Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: hrivPZ1sDPBYf9zJMpsRqIJo52EUS+Ykt3zjCuIm/y4=
Subject key identifier: 80:EB:DF:72:07:D5:A1:54:09:AA:81:01:54:F7:57:C9:48:71:63:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E5F94D90AE4A547D5D50F8F1BAC58522DB00627
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Mon 26 Oct 2026 04:40:35 +0000
ROA not before: Mon 26 Oct 2026 04:40:35 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5f:94:d9:0a:e4:a5:47:d5:d5:0f:8f:1b:ac:58:52:2d:b0:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:40:35 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2e640bf2083ff63a5be521d52272b5c1132f06fea23236cfdf10d535847eb87c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:7b:26:ee:6c:70:f6:2b:36:24:96:4a:d4:
1f:be:5f:b2:40:1b:7f:86:74:02:95:32:35:cd:33:
56:ce:2c:85:be:04:7d:96:44:af:23:2b:a1:29:28:
34:b1:ba:2f:a2:09:5f:a1:01:d3:1c:40:f9:44:b1:
34:11:b6:e8:2b:84:b9:60:5b:4f:8a:1b:4c:71:a1:
75:89:a1:a8:12:5f:fb:9f:77:2d:ae:c0:2c:fa:a7:
6c:22:9f:6b:b2:56:21:28:43:ce:5f:9d:8d:78:ac:
8c:b3:22:45:92:a9:07:dc:2f:62:e6:e8:cb:7b:db:
77:d5:8a:af:f5:5c:71:e3:bd:af:51:79:99:e0:4f:
09:2a:9a:4b:70:6b:2a:f6:b2:72:3d:39:ae:eb:1a:
22:34:75:90:54:4d:14:a2:13:9c:40:6d:b9:b1:e9:
d7:7b:2c:18:1d:39:41:22:42:46:5b:9a:77:0e:c9:
54:7a:36:b3:c1:a6:05:56:75:ae:6c:f5:79:90:04:
6c:ed:a2:24:af:4d:61:73:75:b9:7f:b2:1c:e0:69:
e8:e5:0b:bf:da:aa:bd:26:a5:a2:27:9c:bd:f4:a8:
3f:db:b7:1f:01:af:a5:c4:e5:c5:54:dd:89:d6:5c:
d9:00:bb:99:40:96:db:d7:4c:27:d1:b1:f0:fb:f7:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:DF:72:07:D5:A1:54:09:AA:81:01:54:F7:57:C9:48:71:63:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
28:33:67:90:8f:96:92:69:1a:be:b6:e4:6c:f7:82:d6:9d:81:
ad:a1:56:47:ce:8b:e6:91:42:8a:d1:fc:1c:71:4e:96:d6:67:
43:92:5a:eb:e0:7e:50:6b:7e:df:c5:97:b0:e8:96:66:b0:35:
79:89:a3:29:8c:e1:29:a4:77:76:55:e4:17:c6:3c:40:3a:21:
fa:2f:51:f2:27:fb:96:c8:07:ff:01:c0:06:a1:2b:67:24:2f:
ea:37:13:37:91:49:5a:2d:8c:60:92:69:70:ae:65:d3:f7:8d:
4c:a5:f4:17:7c:ba:5d:a9:ae:12:94:d7:57:93:de:bd:d7:e6:
7b:dd:2e:49:33:29:ef:87:66:60:95:d5:f2:c3:8f:1d:83:b4:
27:15:dc:55:a4:ea:4f:f3:77:d3:18:22:58:01:02:b3:ae:f9:
8c:43:6e:c1:5c:a1:85:99:b4:88:6d:48:47:cc:a1:b3:48:a7:
16:c8:d2:d9:4b:98:23:a1:39:35:ab:13:9a:60:32:95:a9:a6:
bb:67:5b:fb:ff:31:ab:ff:85:5b:b0:a6:69:20:69:2b:60:fb:
56:ef:e0:dd:d3:3d:ef:30:3e:56:a1:a1:6d:76:37:08:78:b1:
d3:88:51:c6:fa:f1:0b:67:ad:3f:52:f1:86:84:6f:53:38:0f:
13:4f:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:53:05 2026 by rpki-client