Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bba6d1fd-8b29-4481-a568-7018abbd9103.roa
File: bba6d1fd-8b29-4481-a568-7018abbd9103.roa (raw, json)
Hash identifier: 8C1kXvEFJCjt2YYHESoPXphpiHo48Yi3fEG63lg6KLU=
Subject key identifier: E4:2A:C6:48:90:1C:DA:9D:46:96:73:97:7E:B5:C6:76:C7:C6:AC:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FC188B646D67FBC12607747E1CF83099414A136
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bba6d1fd-8b29-4481-a568-7018abbd9103.roa
Signing time: Mon 26 Oct 2026 05:31:08 +0000
ROA not before: Mon 26 Oct 2026 05:31:08 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c1:88:b6:46:d6:7f:bc:12:60:77:47:e1:cf:83:09:94:14:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:08 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=cd1234c947a7aea274dd83bc710ecb14111c28f87702c96b67bdb2b91061a467, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:d8:3b:31:07:7e:0c:14:57:99:ec:3e:c3:
e2:93:a1:2b:c5:88:f8:94:ba:97:3b:43:57:ce:e8:
3a:7e:5b:4c:76:b4:f4:6e:c9:ea:a9:98:9d:5b:30:
a2:f5:1e:d2:81:33:9a:ad:2c:e9:5d:da:3e:db:46:
2e:fd:c7:39:03:83:55:f4:bd:52:cc:9c:16:25:49:
bd:fe:42:2a:eb:bd:54:22:0d:01:99:3f:52:79:a7:
0e:2a:ef:05:d1:aa:9f:94:6a:1d:64:c0:98:bb:18:
6b:3e:75:92:14:98:76:34:4a:c8:d7:95:9e:61:5d:
96:d4:3f:8d:47:cf:b0:c7:32:e1:ed:11:e9:e0:75:
32:58:80:2d:42:fc:d5:e5:f3:e9:37:df:ee:f5:38:
6f:ee:db:cc:e7:33:d0:0d:c2:df:5e:35:27:a4:d3:
41:6f:e0:e5:25:f3:fb:e6:fd:aa:41:67:a1:b5:cd:
ee:08:8e:22:38:3e:af:8a:e3:46:66:5a:e7:44:77:
63:40:ad:b0:bc:db:f3:dd:f3:9e:77:72:36:b0:af:
a0:84:46:bc:61:cf:04:b1:94:81:a5:3f:28:51:7b:
fd:42:b9:1b:d3:af:da:c0:ea:79:da:05:52:82:b3:
b9:36:ce:ea:1e:41:51:19:dc:a8:51:29:da:a0:87:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2A:C6:48:90:1C:DA:9D:46:96:73:97:7E:B5:C6:76:C7:C6:AC:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bba6d1fd-8b29-4481-a568-7018abbd9103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:9080::/48
Signature Algorithm: sha256WithRSAEncryption
76:dc:5f:8f:75:09:88:5b:27:08:78:24:e4:f5:da:fe:31:cf:
f7:35:88:28:41:27:c2:4b:19:bb:e8:0a:39:89:25:a8:fb:26:
eb:f2:87:e5:70:3f:3e:7d:0e:af:b9:db:48:3a:b6:11:18:1b:
01:27:d5:c4:53:f5:ba:e6:65:46:39:5a:bb:b1:9a:b0:24:0c:
40:6e:dc:ee:e9:56:21:c8:26:47:53:ae:05:44:04:d4:dd:f1:
08:43:2a:9a:be:3d:dd:3c:28:19:05:65:44:85:2a:e8:7f:9b:
eb:6d:a5:9e:c5:fb:28:71:23:03:e0:ec:9b:ca:8f:fa:77:be:
1a:c7:c3:ff:ea:0c:ee:0d:d2:e7:77:97:8d:07:a1:60:85:0d:
64:6f:d0:03:b1:3d:32:34:51:ab:f4:f4:65:7b:8b:4e:30:f7:
2f:37:42:a9:02:74:b5:96:74:02:79:53:65:95:0e:9e:01:33:
e3:8a:a6:36:8a:77:9f:85:09:69:ba:ec:19:8b:3c:49:e0:b7:
30:f2:4a:7a:33:a6:c4:c1:bd:8f:56:b6:e9:09:42:0e:d6:44:
da:12:1c:fa:da:02:34:6c:48:fa:ba:14:38:3c:13:d6:84:dd:
a1:41:48:b0:52:0c:3a:79:24:36:4e:cb:af:13:47:7b:45:b1:
78:0f:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:35:47 2026 by rpki-client