Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8aeef071-ad76-436d-a059-ad727b09eb3b.roa
File: 8aeef071-ad76-436d-a059-ad727b09eb3b.roa (raw, json)
Hash identifier: eJV6dIjeLrk9kUxJXYsSHOSHCNrkdqGtOb68pqwTp+g=
Subject key identifier: F4:E8:5A:2B:63:E7:05:39:29:58:19:B0:11:F5:55:B4:8D:37:7B:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B4A091FCBAD892033F4C9812F99B957C8FEFD35
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8aeef071-ad76-436d-a059-ad727b09eb3b.roa
Signing time: Fri 07 Aug 2026 05:30:30 +0000
ROA not before: Fri 07 Aug 2026 05:30:30 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4a:09:1f:cb:ad:89:20:33:f4:c9:81:2f:99:b9:57:c8:fe:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:30 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=23c15893bce3f911f1bd96c726d11e695474d2403e54fbf9a264fbecfdb362d1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:2d:1a:88:6b:ff:83:9c:09:a1:2c:17:b8:
d8:9f:92:f9:d3:c3:f0:9a:74:a1:19:a6:f0:a6:ee:
42:f7:45:6a:41:ca:9d:32:63:10:d9:ab:72:5f:84:
c4:9c:65:18:da:5c:0f:59:d0:8d:f0:b7:73:8d:58:
f1:45:a7:b9:d0:27:06:2b:8a:3c:8c:ec:12:a0:66:
35:63:a5:3a:a9:e2:d5:40:97:53:56:cf:14:57:e9:
68:43:9a:3f:2e:cb:59:33:c7:9f:ee:69:a5:64:f4:
67:b6:83:de:fb:d9:b2:51:cf:1b:5e:d4:fa:83:a8:
56:b4:eb:f6:f1:68:d1:df:86:33:eb:cc:3f:19:3d:
c9:68:dc:2d:08:ed:17:9d:fa:6c:7d:df:c8:8d:d8:
3b:35:46:c7:ee:e6:53:c6:95:a1:0d:c6:22:1d:81:
10:d2:b2:86:eb:70:9f:22:41:e5:71:1a:d0:10:eb:
9f:29:69:80:47:23:3c:bb:b0:5c:5c:14:2b:2c:52:
87:50:80:2d:6f:d1:5e:c2:2c:d1:a0:a8:97:8a:fb:
77:be:27:f4:81:23:41:65:59:93:9c:3a:11:44:ec:
20:9b:82:62:b7:21:f4:2d:4b:5b:5b:c4:7b:52:f0:
3c:f8:ad:5e:c3:3b:a6:b8:47:d5:b6:bc:5f:9f:f5:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:5A:2B:63:E7:05:39:29:58:19:B0:11:F5:55:B4:8D:37:7B:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8aeef071-ad76-436d-a059-ad727b09eb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:2000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:41:4f:49:e5:2d:56:ce:83:46:17:4d:5a:a3:19:b5:bd:bc:
c9:c5:5f:8a:43:00:73:21:28:70:f6:34:57:90:ed:be:ca:0f:
d6:44:c1:c2:82:76:db:86:d8:66:57:a7:ec:06:24:78:53:a0:
7a:05:df:08:65:da:cb:d0:67:8d:c0:c6:96:d9:74:c3:05:55:
68:75:f7:50:d5:93:cd:92:16:7d:db:86:83:4a:4e:f5:1b:5f:
a4:9b:21:eb:39:4c:c3:88:1f:e1:3c:56:b9:3c:d1:b7:53:d5:
ef:e3:6b:a0:66:a1:c0:44:bd:83:82:00:cb:49:97:06:11:aa:
9c:df:bf:73:5f:f5:b4:63:66:14:c9:a4:62:79:ad:c7:e6:70:
f0:bc:80:44:4e:09:de:9b:7d:0c:25:d7:b8:3b:d2:a1:47:03:
5a:43:df:8a:8d:36:ba:7a:7d:00:b6:b4:4e:c6:06:64:ec:a1:
27:86:84:2b:1f:fc:49:b1:b0:f1:b2:55:4a:2a:6a:25:66:a2:
06:9f:87:94:18:30:c6:d2:59:bc:c9:64:6e:d2:28:33:66:20:
ea:9f:60:f6:32:c8:e4:ae:27:c8:e1:42:62:cb:8b:f9:1b:86:
c8:11:a2:42:a3:e3:79:04:9b:de:e9:b5:c2:d5:0e:32:1d:35:
49:85:3d:c1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUO0oJH8utiSAz9MmBL5m5V8j+/TUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMzBaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzYzE1ODkzYmNlM2Y5MTFmMWJkOTZjNzI2ZDExZTY5NTQ3NGQyNDAzZTU0
ZmJmOWEyNjRmYmVjZmRiMzYyZDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKNLRqIa/+DnAmhLBe42J+S+dPD8Jp0oRmm8KbuQvdFakHKnTJjENmrcl+E
xJxlGNpcD1nQjfC3c41Y8UWnudAnBiuKPIzsEqBmNWOlOqni1UCXU1bPFFfpaEOa
Py7LWTPHn+5ppWT0Z7aD3vvZslHPG17U+oOoVrTr9vFo0d+GM+vMPxk9yWjcLQjt
F536bH3fyI3YOzVGx+7mU8aVoQ3GIh2BENKyhutwnyJB5XEa0BDrnylpgEcjPLuw
XFwUKyxSh1CALW/RXsIs0aCol4r7d74n9IEjQWVZk5w6EUTsIJuCYrch9C1LW1vE
e1LwPPitXsM7prhH1ba8X5/1/XMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT06For
Y+cFOSlYGbAR9VW0jTd7rjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGFlZWYwNzEtYWQ3Ni00MzZkLWEwNTktYWQ3MjdiMDllYjNiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dgg
MA0GCSqGSIb3DQEBCwUAA4IBAQBfQU9J5S1WzoNGF01aoxm1vbzJxV+KQwBzIShw
9jRXkO2+yg/WRMHCgnbbhthmV6fsBiR4U6B6Bd8IZdrL0GeNwMaW2XTDBVVodfdQ
1ZPNkhZ924aDSk71G1+kmyHrOUzDiB/hPFa5PNG3U9Xv42ugZqHARL2DggDLSZcG
Eaqc379zX/W0Y2YUyaRiea3H5nDwvIBETgnem30MJde4O9KhRwNaQ9+KjTa6en0A
trROxgZk7KEnhoQrH/xJsbDxslVKKmolZqIGn4eUGDDG0lm8yWRu0igzZiDqn2D2
MsjkrifI4UJiy4v5G4bIEaJCo+N5BJve6bXC1Q4yHTVJhT3B
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:59 2026 by rpki-client