Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
File: bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa (raw, json)
Hash identifier: ZkuU148iAe7rYZJSW9PnXgBd1Giai/MS8YPRYwesEx0=
Subject key identifier: D4:6E:44:05:3C:78:71:D1:FC:17:B0:F2:29:EA:62:98:5B:51:43:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46AF1C49217D7C011EF60C36F6011A643FFB8CDE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
Signing time: Sun 18 Oct 2026 01:20:13 +0000
ROA not before: Sun 18 Oct 2026 01:20:13 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:af:1c:49:21:7d:7c:01:1e:f6:0c:36:f6:01:1a:64:3f:fb:8c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:20:13 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=97cd135fc7b2b0c11a49bddc45662cba8856f32888a6d24e4043e2ff10579001, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:3d:c6:a3:0b:2a:d0:2d:b1:e5:40:08:86:
06:9f:3b:4b:90:5e:0a:7b:a5:87:1b:91:56:3b:cc:
56:e8:e8:a7:64:a1:c4:be:13:77:72:84:18:c9:55:
ee:25:05:8b:4f:a7:37:69:21:01:c1:98:89:18:fd:
0f:35:30:d0:4a:7a:21:8b:df:1c:99:3a:06:e5:30:
95:89:fb:7c:19:ff:22:e2:bd:63:c6:30:84:95:5a:
a1:14:26:8f:cd:e1:44:8a:5c:04:80:75:5d:f7:5d:
c0:7d:ae:42:f5:56:8b:f1:b8:57:ed:9c:fe:d4:0b:
86:ce:73:f1:6e:86:2e:76:4c:46:f1:98:95:f2:09:
75:c2:a4:21:01:a0:c5:dd:7e:25:c1:be:5b:d4:29:
01:5a:d2:69:b2:95:15:ef:92:bc:17:91:29:fc:02:
fd:91:39:93:7b:97:f0:90:b0:54:02:c8:6a:7c:8a:
13:2b:4e:d4:f4:a4:42:4a:01:a8:63:e9:a5:43:4b:
18:25:a3:fb:b0:25:8c:f6:dc:7c:2c:86:2e:22:d4:
e1:b4:83:63:cf:84:e7:23:8f:e4:cf:1d:51:a1:b5:
42:7c:21:a7:62:11:3d:f2:0c:e9:7b:c8:82:90:45:
b4:6d:1e:53:c1:2a:7c:5c:f6:39:cc:93:72:28:4b:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:44:05:3C:78:71:D1:FC:17:B0:F2:29:EA:62:98:5B:51:43:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc59e421-ba1d-4f6a-aeba-9d5c673a7026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:2000::/40
Signature Algorithm: sha256WithRSAEncryption
12:53:7f:da:fd:69:f8:09:bb:ba:da:e0:a9:80:e1:ab:e2:36:
8a:7b:71:84:be:62:fa:7f:de:2e:c8:94:cc:e9:70:94:5a:0a:
c4:92:da:cc:65:61:32:c8:bd:0d:2a:c5:28:b6:c9:c6:a5:2a:
ae:df:f4:e9:0a:08:e7:68:4c:18:20:f5:cb:06:fb:a8:f4:57:
69:80:68:d4:21:13:fa:8e:4c:72:65:24:a9:86:0f:32:4f:ea:
a3:e1:ff:56:21:48:73:ab:be:58:ee:fe:b2:ba:6c:2e:21:82:
0a:23:fe:f5:08:e1:1d:de:13:cb:40:bd:71:c7:ea:5f:04:06:
75:2a:39:99:80:74:a1:ec:2d:5d:6d:e4:e6:e8:8d:e4:1d:1f:
45:6b:0a:94:a0:e7:a3:d8:6f:cd:be:44:ff:c7:e6:ad:f7:08:
77:08:6a:43:c7:92:a0:f9:49:e4:6c:ea:7d:0a:a0:17:6b:b2:
29:d6:29:19:ae:3b:72:6e:7e:17:38:89:e6:9e:5e:6f:3e:ff:
08:08:f7:30:c4:a5:ca:f1:ee:e4:e7:4c:8b:8f:56:9e:87:bd:
62:fc:87:5f:88:9a:a7:22:74:00:b1:77:3b:07:72:a6:05:22:
db:b2:c6:81:87:47:4c:60:cc:bd:6e:e7:6a:1e:07:b0:0b:af:
6d:b6:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:46:28 2026 by rpki-client