:ce:61:d9:cd:b0:30:f1:67:80:
48:db:d4:5b:dd:ac:ee:d3:3e:6d:5c:72:f8:73:2d:
e9:26:d8:84:60:11:59:08:28:bf:68:52:c8:04:20:
2b:38:e5:58:21:0a:f0:d0:8c:4f:b2:43:8e:24:ff:
0e:3c:9a:2d:4e:b1:0c:81:66:96:1b:c4:c3:dd:91:
c8:24:19:b1:f5:75:d6:d8:ad:59:36:9f:a1:6d:91:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:25:46:5D:56:0B:05:9A:72:9C:92:54:54:DC:96:65:DE:D7:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f1caa71-8276-42c2-bf3a-470ac560fb89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d::/37
Signature Algorithm: sha256WithRSAEncryption
bc:e1:ba:13:5c:e3:17:4e:9b:94:41:c0:48:23:d5:ad:84:df:
4b:a8:4d:ab:b1:ea:76:56:f0:bf:62:a9:98:8f:db:4c:d9:d9:
84:b1:7b:49:da:ad:ea:2e:63:6c:60:ea:b9:0e:2b:12:34:b8:
99:10:91:af:fd:9a:4b:a3:6a:87:ff:b0:41:ef:01:76:42:0c:
0c:c3:cd:15:df:fc:5c:ce:60:30:24:62:e6:89:c6:78:af:0e:
69:07:25:7b:e7:27:ed:25:4f:38:ca:9d:8d:bd:39:b1:14:4b:
63:44:6c:26:87:81:38:cd:12:c0:11:f9:34:04:b1:0d:2c:12:
16:cf:ea:83:22:b6:fd:19:ee:4b:ba:e5:67:14:54:75:bd:ce:
fa:bb:4c:72:ad:06:b9:a8:4b:a0:74:87:6d:bd:97:16:40:f6:
21:8f:36:b6:df:d8:18:29:ad:48:1c:d0:b9:17:7d:5b:bf:d4:
dc:e4:ff:f8:73:9f:29:a6:40:46:a9:ae:20:bd:31:55:32:16:
b6:79:f8:9a:9c:bc:7d:07:61:95:f8:9f:c7:df:3f:b8:bf:0c:
80:34:88:5f:6a:f8:3d:9c:1e:c2:0a:1e:08:c6:4f:17:77:2e:
d6:28:79:f3:b5:b3:d7:f9:4d:c7:4a:8e:0f:f4:9c:82:cd:f3:
3f:50:37:f3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUe6LXLY2s7VBwlbshI3mM1o4OYN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNDMwMTdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGMyNGJmMTM3YjEwYTQwYjA3M2UzMzlmNzRmNjE2ZWVlNTY2YWM0MjRkOWRj
MTFhNWRlODYzZjk4OTE4MzBjZjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMBJspWp5DUen/Y8klDqKXFu4TdPNkPUNzr5Vf7GNfEGABDkTGSC4bymCnBt
+XSQHEhGF2CAivy1+ZMh3q7HnfjM9u4z7kb+nhNm21pwSClEuT5mGLrNgGEtMUAt
QqdRxYifttoCh5X+KnA0Bao0VUAwUGUvKIwoaOlbWmVWD3KzWZzjRfNe2g5ciLZ+
lUNHzrVbvxL2QkHgs5x35sXtrduQn+GmAFUQLfKWzmHZzbAw8WeASNvUW92s7tM+
bVxy+HMt6SbYhGARWQgov2hSyAQgKzjlWCEK8NCMT7JDjiT/DjyaLU6xDIFmlhvE
w92RyCQZsfV11titWTafoW2RpfECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBScmCVG
XVYLBZpynJJUVNyWZd7XnDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2YxY2FhNzEtODI3Ni00MmMyLWJmM2EtNDcwYWM1NjBmYjg5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0B0A
MA0GCSqGSIb3DQEBCwUAA4IBAQC84boTXOMXTpuUQcBII9WthN9LqE2rsep2VvC/
YqmYj9tM2dmEsXtJ2q3qLmNsYOq5DisSNLiZEJGv/ZpLo2qH/7BB7wF2QgwMw80V
3/xczmAwJGLmicZ4rw5pByV75yftJU84yp2NvTmxFEtjRGwmh4E4zRLAEfk0BLEN
LBIWz+qDIrb9Ge5LuuVnFFR1vc76u0xyrQa5qEugdIdtvZcWQPYhjza239gYKa1I
HNC5F31bv9Tc5P/4c58ppkBGqa4gvTFVMha2efianLx9B2GV+J/H3z+4vwyANIhf
avg9nB7CCh4Ixk8Xdy7WKHnztbPX+U3HSo4P9JyCzfM/UDfz
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:01:21 2026 by rpki-client