Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
File: ca3047ed-6074-479d-9d85-26334085e41c.roa (raw, json)
Hash identifier: yrZki4MYsqxRsv+LLSYrz+Rq+2pqwBQ4vcXngxOV6kY=
Subject key identifier: 04:61:6D:39:39:57:E2:EF:BE:25:DB:9F:2D:AD:96:62:0B:D2:55:9E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6436044023EEF10A6528F7340436493654A1AF85
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
Signing time: Sun 02 Aug 2026 01:40:16 +0000
ROA not before: Sun 02 Aug 2026 01:40:16 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:36:04:40:23:ee:f1:0a:65:28:f7:34:04:36:49:36:54:a1:af:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 2 01:40:16 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=240b23208d7023705659ceb4b86282a98d6004bfbc9d0895d04d02024903f0f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:b4:11:a7:71:b4:a9:6c:af:6b:bc:c1:1b:
51:a4:c7:72:e8:ce:e3:99:54:93:45:39:cc:34:c0:
dd:6b:f3:fc:d8:69:45:7c:0f:56:40:9f:7d:bb:24:
cc:58:ec:d2:6d:fe:ef:79:7b:9e:64:18:80:30:e8:
86:18:66:dc:e5:33:14:81:63:98:59:99:2f:7e:2a:
ab:66:8b:e1:a8:3d:f9:00:55:5a:fb:c5:83:d1:a7:
84:bf:75:32:2d:36:d5:0a:de:49:b8:66:55:3d:77:
a4:98:fd:a7:c5:52:b8:a0:93:fa:b1:41:4f:7f:9a:
4c:22:47:a0:8e:e7:8f:58:f6:76:af:a1:50:c0:2c:
6c:c2:43:fc:35:b4:bd:76:fa:b6:bf:07:84:29:cd:
3d:c4:19:2f:6e:10:67:4b:67:c8:14:35:80:a0:a1:
4c:d2:5e:9a:44:65:9d:43:e7:39:d1:9c:47:d3:22:
55:42:2e:5a:5a:3d:f1:e7:8d:c1:be:e8:a8:f9:49:
10:df:27:c1:d7:09:88:aa:47:5d:1a:aa:e6:18:d0:
48:65:5c:bd:84:a5:5c:5a:44:07:7c:96:7d:14:5e:
5f:e5:17:10:9d:d4:11:7b:1a:88:7c:b9:f6:9c:d4:
52:08:fa:da:b0:e9:1d:ea:bc:67:f4:ef:8d:77:36:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:61:6D:39:39:57:E2:EF:BE:25:DB:9F:2D:AD:96:62:0B:D2:55:9E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.64.0/18
Signature Algorithm: sha256WithRSAEncryption
96:d4:fa:80:c5:25:5e:59:99:cc:7c:d4:e7:44:e3:f6:32:24:
6f:0f:c1:8f:58:b9:00:1e:17:4a:45:dc:82:f0:71:dc:23:37:
67:a0:0f:72:51:15:9d:23:f0:8e:ca:a7:f3:f7:26:1d:f8:0f:
58:44:6f:72:d1:42:f8:8b:55:15:77:5b:ca:8a:cc:b2:64:06:
11:d0:65:ba:19:54:e0:a0:ec:b7:2f:db:c6:2f:c4:07:33:2f:
5a:91:e6:68:f6:bc:36:a3:22:a9:48:89:8d:f4:51:9f:d6:5e:
26:ea:6f:b5:8e:0b:b7:06:b0:83:d6:61:8e:e2:af:69:89:c2:
46:c4:23:3d:f0:85:a6:16:fe:01:3b:59:eb:fd:c6:4e:a6:e2:
2d:48:1d:1b:3e:8e:79:86:66:9b:2e:a3:d2:ae:9c:4c:80:62:
80:2b:84:56:aa:f8:bd:3e:a6:ed:18:55:4f:44:c0:72:bc:74:
58:4a:85:71:10:3b:c9:16:14:7b:60:cf:09:7a:33:81:e3:09:
36:45:51:3a:30:33:3f:93:ae:f0:f9:8c:3a:c8:8c:3a:ce:70:
c4:c1:ee:a6:68:2f:98:23:f4:74:5e:02:42:74:ea:f5:3e:46:
c9:8c:3e:44:a4:2e:38:a0:bd:e8:79:70:2e:73:40:81:cf:b2:
22:60:74:75
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUZDYEQCPu8QplKPc0BDZJNlShr4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDIwMTQwMTZaFw0yNjEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDI0MGIyMzIwOGQ3MDIzNzA1NjU5Y2ViNGI4NjI4MmE5OGQ2MDA0YmZiYzlk
MDg5NWQwNGQwMjAyNDkwM2YwZjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKeDtBGncbSpbK9rvMEbUaTHcujO45lUk0U5zDTA3Wvz/NhpRXwPVkCffbsk
zFjs0m3+73l7nmQYgDDohhhm3OUzFIFjmFmZL34qq2aL4ag9+QBVWvvFg9GnhL91
Mi021QreSbhmVT13pJj9p8VSuKCT+rFBT3+aTCJHoI7nj1j2dq+hUMAsbMJD/DW0
vXb6tr8HhCnNPcQZL24QZ0tnyBQ1gKChTNJemkRlnUPnOdGcR9MiVUIuWlo98eeN
wb7oqPlJEN8nwdcJiKpHXRqq5hjQSGVcvYSlXFpEB3yWfRReX+UXEJ3UEXsaiHy5
9pzUUgj62rDpHeq8Z/TvjXc24ukCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQEYW05
OVfi774l258trZZiC9JVnjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2EzMDQ3ZWQtNjA3NC00NzlkLTlkODUtMjYzMzQwODVlNDFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrAiQDAN
BgkqhkiG9w0BAQsFAAOCAQEAltT6gMUlXlmZzHzU50Tj9jIkbw/Bj1i5AB4XSkXc
gvBx3CM3Z6APclEVnSPwjsqn8/cmHfgPWERvctFC+ItVFXdbyorMsmQGEdBluhlU
4KDsty/bxi/EBzMvWpHmaPa8NqMiqUiJjfRRn9ZeJupvtY4Ltwawg9ZhjuKvaYnC
RsQjPfCFphb+ATtZ6/3GTqbiLUgdGz6OeYZmmy6j0q6cTIBigCuEVqr4vT6m7RhV
T0TAcrx0WEqFcRA7yRYUe2DPCXozgeMJNkVROjAzP5Ou8PmMOsiMOs5wxMHupmgv
mCP0dF4CQnTq9T5GyYw+RKQuOKC96HlwLnNAgc+yImB0dQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:55 2026 by rpki-client