Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
File: bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa (raw, json)
Hash identifier: I+brJWU2HDrdv3CE+cK7MVKdDOk7+ZhAh26qkl6OqQQ=
Subject key identifier: 46:41:D8:44:D6:05:81:30:B8:BA:69:FE:F4:95:35:96:EC:08:1C:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 711B577C7FF4F06494A1AE72C0E529BF76979D65
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
Signing time: Mon 26 Oct 2026 05:20:07 +0000
ROA not before: Mon 26 Oct 2026 05:20:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1b:57:7c:7f:f4:f0:64:94:a1:ae:72:c0:e5:29:bf:76:97:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:20:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=acbf2e920374bab0fa930f26e3e7738d1c81298e955b755fc93cbe04b0666f56, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:57:23:93:ba:22:ee:92:18:50:0e:56:1b:
fd:3c:85:b4:92:b0:50:01:1f:cf:05:b3:ef:cd:b4:
87:5f:65:c3:b7:85:9a:c6:8f:85:52:bd:3d:a7:54:
35:53:1d:28:f8:cd:74:7e:09:6b:97:5f:5a:cc:f2:
d1:76:05:21:80:f7:2c:be:27:75:af:cf:2f:78:a1:
e8:44:69:44:c0:83:3d:8c:58:a0:1f:ed:20:f7:b5:
e9:33:af:c6:05:c8:25:3c:ca:57:24:87:03:d5:54:
31:1c:d3:e2:92:cd:b7:84:48:d9:62:d2:f1:42:f4:
40:63:f0:1a:1e:ae:8f:40:45:5b:90:a6:2c:fc:ed:
0f:ec:cf:af:ab:b6:7a:8e:ed:fe:21:c7:a9:52:63:
e6:1e:00:8a:7b:86:04:6c:e7:a3:6a:cf:53:a7:ad:
21:ea:93:b5:a4:ca:e6:53:dd:5c:fb:ba:38:1b:95:
8c:3b:c0:50:ad:2a:51:f9:46:c4:d8:53:5e:4d:ca:
59:14:fd:24:48:7c:2a:02:04:23:34:c0:50:17:ee:
cf:bd:68:b6:81:ef:d3:01:1d:92:98:cd:f3:5a:91:
14:b8:91:5b:9f:fc:50:cc:73:11:ad:90:d3:26:9e:
44:6f:3b:4b:b0:3b:44:13:c4:cf:02:ea:33:a5:6d:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:D8:44:D6:05:81:30:B8:BA:69:FE:F4:95:35:96:EC:08:1C:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:5000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:68:75:fc:32:ac:e0:0e:02:f9:06:f5:c9:00:76:95:80:63:
77:36:17:ab:6c:17:08:10:af:f4:f4:ad:a0:2e:20:db:ca:da:
46:52:fa:ce:49:dd:78:83:42:46:e1:8f:65:78:25:93:a3:1d:
30:94:39:98:fe:2f:32:64:5f:67:b5:75:d3:a0:34:54:e7:9c:
89:60:3c:0b:ea:0a:29:0b:b7:ad:f6:23:2b:69:2d:77:41:4b:
b1:f1:68:e1:e4:55:42:4c:07:97:e6:3b:b4:0d:02:40:6b:3e:
c7:90:6e:ea:d3:a1:43:89:8a:31:e3:dc:77:d9:1a:51:a0:8b:
59:51:ed:ec:ba:e1:81:40:70:1e:d4:cb:e1:4e:ca:04:0f:66:
4a:ae:72:80:78:58:5e:33:8a:e4:8f:d0:25:08:c7:09:4d:7b:
cc:ca:6a:9d:db:89:08:3d:32:e8:e7:13:50:ad:88:0c:06:e5:
a9:70:05:c3:5d:1f:61:91:f2:a8:8c:90:8c:b2:c7:7b:4d:10:
44:5d:69:0a:6f:d4:33:c6:1f:2c:66:75:81:e7:b6:ef:35:61:
e7:20:74:f0:bd:b1:1d:71:4e:b1:6e:a7:a9:2e:ce:21:a6:15:
6e:e2:54:94:71:96:80:63:31:c6:46:a3:c0:a0:80:b3:54:e8:
2c:1b:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:04 2026 by rpki-client