Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa
File: 8c18535d-3e9d-4891-b30b-4807af4b80f1.roa (raw, json)
Hash identifier: 3BgxRi5Edglh1jk9uOodnNTDwe9WB6VqN0XaKQqx7Lo=
Subject key identifier: C2:F4:AE:9C:70:87:E9:A2:A4:DC:C0:28:49:FB:11:51:55:E4:A8:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 384A03E3F3146732100E13B82C8FDEFD0E6BAC53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa
Signing time: Mon 03 Aug 2026 02:50:10 +0000
ROA not before: Mon 03 Aug 2026 02:50:10 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4a:03:e3:f3:14:67:32:10:0e:13:b8:2c:8f:de:fd:0e:6b:ac:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 3 02:50:10 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=14efe934ea39e6f46a8a148c7fc2f09293e372642bc0abac59c25253bcb98a26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:1f:91:7b:a0:31:69:c6:7b:18:26:41:86:
6f:23:d5:b4:07:15:dc:32:7a:0a:39:09:e1:1d:d2:
0a:9e:78:f9:eb:b0:2d:46:2f:f8:c6:bc:3e:6c:fe:
35:77:db:5d:44:22:02:01:f6:c0:a2:fa:01:af:fe:
d8:c2:41:09:38:94:88:a3:fb:68:dd:12:e9:5b:4a:
f1:f4:cd:65:2f:26:aa:b3:50:e1:8d:f4:7a:ca:d2:
1a:47:22:5b:ac:1e:23:e0:02:88:4b:51:64:e2:1a:
d6:f4:70:d9:ea:83:e6:b7:4c:ff:b3:61:f1:f2:45:
41:9f:45:f7:41:af:60:b0:01:63:d0:79:62:28:52:
d9:46:df:ac:7c:f6:79:c9:d4:38:74:45:9f:1d:44:
a7:22:cc:85:43:08:9a:05:56:a2:ac:f0:b8:c2:87:
ec:6f:ba:ca:20:4b:f2:ef:5b:84:9d:e3:62:a6:7f:
95:7e:22:ac:32:86:e8:cd:1f:6c:ff:c2:6e:7a:41:
1b:8e:ba:c5:b2:fb:67:cf:14:24:79:0e:c3:c6:58:
8e:28:fd:8e:e8:9f:4c:48:a6:b0:f7:bf:25:e2:53:
df:42:68:ab:8d:f2:1a:fe:cf:5e:89:da:e3:fc:33:
33:d2:10:f5:f2:c1:73:93:7c:c5:42:bc:66:97:bb:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:AE:9C:70:87:E9:A2:A4:DC:C0:28:49:FB:11:51:55:E4:A8:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8c18535d-3e9d-4891-b30b-4807af4b80f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:5000::/48
Signature Algorithm: sha256WithRSAEncryption
a4:a1:fa:73:79:b3:9b:d6:22:54:d7:6d:03:1c:8c:4e:58:24:
f8:74:74:c4:8b:f4:e5:dc:98:ca:53:17:08:04:8c:4a:c1:41:
17:63:79:05:d0:76:32:13:09:1e:6c:43:3b:16:61:40:7a:ca:
1a:5a:4b:2c:33:c0:71:50:e2:aa:e4:ac:5e:4f:7f:65:98:00:
40:fc:3b:ef:63:48:fe:09:27:0c:94:11:1b:7e:3b:4b:63:14:
99:18:2f:5d:e5:26:b4:24:7e:d0:60:fb:a0:02:16:7a:7f:2a:
2d:ed:26:41:ab:6f:c3:09:a4:76:fd:b5:92:19:9c:0e:4f:dd:
ed:37:1f:20:dd:f9:e8:bd:5c:f6:3c:d8:d8:f9:7f:60:33:59:
7e:4e:a1:9d:c4:cc:25:e7:8d:12:50:b1:f8:30:02:42:82:99:
e7:b3:02:4e:c8:cd:6b:c3:80:e5:1e:c3:c4:4e:9e:f7:8c:e9:
bc:5a:e3:24:c7:51:e9:cf:84:27:6d:61:04:3f:32:b0:af:d0:
00:2e:a5:57:03:67:28:3c:4b:eb:82:10:e8:20:d6:f1:d3:6a:
3d:68:fe:3b:82:bc:41:42:37:5a:f7:22:4b:be:f0:80:63:65:
a4:c3:36:eb:c3:b5:e0:d6:94:02:1f:c9:e7:0f:4e:75:74:65:
11:3e:c5:ab
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOEoD4/MUZzIQDhO4LI/e/Q5rrFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDMwMjUwMTBaFw0yNjExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDE0ZWZlOTM0ZWEzOWU2ZjQ2YThhMTQ4YzdmYzJmMDkyOTNlMzcyNjQyYmMw
YWJhYzU5YzI1MjUzYmNiOThhMjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALS9H5F7oDFpxnsYJkGGbyPVtAcV3DJ6CjkJ4R3SCp54+euwLUYv+Ma8Pmz+
NXfbXUQiAgH2wKL6Aa/+2MJBCTiUiKP7aN0S6VtK8fTNZS8mqrNQ4Y30esrSGkci
W6weI+ACiEtRZOIa1vRw2eqD5rdM/7Nh8fJFQZ9F90GvYLABY9B5YihS2UbfrHz2
ecnUOHRFnx1EpyLMhUMImgVWoqzwuMKH7G+6yiBL8u9bhJ3jYqZ/lX4irDKG6M0f
bP/CbnpBG466xbL7Z88UJHkOw8ZYjij9juifTEimsPe/JeJT30Joq43yGv7PXona
4/wzM9IQ9fLBc5N8xUK8Zpe7JAECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTC9K6c
cIfpoqTcwChJ+xFRVeSoBjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGMxODUzNWQtM2U5ZC00ODkxLWIzMGItNDgwN2FmNGI4MGYxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GxQ
ADANBgkqhkiG9w0BAQsFAAOCAQEApKH6c3mzm9YiVNdtAxyMTlgk+HR0xIv05dyY
ylMXCASMSsFBF2N5BdB2MhMJHmxDOxZhQHrKGlpLLDPAcVDiquSsXk9/ZZgAQPw7
72NI/gknDJQRG347S2MUmRgvXeUmtCR+0GD7oAIWen8qLe0mQatvwwmkdv21khmc
Dk/d7TcfIN356L1c9jzY2Pl/YDNZfk6hncTMJeeNElCx+DACQoKZ57MCTsjNa8OA
5R7DxE6e94zpvFrjJMdR6c+EJ21hBD8ysK/QAC6lVwNnKDxL64IQ6CDW8dNqPWj+
O4K8QUI3WvciS77wgGNlpMM268O14NaUAh/J5w9OdXRlET7Fqw==
-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:28 2026 by rpki-client