Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
File: d62aaac2-f54a-4bc2-8155-22367e855165.roa (raw, json)
Hash identifier: CxX/xaTCcOhUfqvhCdzbIXL5LSW7/TsYucH8xjpxkoM=
Subject key identifier: 35:5F:D9:02:69:AC:53:52:63:74:42:F8:F9:F3:C1:C2:9A:F3:CB:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21E2C1A602F400D2CEE924252F41088812ED7687
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
Signing time: Fri 07 Aug 2026 05:30:27 +0000
ROA not before: Fri 07 Aug 2026 05:30:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e2:c1:a6:02:f4:00:d2:ce:e9:24:25:2f:41:08:88:12:ed:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=1cc7c72e06149c4b75ce0432c67f9e5c40927c40f9237c4d09278214e38f6d41, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:18:f3:dd:f3:07:2e:59:92:8e:45:87:c3:
bd:78:2c:d4:5d:90:ad:72:a4:7d:46:0e:88:26:bf:
8f:19:31:ea:14:7a:8e:ce:0b:66:50:5a:fa:26:3e:
a1:cc:e8:56:49:f3:06:a0:6e:0f:b2:bd:a0:42:f1:
e1:fb:92:ea:e7:96:3d:fa:99:8f:07:9b:36:f3:20:
36:24:3d:29:11:66:27:ea:3c:14:be:3e:dc:81:78:
d2:f6:2c:d0:e2:78:6a:77:a4:bf:c4:d3:4f:a1:ff:
8c:c5:61:ab:7d:98:d1:35:24:e1:7e:88:2e:b3:ed:
20:0d:bb:af:e0:20:88:64:c3:36:2e:44:34:6f:41:
c1:77:e1:ca:15:77:fb:5d:1a:36:9c:93:80:52:40:
1f:3f:12:1a:a6:67:3a:c3:a4:a4:2c:f0:51:d9:8f:
1c:7e:de:09:fe:2a:b6:ea:4c:ce:73:9f:b1:6a:10:
32:67:f2:f3:f0:53:fc:34:f2:66:ff:84:b1:3c:94:
10:47:63:55:02:8b:64:c3:0a:dc:1c:5d:fe:be:c1:
71:27:59:4e:67:61:2a:e9:e3:a6:c3:50:06:29:ea:
93:e8:70:1d:dd:0c:6f:ff:6e:70:c2:9b:85:c1:32:
fa:82:62:fb:cb:84:a5:6a:a3:5d:7a:da:5a:44:94:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:D9:02:69:AC:53:52:63:74:42:F8:F9:F3:C1:C2:9A:F3:CB:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:b000::/40
Signature Algorithm: sha256WithRSAEncryption
36:0e:4a:cd:8b:fa:97:55:8f:63:03:cf:cb:ab:cd:b2:00:80:
0a:85:da:1c:55:01:d1:50:62:a9:e1:f6:a1:29:29:bc:eb:28:
24:08:fa:3e:37:bd:b8:e4:b5:b0:86:0d:d4:a1:56:1c:ef:69:
f0:6b:37:ba:45:6a:f7:ab:c2:1f:e9:48:f8:98:82:78:62:5d:
12:e7:93:46:5c:0b:9d:e4:88:e0:bf:c8:58:6f:fd:0e:5e:b0:
ec:7f:5d:a6:44:39:70:e1:60:96:0b:01:77:12:e8:01:81:c2:
e1:34:2a:b7:34:30:bb:d6:54:5f:b1:fe:1c:eb:8a:cb:9a:56:
45:9d:8f:d3:bd:35:01:f4:a1:fa:e4:2d:24:c4:0e:af:3c:16:
a6:b5:15:48:6f:86:d6:7e:a7:aa:e0:67:71:bd:35:d3:76:b2:
68:7e:43:55:3f:31:c8:cd:37:24:48:16:2e:c8:bc:1a:34:44:
a1:cc:1c:d9:e6:7d:b6:52:a6:8d:65:20:6f:dc:ed:d3:c7:80:
bd:1d:5e:b7:c3:9a:93:b3:6f:c0:ba:4e:0b:27:c0:b9:cd:12:
ac:66:e8:b0:de:dc:98:33:bf:4d:a4:3b:c9:6a:7d:d4:5b:7d:
ef:0a:f8:3d:5b:0d:3f:68:bb:ec:f8:20:4c:a6:d8:da:13:7d:
3c:48:74:3e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIeLBpgL0ANLO6SQlL0EIiBLtdocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA4MDcwNTMwMjdaFw0yNjExMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDFjYzdjNzJlMDYxNDljNGI3NWNlMDQzMmM2N2Y5ZTVjNDA5MjdjNDBmOTIz
N2M0ZDA5Mjc4MjE0ZTM4ZjZkNDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMN6GPPd8wcuWZKORYfDvXgs1F2QrXKkfUYOiCa/jxkx6hR6js4LZlBa+iY+
oczoVknzBqBuD7K9oELx4fuS6ueWPfqZjwebNvMgNiQ9KRFmJ+o8FL4+3IF40vYs
0OJ4anekv8TTT6H/jMVhq32Y0TUk4X6ILrPtIA27r+AgiGTDNi5ENG9BwXfhyhV3
+10aNpyTgFJAHz8SGqZnOsOkpCzwUdmPHH7eCf4qtupMznOfsWoQMmfy8/BT/DTy
Zv+EsTyUEEdjVQKLZMMK3Bxd/r7BcSdZTmdhKunjpsNQBinqk+hwHd0Mb/9ucMKb
hcEy+oJi+8uEpWqjXXraWkSUT3sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ1X9kC
aaxTUmN0Qvj588HCmvPL+DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDYyYWFhYzItZjU0YS00YmMyLTgxNTUtMjIzNjdlODU1MTY1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKw
MA0GCSqGSIb3DQEBCwUAA4IBAQA2DkrNi/qXVY9jA8/Lq82yAIAKhdocVQHRUGKp
4fahKSm86ygkCPo+N7245LWwhg3UoVYc72nwaze6RWr3q8If6Uj4mIJ4Yl0S55NG
XAud5Ijgv8hYb/0OXrDsf12mRDlw4WCWCwF3EugBgcLhNCq3NDC71lRfsf4c64rL
mlZFnY/TvTUB9KH65C0kxA6vPBamtRVIb4bWfqeq4GdxvTXTdrJofkNVPzHIzTck
SBYuyLwaNEShzBzZ5n22UqaNZSBv3O3Tx4C9HV63w5qTs2/Auk4LJ8C5zRKsZuiw
3tyYM79NpDvJan3UW33vCvg9Ww0/aLvs+CBMptjaE308SHQ+
-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:16 2026 by rpki-client