Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
File: 5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa (raw, json)
Hash identifier: YeAocFeV4tDRRYGRFSjJIP1hplEvy/oIuhfIsSyKFvA=
Subject key identifier: B4:54:54:42:92:40:C9:1A:99:60:3E:C2:0D:22:6E:63:52:8E:12:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B4B3C915F2A3562BDDC8A14FBA34BAC70ACA965
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
Signing time: Mon 10 Aug 2026 01:00:34 +0000
ROA not before: Mon 10 Aug 2026 01:00:34 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d068:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4b:3c:91:5f:2a:35:62:bd:dc:8a:14:fb:a3:4b:ac:70:ac:a9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 10 01:00:34 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=6e720d4f421991969dc3edcbfc362cc20c55eea679e1afad5063e4c8ff7df95d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:7f:ed:ee:ed:8b:57:26:3a:6a:d3:48:a8:
5e:e8:76:80:ed:b5:8c:80:9f:6a:46:c4:8c:e5:f5:
ef:08:47:3c:dc:9d:fe:f1:63:f7:9c:02:31:39:62:
1e:c9:3f:9e:76:e5:e0:b7:74:d6:25:0a:fd:b3:fe:
f8:69:3c:b2:91:49:03:d6:28:8a:7a:3b:53:7d:68:
04:21:3a:57:65:b9:bf:0a:6c:24:1b:3f:3a:72:38:
eb:fb:f3:1e:c8:d7:17:39:ba:0a:0a:b4:a1:95:52:
6d:48:81:77:aa:30:94:ce:d4:f5:d0:5f:57:9c:31:
d5:30:89:6e:b1:95:a3:71:be:b7:59:2c:88:07:1c:
c3:33:ae:2a:63:f5:1f:5f:05:78:d2:d0:1c:4e:74:
6d:24:c6:8b:ec:cc:6b:fe:ac:09:b0:ab:68:bc:9c:
66:cd:a7:0b:6e:14:72:2f:19:1f:2f:7a:2e:80:ff:
1d:da:29:3b:ed:ac:9b:df:3b:1f:93:a7:76:2f:fe:
45:46:70:46:cf:df:35:e6:86:df:b3:33:ad:86:cf:
b7:fb:b9:0c:0a:eb:fc:93:dd:a7:16:10:0f:8d:cd:
76:f3:2b:12:24:7d:67:1b:c4:24:0a:00:ce:37:b2:
93:8b:e5:24:84:38:08:85:bc:8a:15:07:d7:da:e9:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:54:42:92:40:C9:1A:99:60:3E:C2:0D:22:6E:63:52:8E:12:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5431e442-9e5b-47fe-bfc0-83e11e3e8e67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d068:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
45:05:13:52:d0:02:7e:0f:c8:c2:e1:27:27:a0:03:ad:9e:88:
64:62:71:30:5d:04:78:02:d0:31:9a:66:17:51:22:d2:c5:e7:
c1:10:fa:09:e8:0c:dd:06:d7:4a:47:b1:ce:65:65:f2:b9:04:
6d:67:f4:f0:36:31:26:49:3b:13:85:4c:ca:e6:b7:18:13:15:
85:ef:2a:31:73:85:95:c2:81:1e:40:66:2e:91:dc:e5:28:8f:
a2:77:80:2c:4e:ff:03:40:6e:32:09:8a:33:09:4e:69:1e:49:
56:fe:48:7f:a5:88:88:a7:7f:a2:91:6d:3c:7d:ca:fe:3e:3e:
23:02:72:50:6d:3e:e7:eb:8c:49:42:d1:e6:4f:5b:5d:cc:2e:
9a:c4:0e:11:14:9c:9e:bc:16:e6:f8:69:3a:65:e7:c3:fd:62:
9f:17:9a:63:5f:83:a5:de:d3:d4:03:30:82:a7:af:1b:98:ae:
fe:bc:a9:0f:4d:d2:73:3c:d8:20:3c:b3:dd:cd:9b:12:6a:68:
5a:11:ca:02:9e:4d:47:fc:3a:4e:94:69:23:d8:f1:d8:7b:d5:
58:02:d7:d5:65:2e:65:04:59:36:b2:a8:3b:96:c6:f9:64:58:
3b:14:ce:d2:c2:50:6e:4b:0f:af:37:61:4d:f2:2e:1c:7d:1e:
b2:5d:bc:98
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUO0s8kV8qNWK93IoU+6NLrHCsqWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MTAwMTAwMzRaFw0yNjExMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlNzIwZDRmNDIxOTkxOTY5ZGMzZWRjYmZjMzYyY2MyMGM1NWVlYTY3OWUx
YWZhZDUwNjNlNGM4ZmY3ZGY5NWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ6gf+3u7YtXJjpq00ioXuh2gO21jICfakbEjOX17whHPNyd/vFj95wCMTli
Hsk/nnbl4Ld01iUK/bP++Gk8spFJA9Yoino7U31oBCE6V2W5vwpsJBs/OnI46/vz
HsjXFzm6Cgq0oZVSbUiBd6owlM7U9dBfV5wx1TCJbrGVo3G+t1ksiAccwzOuKmP1
H18FeNLQHE50bSTGi+zMa/6sCbCraLycZs2nC24Uci8ZHy96LoD/HdopO+2sm987
H5Ondi/+RUZwRs/fNeaG37MzrYbPt/u5DArr/JPdpxYQD43NdvMrEiR9ZxvEJAoA
zjeyk4vlJIQ4CIW8ihUH19rp5w0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS0VFRC
kkDJGplgPsINIm5jUo4SfjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQzMWU0NDItOWU1Yi00N2ZlLWJmYzAtODNlMTFlM2U4ZTY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gig
wDANBgkqhkiG9w0BAQsFAAOCAQEARQUTUtACfg/IwuEnJ6ADrZ6IZGJxMF0EeALQ
MZpmF1Ei0sXnwRD6CegM3QbXSkexzmVl8rkEbWf08DYxJkk7E4VMyua3GBMVhe8q
MXOFlcKBHkBmLpHc5SiPoneALE7/A0BuMgmKMwlOaR5JVv5If6WIiKd/opFtPH3K
/j4+IwJyUG0+5+uMSULR5k9bXcwumsQOERScnrwW5vhpOmXnw/1inxeaY1+Dpd7T
1AMwgqevG5iu/rypD03SczzYIDyz3c2bEmpoWhHKAp5NR/w6TpRpI9jx2HvVWALX
1WUuZQRZNrKoO5bG+WRYOxTO0sJQbksPrzdhTfIuHH0esl28mA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:56 2026 by rpki-client