Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
File: bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa (raw, json)
Hash identifier: hs527fsgZrJgWABw2/6C6JB66fve6GVGcdXMIDRjpiw=
Subject key identifier: 4E:0C:39:62:E0:6D:2D:08:2C:96:01:40:75:93:E9:F6:5B:F2:84:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F78BD75C40F916F62DDA928BF6BF76B3D86B37D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
Signing time: Fri 09 Oct 2026 01:20:10 +0000
ROA not before: Fri 09 Oct 2026 01:20:10 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:78:bd:75:c4:0f:91:6f:62:dd:a9:28:bf:6b:f7:6b:3d:86:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:20:10 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=3362daac181d6d5414b01df9d8ba0c864e3ae931d51b161731324e41d16b4330, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:8e:66:fb:52:c4:c6:e4:2c:72:50:1f:da:
f9:02:d8:c2:17:2b:cb:6a:00:1c:03:a0:cb:fe:6c:
a7:3a:ef:f4:50:08:27:7d:ea:89:0e:f6:02:12:b1:
ee:5e:78:14:61:af:0b:6e:52:ea:f7:be:a8:57:a4:
7b:eb:c4:7b:8b:26:d3:35:8f:48:86:ec:e1:ef:95:
c5:5b:a4:88:a7:26:d0:c7:07:5d:34:a3:ca:51:26:
44:90:1c:c2:a5:f0:06:0a:ce:d1:79:d7:13:97:4d:
5b:60:ba:19:5e:4c:44:80:2c:92:fe:1f:f1:42:42:
46:a7:12:39:06:de:96:ad:38:4f:bd:4d:19:53:8e:
ea:0e:f6:e7:14:c4:9f:8d:3b:7d:fc:58:ed:ef:38:
40:0b:42:8b:bb:c6:72:c6:38:29:c6:ac:c8:ce:df:
b3:44:fc:1f:49:42:ed:fe:aa:dd:72:58:bc:d3:af:
dc:f3:f2:27:1a:d0:e3:f9:5b:60:e5:11:c3:4f:b7:
49:7d:49:95:1b:20:8e:d4:e6:34:dc:7b:dd:d4:fb:
95:de:ac:27:2d:31:cf:53:a4:a2:dd:0b:1c:f3:0c:
ee:5f:de:9d:7d:f1:37:f9:57:76:02:6a:f1:97:fb:
78:dc:45:67:02:f7:c6:d2:ec:50:07:5f:04:4d:76:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:39:62:E0:6D:2D:08:2C:96:01:40:75:93:E9:F6:5B:F2:84:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc5d1e04-86cf-43aa-989a-a5801b5a73db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:1040::/48
Signature Algorithm: sha256WithRSAEncryption
79:f4:72:cb:f9:81:b8:12:11:d5:02:8f:a3:d0:cb:ae:24:b8:
2d:3a:c3:eb:ea:d8:16:2c:e9:d6:f7:94:07:3b:d7:5b:07:ac:
ca:51:d9:04:e3:1f:0b:fd:04:48:77:3b:0d:b7:be:18:c5:82:
0e:fc:ba:f4:e4:27:01:d1:5d:5c:ea:f3:c3:54:6d:64:70:d2:
85:5c:65:5f:c7:f8:5a:23:13:35:ce:1a:c7:a1:96:ad:9c:66:
3d:e4:8b:ed:80:37:01:c6:22:07:c6:48:46:9a:f1:6f:cc:ea:
69:b9:77:95:32:c4:b5:50:61:54:26:a7:6e:13:c4:cc:1c:22:
b9:89:c9:5f:ab:51:30:89:52:bc:c7:09:4d:76:33:9f:77:be:
90:ae:10:8a:fd:d0:54:39:c8:88:50:38:1e:ee:51:be:b3:e4:
a1:db:9a:1c:97:87:bb:6a:00:6e:f5:80:1a:c2:dd:2e:61:33:
ea:22:54:bf:87:92:31:7e:00:ba:a5:03:a8:fe:0a:03:42:4f:
bc:91:fc:25:59:56:dc:ad:4b:9c:44:24:d9:ae:42:db:47:fc:
80:2d:71:31:73:7d:23:16:a2:39:89:1a:37:ec:94:b9:63:c1:
6d:2a:7e:ef:90:0c:0f:76:5a:94:b1:35:63:35:5f:85:a9:c2:
c3:91:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:46 2026 by rpki-client