Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
File: bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa (raw, json)
Hash identifier: sc5daDmj8w+NTU4oYv2L02etnCaZo4LoWdAXUJEGV+E=
Subject key identifier: E0:41:84:C0:5F:EB:3D:EE:CC:EC:73:FB:C8:B9:64:54:34:7D:21:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C7DA210F8AC5B6800A423B5170B1F9137134EF9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
Signing time: Fri 07 Aug 2026 05:30:34 +0000
ROA not before: Fri 07 Aug 2026 05:30:34 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7d:a2:10:f8:ac:5b:68:00:a4:23:b5:17:0b:1f:91:37:13:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:34 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5a1c7f044b76e84c4a440e5acf303cfabb6fc7ee87a53fcad052072ed2e83520, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:39:56:be:86:85:22:27:5b:41:4f:fe:ed:
75:43:d1:40:b3:17:0e:e5:58:5e:0a:e5:3a:e2:ef:
09:7b:0b:62:8f:a4:02:46:0e:11:6c:4d:11:e0:4a:
1a:b4:20:34:88:ba:03:16:94:f6:a8:83:26:11:af:
7e:20:0d:27:29:6b:1b:49:22:dc:1b:8e:65:0a:76:
7a:92:a8:df:18:bf:7f:13:2d:95:f8:f0:40:37:9c:
9a:e2:cd:b3:93:51:78:6b:b3:53:84:1e:b6:3e:91:
59:69:0a:ca:dc:0e:ad:8d:b9:5e:2f:a1:fc:1a:a4:
27:24:85:dc:1b:1e:d9:5e:b2:6e:1f:a1:8a:bb:72:
3e:09:9e:00:40:b9:47:e0:b5:34:ed:bc:59:ac:07:
dd:c5:4f:46:b9:5e:b9:cf:37:58:17:f0:c4:65:0a:
b7:d7:23:18:21:f0:85:4a:34:60:08:b3:b6:d8:9b:
38:b9:5f:7b:41:d4:38:f1:41:59:24:29:f9:66:c8:
09:47:68:2f:f9:77:af:e6:2d:5d:56:e6:23:f2:03:
d2:95:ed:b7:2b:b6:15:18:4b:f9:f6:3f:e4:36:a1:
62:a8:97:81:41:21:f4:5c:cc:46:4b:67:dd:bc:ec:
c2:1f:01:09:f5:34:4a:0d:67:b8:a4:e4:92:fe:1b:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:41:84:C0:5F:EB:3D:EE:CC:EC:73:FB:C8:B9:64:54:34:7D:21:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:5000::/40
Signature Algorithm: sha256WithRSAEncryption
68:7a:7f:87:a6:18:ad:59:4b:d3:ec:08:74:a9:e2:7e:1e:b8:
ef:0f:2c:ee:1b:ab:5b:a8:a6:c0:4a:87:b4:bb:be:41:dc:3e:
14:0b:31:fa:04:31:26:54:bf:c2:f5:6b:e9:cb:f5:20:41:5a:
57:df:25:f0:60:14:3f:57:65:f9:4a:3d:b4:a9:25:7a:a6:5e:
e3:06:fd:5f:fb:01:7f:7b:d4:b5:bd:87:f3:23:02:16:ae:85:
e7:dc:15:6e:90:57:97:04:13:9f:98:7f:cd:15:2e:72:75:06:
17:41:34:ed:c2:07:2a:5f:af:9a:a6:2b:2a:33:81:93:12:c5:
ea:0b:f9:a4:5f:f5:29:b6:34:75:c8:58:cb:e5:3a:df:8d:76:
ca:ea:f9:ee:74:2a:d2:09:86:b7:a3:1e:53:44:ad:19:80:c2:
3d:fd:d4:3b:ab:b4:36:35:41:59:8e:1f:96:9f:3f:12:e3:cd:
6d:de:e6:a7:e6:01:4f:5c:10:9b:03:f8:dc:39:70:e2:56:8c:
af:6d:1f:15:31:bf:22:bf:da:93:5a:77:b0:69:f1:b2:60:6a:
b4:e1:69:2e:26:b4:23:11:4f:63:d8:62:bf:b8:be:f6:33:8e:
80:f7:5b:5c:28:c6:aa:36:22:32:8e:0f:c7:de:fb:65:30:a1:
83:d6:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:51:29 2026 by rpki-client