Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
File: bdfda4b5-843e-4797-9739-e616ff3d5825.roa (raw, json)
Hash identifier: ggNqyKuYb9uqA9DK4M9oq7NXeirhuBJQDBc1L8kuyYs=
Subject key identifier: 85:E8:80:99:A6:69:90:E0:4A:5E:46:7F:0E:C3:56:C3:D7:2D:17:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 64CAD5440FD7F1BCBC8889421A6064DBB8E0176B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
Signing time: Sun 18 Oct 2026 01:30:22 +0000
ROA not before: Sun 18 Oct 2026 01:30:22 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ca:d5:44:0f:d7:f1:bc:bc:88:89:42:1a:60:64:db:b8:e0:17:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 18 01:30:22 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=dc8337084adc019e36d4cf34d5099033c75c0c3322a2141e3cae2e7f3e7dfbfd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:8d:60:84:8c:ab:e7:36:69:43:45:76:57:
5d:70:97:a8:48:c1:17:9b:4a:3e:fc:64:b8:ad:4c:
e8:54:53:aa:e3:6e:4d:0f:44:46:c9:3c:64:5b:63:
88:59:67:d2:65:79:ac:0d:82:43:b4:ad:67:32:53:
c3:8a:2d:58:73:3f:6c:d1:3c:1b:1f:28:4f:57:d3:
fd:6f:61:6d:19:03:a7:74:73:06:ff:e0:c4:ca:16:
ba:05:19:8a:c3:02:df:54:ce:31:72:c3:17:cb:92:
7c:65:51:f9:d6:3c:8d:6d:e7:e1:a0:54:eb:af:01:
0c:f3:e7:0e:85:41:c9:dd:ad:ac:a8:0d:ca:7f:e6:
a1:c9:e4:7c:29:5f:41:11:62:6a:52:85:6d:44:22:
1f:aa:21:bc:5a:b9:26:b3:41:f8:f1:fe:f0:ab:6b:
a8:06:76:4d:7a:bb:6c:b3:5a:0a:d0:a7:ee:3d:33:
e6:a0:0a:6a:d6:fb:6c:7d:fe:ea:f5:57:20:89:ac:
64:70:4a:94:e7:e2:3c:93:ee:fa:5b:37:1e:f2:ec:
b5:55:27:55:df:cc:41:80:bd:bb:59:08:1c:5a:f9:
a2:b7:c2:a2:1b:a2:f9:dd:cf:74:cb:87:9b:64:eb:
86:fc:74:83:b9:18:c4:c7:5e:54:9e:fb:43:57:2b:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:80:99:A6:69:90:E0:4A:5E:46:7F:0E:C3:56:C3:D7:2D:17:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:8000::/40
Signature Algorithm: sha256WithRSAEncryption
07:ec:f2:05:f2:74:2e:e3:30:64:be:ce:28:06:f6:e0:02:2f:
3d:6d:25:e2:7f:05:da:5d:45:dc:36:63:2e:cd:d3:b7:9d:d6:
31:ce:88:be:92:9d:32:2b:bb:8c:d0:bb:8f:29:f6:c1:a3:48:
58:6a:71:17:2f:d0:9b:2e:21:80:f4:7b:5f:31:7d:41:3e:b2:
6d:38:9c:3f:da:7a:80:ed:5c:0e:a0:a8:99:29:9e:07:6d:37:
19:f7:9e:5c:90:7c:66:ac:4e:58:42:06:ed:63:84:1a:05:7e:
9d:2e:26:95:d2:16:22:01:d8:5f:d1:bc:54:de:9a:6f:70:e5:
19:ef:26:59:a5:6b:d2:3e:43:d4:01:08:af:a9:06:51:06:15:
48:0b:d3:8b:75:30:54:94:02:ad:e7:b3:d3:eb:e2:86:da:b8:
2f:5e:67:12:aa:a1:5b:93:bb:b1:ec:22:66:16:f5:f9:70:17:
f7:af:bf:ff:d9:f8:00:85:8d:7e:7e:ed:0f:02:3a:fe:34:cd:
d8:b3:7a:f2:7c:ff:34:38:82:4c:08:c5:21:f4:6f:49:0b:ce:
cc:0b:17:4d:b2:0a:7f:09:d9:65:f4:de:5c:4a:e2:16:fb:62:
22:a4:78:b0:34:b2:25:24:84:9c:8e:53:a3:ac:f5:8e:44:ac:
8f:1f:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:44:56 2026 by rpki-client