Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f5cc1ca-0dba-44a7-8bb3-efe848cc79ba.roa
File: 3f5cc1ca-0dba-44a7-8bb3-efe848cc79ba.roa (raw, json)
Hash identifier: aWoRmNEKvQdRKQ4UXE5Ijf/m+ZNKbISjmVaUj6/uB60=
Subject key identifier: 1E:A5:E3:92:F6:52:EE:21:2C:84:B8:03:3F:C8:A9:1E:96:A7:7D:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F046586A6BCA1F09BD54DA0535A808060E69406
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f5cc1ca-0dba-44a7-8bb3-efe848cc79ba.roa
Signing time: Fri 07 Aug 2026 05:31:08 +0000
ROA not before: Fri 07 Aug 2026 05:31:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:04:65:86:a6:bc:a1:f0:9b:d5:4d:a0:53:5a:80:80:60:e6:94:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:31:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f0e8ef94d5268cf04df63eee5e27bd6eaf877b2df74cd8d2720a7fe9eb362117, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:c7:16:cc:fd:81:e9:9e:7f:42:f9:3d:46:
c5:27:63:c8:a2:4b:0e:ca:46:70:8e:7a:e6:74:e6:
d7:1a:ac:94:01:b9:38:97:7b:4f:2d:4a:19:9b:c2:
ea:bd:87:23:c9:48:88:48:35:04:78:17:e2:32:2b:
f9:a9:3e:69:bc:8b:7d:48:49:da:25:ef:87:e6:2e:
f0:46:d0:27:62:71:75:5d:01:1c:7b:58:c6:38:1c:
b2:7a:28:cc:0f:4f:95:94:35:29:23:cb:7b:dd:8b:
8c:ca:77:78:37:1a:20:db:63:2e:6e:8e:62:a3:fb:
d9:94:2f:75:aa:cd:44:1c:d6:05:ea:85:5d:b7:3a:
b7:8f:72:68:dd:b6:29:ee:b7:74:0f:a4:1c:1e:c6:
32:7d:e0:b4:24:b9:a9:af:04:f8:d9:f4:ce:66:3b:
26:8b:dc:8a:e2:29:ce:04:0e:72:74:0a:d8:92:b5:
9c:17:9e:ae:e6:54:22:e5:ad:9d:67:19:38:b6:01:
ac:68:8c:dd:3c:6f:ea:a7:7a:c2:33:db:4f:14:2d:
c5:7b:62:45:a2:ea:dc:89:0e:e9:8e:46:da:1e:27:
8d:7f:d6:0f:8e:d1:fb:a3:3b:dc:b2:df:07:cc:5b:
c8:18:2c:bf:0e:f6:d8:b0:75:2f:c3:62:a5:3f:37:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:E3:92:F6:52:EE:21:2C:84:B8:03:3F:C8:A9:1E:96:A7:7D:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f5cc1ca-0dba-44a7-8bb3-efe848cc79ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8040::/48
Signature Algorithm: sha256WithRSAEncryption
76:1a:79:4c:28:23:bf:c1:8c:e3:5f:7f:56:71:08:50:9a:45:
61:15:71:fb:b6:35:b4:e8:18:ab:dd:aa:d7:69:fa:9d:f4:48:
7c:f0:cb:27:8d:3c:ce:6f:89:f7:fa:9c:e6:a5:72:70:01:af:
c4:5d:35:1d:57:70:b7:73:25:a3:27:5c:8e:a5:2e:d4:fc:02:
07:0b:95:71:0b:23:fa:57:e9:8f:cf:ce:df:77:3e:72:bd:4c:
8b:c1:2d:ea:a8:c3:53:f1:5a:87:85:5d:1e:a1:a7:68:5f:1f:
ce:b3:67:43:e9:be:b4:42:5c:d5:dc:d1:e2:29:1b:54:90:53:
71:97:33:86:38:7d:b0:3c:cd:e2:ce:a6:79:95:1c:7b:1e:0f:
af:da:30:7c:2e:96:6f:d7:22:9a:3f:de:23:0b:1a:50:77:c1:
2b:77:0b:32:68:03:44:a4:59:69:bf:8a:b6:fd:11:48:31:fe:
20:f0:7f:dc:b1:77:0d:5a:3e:80:d5:c7:50:34:5a:81:2d:88:
76:56:74:16:a0:e0:90:0a:5d:dc:60:79:57:a7:2c:ea:e6:ef:
a0:7d:69:6c:18:8a:1c:f3:0f:41:9e:8e:c2:5a:ff:e8:08:37:
fd:4a:81:8b:5c:c9:34:f8:53:fa:d0:05:fc:58:7b:a1:d9:1b:
7a:6a:20:f2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHwRlhqa8ofCb1U2gU1qAgGDmlAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMxMDhaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwZThlZjk0ZDUyNjhjZjA0ZGY2M2VlZTVlMjdiZDZlYWY4NzdiMmRmNzRj
ZDhkMjcyMGE3ZmU5ZWIzNjIxMTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCXxxbM/YHpnn9C+T1GxSdjyKJLDspGcI565nTm1xqslAG5OJd7Ty1KGZvC
6r2HI8lIiEg1BHgX4jIr+ak+abyLfUhJ2iXvh+Yu8EbQJ2JxdV0BHHtYxjgcsnoo
zA9PlZQ1KSPLe92LjMp3eDcaINtjLm6OYqP72ZQvdarNRBzWBeqFXbc6t49yaN22
Ke63dA+kHB7GMn3gtCS5qa8E+Nn0zmY7JovciuIpzgQOcnQK2JK1nBeeruZUIuWt
nWcZOLYBrGiM3Txv6qd6wjPbTxQtxXtiRaLq3IkO6Y5G2h4njX/WD47R+6M73LLf
B8xbyBgsvw722LB1L8NipT83WJMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQepeOS
9lLuISyEuAM/yKkelqd9RTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2Y1Y2MxY2EtMGRiYS00NGE3LThiYjMtZWZlODQ4Y2M3OWJhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA
QDANBgkqhkiG9w0BAQsFAAOCAQEAdhp5TCgjv8GM419/VnEIUJpFYRVx+7Y1tOgY
q92q12n6nfRIfPDLJ408zm+J9/qc5qVycAGvxF01HVdwt3MloydcjqUu1PwCBwuV
cQsj+lfpj8/O33c+cr1Mi8Et6qjDU/Fah4VdHqGnaF8fzrNnQ+m+tEJc1dzR4ikb
VJBTcZczhjh9sDzN4s6meZUcex4Pr9owfC6Wb9cimj/eIwsaUHfBK3cLMmgDRKRZ
ab+Ktv0RSDH+IPB/3LF3DVo+gNXHUDRagS2IdlZ0FqDgkApd3GB5V6cs6ubvoH1p
bBiKHPMPQZ6Owlr/6Ag3/UqBi1zJNPhT+tAF/Fh7odkbemog8g==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:58:59 2026 by rpki-client