Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ad43b03-99fd-4614-a58f-62698e77d9d5.roa
File: 3ad43b03-99fd-4614-a58f-62698e77d9d5.roa (raw, json)
Hash identifier: SBYEdeYVM1DTEaXQKzUDIiRnuSvxA7SWICxhtY7n3po=
Subject key identifier: 33:C2:B3:48:29:7E:68:57:AB:55:D4:62:06:F9:06:99:D3:97:D5:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A64395D93D0BDBF084A622E812F6AF940577A75
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ad43b03-99fd-4614-a58f-62698e77d9d5.roa
Signing time: Mon 22 Jun 2026 02:30:14 +0000
ROA not before: Mon 22 Jun 2026 02:30:14 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06b:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:64:39:5d:93:d0:bd:bf:08:4a:62:2e:81:2f:6a:f9:40:57:7a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 22 02:30:14 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=5f31570f36b958974cb3cc77207739879c505e120d87b1443ecdd64484e636c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:58:ee:ec:9b:58:36:9e:ac:ca:1b:22:71:
65:07:a0:d9:79:95:18:2e:a1:b2:3c:13:c0:9a:b5:
bf:ff:8d:c9:a9:2e:fc:d1:03:f6:37:38:40:cd:7b:
2d:eb:1f:af:e5:0b:91:4f:2c:db:aa:45:8e:1b:b9:
27:03:f3:06:a9:6f:d7:8c:93:47:07:48:5d:2e:33:
68:2f:da:02:d9:7f:d9:8b:59:21:b1:6a:e5:61:36:
70:51:26:42:42:dc:04:31:59:4f:a1:49:a7:0c:76:
73:2d:56:ea:1b:11:9c:bc:74:df:51:e7:da:57:0b:
31:b7:9e:7a:f4:eb:76:ec:36:f2:d1:7e:77:ba:31:
4f:5d:6f:8c:6f:d4:21:bf:ff:2f:3c:9f:75:25:a6:
38:fe:94:4d:0a:b4:01:d5:07:87:32:09:a0:76:8a:
52:02:74:2b:6f:0a:d6:74:d3:15:2f:c2:29:f2:f9:
6d:e2:e4:c6:32:20:06:3e:ff:fc:4f:41:5e:ca:29:
2a:c9:88:6d:7a:23:26:e2:d0:bc:44:32:87:92:e5:
4f:bb:d2:1c:5d:ec:58:4f:d3:41:f1:8f:90:bb:50:
fb:81:5e:30:c6:cf:42:b4:7d:18:e4:44:fc:cf:9b:
43:9f:e6:3e:49:0f:c5:b2:a9:39:96:5b:d3:bf:c6:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:B3:48:29:7E:68:57:AB:55:D4:62:06:F9:06:99:D3:97:D5:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3ad43b03-99fd-4614-a58f-62698e77d9d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06b:5080::/48
Signature Algorithm: sha256WithRSAEncryption
11:66:f8:44:9a:3c:a3:27:68:d4:d5:b2:13:db:ba:86:50:3b:
55:15:f2:6f:db:52:29:eb:18:74:2c:f7:0a:79:3d:25:5c:de:
39:8f:12:3a:d0:ca:72:d1:6f:c8:5d:6f:b8:cc:60:97:80:d8:
2e:d4:10:0c:a4:75:a4:1e:47:92:6e:45:71:fd:4c:61:95:ac:
1f:5e:02:93:96:6e:98:6f:a6:29:5e:37:14:69:1d:42:6f:26:
47:4e:6e:71:e9:fd:ce:a9:ea:26:70:99:06:8b:07:61:90:40:
33:2c:09:50:45:04:a7:1c:e2:d7:f5:a6:ae:fc:05:02:b9:11:
91:69:34:59:64:04:52:78:bf:51:e6:32:af:82:69:af:5a:51:
ab:59:70:5f:e5:98:07:e9:58:5c:3a:69:b6:44:1b:2a:4d:54:
f4:1e:de:04:06:fd:7e:71:7c:db:c0:2f:12:fc:9f:76:1f:34:
ac:ca:0e:b6:54:67:b5:82:96:b0:d3:6e:86:fb:ad:68:72:ed:
2e:ec:46:bc:5e:a0:34:4e:81:ae:22:0f:e9:51:16:a9:d4:76:
95:a3:0b:e3:83:7d:93:c1:01:30:d0:73:30:21:59:93:2a:e2:
49:49:c1:2d:4f:40:cb:19:bf:6f:76:5d:16:cd:3f:0f:1b:c8:
5a:9c:99:65
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOmQ5XZPQvb8ISmIugS9q+UBXenUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA2MjIwMjMwMTRaFw0yNjA5MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDVmMzE1NzBmMzZiOTU4OTc0Y2IzY2M3NzIwNzczOTg3OWM1MDVlMTIwZDg3
YjE0NDNlY2RkNjQ0ODRlNjM2YzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzoWO7sm1g2nqzKGyJxZQeg2XmVGC6hsjwTwJq1v/+Nyaku/NED9jc4QM17
Lesfr+ULkU8s26pFjhu5JwPzBqlv14yTRwdIXS4zaC/aAtl/2YtZIbFq5WE2cFEm
QkLcBDFZT6FJpwx2cy1W6hsRnLx031Hn2lcLMbeeevTrduw28tF+d7oxT11vjG/U
Ib//LzyfdSWmOP6UTQq0AdUHhzIJoHaKUgJ0K28K1nTTFS/CKfL5beLkxjIgBj7/
/E9BXsopKsmIbXojJuLQvEQyh5LlT7vSHF3sWE/TQfGPkLtQ+4FeMMbPQrR9GORE
/M+bQ5/mPkkPxbKpOZZb07/GFfkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQzwrNI
KX5oV6tV1GIG+QaZ05fVDjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2FkNDNiMDMtOTlmZC00NjE0LWE1OGYtNjI2OThlNzdkOWQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAEWb4RJo8oydo1NWyE9u6hlA7VRXyb9tSKesY
dCz3Cnk9JVzeOY8SOtDKctFvyF1vuMxgl4DYLtQQDKR1pB5Hkm5Fcf1MYZWsH14C
k5ZumG+mKV43FGkdQm8mR05ucen9zqnqJnCZBosHYZBAMywJUEUEpxzi1/WmrvwF
ArkRkWk0WWQEUni/UeYyr4Jpr1pRq1lwX+WYB+lYXDpptkQbKk1U9B7eBAb9fnF8
28AvEvyfdh80rMoOtlRntYKWsNNuhvutaHLtLuxGvF6gNE6BriIP6VEWqdR2laML
44N9k8EBMNBzMCFZkyriSUnBLU9Ayxm/b3ZdFs0/DxvIWpyZZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:08:56 2026 by rpki-client