Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
File: 67337a3a-3355-4837-82d2-cf7e20d337c6.roa (raw, json)
Hash identifier: KWI+wSnyV/Z+y6TLMxYHJ/OhQUMxsKqTyjcH45oqeIg=
Subject key identifier: D2:E1:AE:CD:EF:4F:23:F9:7D:C1:4F:36:EB:8A:68:D7:EB:EB:63:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 344E12F02A00CEDE7CB4EA128265F41BE5788AD2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
Signing time: Thu 10 Sep 2026 02:40:40 +0000
ROA not before: Thu 10 Sep 2026 02:40:40 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4e:12:f0:2a:00:ce:de:7c:b4:ea:12:82:65:f4:1b:e5:78:8a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 10 02:40:40 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=f284966e38e33cb28cbee753f6c65b09fc18e67d59f08f4d3f7ca785863d34ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:cc:f3:93:0c:4a:d2:e3:3e:f9:37:b3:74:
1a:81:c7:96:aa:07:ff:0c:bd:6a:f6:2e:f1:6b:d3:
fd:95:20:97:b2:bc:86:44:88:5d:2d:e9:a6:be:0d:
29:6e:76:34:a2:ce:19:6c:12:b3:a1:0d:8e:b3:e0:
4b:73:b5:3f:89:e3:77:c8:64:60:97:53:41:7b:23:
e3:d6:e7:05:03:76:aa:e2:38:ac:2a:76:75:3c:84:
4b:f9:57:c9:a9:5b:0e:6d:4f:4f:e6:f7:a3:86:1a:
29:0d:e9:26:92:44:5e:6e:a3:14:bf:3d:95:31:e0:
b0:b0:fc:ac:22:22:6b:65:73:77:fb:0e:36:92:c4:
f1:ac:f2:ae:26:1a:6a:80:c1:fb:27:9c:1b:10:d2:
ea:b1:87:52:b2:fc:ab:bb:9d:0e:06:d4:fb:e4:66:
f9:00:d3:fa:79:93:d4:60:be:66:1f:38:a4:a1:0f:
b5:dd:c8:e5:73:e6:de:b0:fd:1c:24:78:9c:fa:f6:
34:f8:3f:44:ec:74:95:f0:1f:a2:06:2f:ec:da:11:
39:f6:19:ea:e4:6c:af:1e:ce:4e:36:1a:b5:aa:a2:
ae:ca:a0:e2:1d:d6:c2:b2:a6:03:10:b6:46:31:8d:
79:c0:37:27:6c:2d:c9:59:9e:a1:25:b5:8a:00:ba:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:AE:CD:EF:4F:23:F9:7D:C1:4F:36:EB:8A:68:D7:EB:EB:63:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:1080::/48
Signature Algorithm: sha256WithRSAEncryption
5d:3d:04:5d:97:e3:02:3b:36:3f:c4:87:cb:13:64:cd:d2:87:
2e:94:39:8a:b2:51:00:fe:de:7f:53:d1:6d:f1:a4:46:46:63:
7b:4c:64:90:d2:a8:6f:fa:df:8d:b7:f3:d5:89:b9:08:67:f1:
3b:ac:03:2f:73:9c:fa:ea:67:03:a6:e1:2f:25:f7:ff:1e:76:
da:90:53:b1:f3:52:6a:28:90:3b:da:05:b0:00:6b:0f:0b:66:
2e:6a:73:da:b4:0e:55:3a:8a:0d:c7:a8:57:13:27:fc:82:dc:
dd:c1:45:8e:c9:98:52:c5:0c:e9:91:8d:c8:5f:26:bc:32:e9:
d4:95:d6:5e:61:b1:a9:08:01:0e:21:d8:3d:bd:14:b9:56:4f:
f9:23:dd:8f:4e:68:b0:95:2a:90:f2:4f:0d:c2:6b:13:a2:72:
97:c3:72:6e:a2:a4:fd:b5:de:2b:28:7c:e3:b5:21:f0:a3:5d:
04:d4:61:af:17:07:0b:84:a6:36:b8:1d:6a:f0:f6:ac:24:d9:
70:90:b8:71:5f:25:7c:23:22:41:f1:ca:a3:ec:ba:10:9d:ec:
d4:0c:e8:83:db:82:70:19:6b:fb:fe:ed:7d:ed:d9:1e:b2:5f:
62:32:a4:1f:8b:9f:52:83:6b:43:24:8d:bb:48:3a:7a:e9:5d:
3f:6a:24:26
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUNE4S8CoAzt58tOoSgmX0G+V4itIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA5MTAwMjQwNDBaFw0yNjEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQGYyODQ5NjZlMzhlMzNjYjI4Y2JlZTc1M2Y2YzY1YjA5ZmMxOGU2N2Q1OWYw
OGY0ZDNmN2NhNzg1ODYzZDM0ZWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALT4zPOTDErS4z75N7N0GoHHlqoH/wy9avYu8WvT/ZUgl7K8hkSIXS3ppr4N
KW52NKLOGWwSs6ENjrPgS3O1P4njd8hkYJdTQXsj49bnBQN2quI4rCp2dTyES/lX
yalbDm1PT+b3o4YaKQ3pJpJEXm6jFL89lTHgsLD8rCIia2Vzd/sONpLE8azyriYa
aoDB+yecGxDS6rGHUrL8q7udDgbU++Rm+QDT+nmT1GC+Zh84pKEPtd3I5XPm3rD9
HCR4nPr2NPg/ROx0lfAfogYv7NoROfYZ6uRsrx7OTjYataqirsqg4h3WwrKmAxC2
RjGNecA3J2wtyVmeoSW1igC6KkcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTS4a7N
708j+X3BTzbrimjX6+tjmzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjczMzdhM2EtMzM1NS00ODM3LTgyZDItY2Y3ZTIwZDMzN2M2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GsQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAXT0EXZfjAjs2P8SHyxNkzdKHLpQ5irJRAP7e
f1PRbfGkRkZje0xkkNKob/rfjbfz1Ym5CGfxO6wDL3Oc+upnA6bhLyX3/x522pBT
sfNSaiiQO9oFsABrDwtmLmpz2rQOVTqKDceoVxMn/ILc3cFFjsmYUsUM6ZGNyF8m
vDLp1JXWXmGxqQgBDiHYPb0UuVZP+SPdj05osJUqkPJPDcJrE6Jyl8NybqKk/bXe
Kyh847Uh8KNdBNRhrxcHC4SmNrgdavD2rCTZcJC4cV8lfCMiQfHKo+y6EJ3s1Azo
g9uCcBlr+/7tfe3ZHrJfYjKkH4ufUoNrQySNu0g6euldP2okJg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:50:52 2026 by rpki-client