Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be43dd39-558d-4a44-9ced-00461f1d4c42.roa
File: be43dd39-558d-4a44-9ced-00461f1d4c42.roa (raw, json)
Hash identifier: IjGj7bDks2EHF3LdxDA8DncLHGuanny/9FEWV+1zMhI=
Subject key identifier: 24:F6:C8:4A:67:A3:09:EA:91:BE:8E:27:C1:2A:12:26:D7:6E:DF:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BA16522A97D71FCB91D98D722614366BF0CF3FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be43dd39-558d-4a44-9ced-00461f1d4c42.roa
Signing time: Fri 09 Oct 2026 01:30:36 +0000
ROA not before: Fri 09 Oct 2026 01:30:36 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a1:65:22:a9:7d:71:fc:b9:1d:98:d7:22:61:43:66:bf:0c:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 9 01:30:36 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=a4f6d9d2506e9e207efa7d53b2c31a4dba7a94e5bd0122986596327d46007b31, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:bf:80:9d:30:85:85:78:41:32:49:b4:ff:
41:9e:40:c2:31:31:b8:25:6d:ad:1e:32:cc:8b:ce:
d0:32:ac:63:95:67:15:8f:1a:94:74:d5:3d:79:f4:
7e:1e:5e:e3:fc:d9:9b:44:40:56:72:89:a0:fb:d7:
10:10:95:57:03:8a:00:19:77:25:ab:59:87:8a:b1:
bc:73:cd:71:a3:97:06:79:93:c6:59:54:d6:71:b9:
44:ae:4f:4e:98:02:0f:db:b4:17:e9:1b:d9:8f:bb:
0c:08:91:9a:ac:a3:a7:38:eb:77:8e:7a:da:9e:98:
06:27:39:f5:59:a6:46:eb:dd:dc:8a:cd:6b:be:ac:
42:ba:ce:42:ed:6e:77:37:53:0b:bf:53:7b:20:e4:
84:15:04:80:94:64:aa:04:8d:2c:65:c2:86:2d:d2:
7f:08:ac:53:28:db:44:5a:10:35:5c:b0:6a:89:20:
cf:4e:7d:bc:43:03:fd:0e:8e:c0:c1:d2:f4:e4:52:
59:b1:8c:08:61:e9:ee:11:5e:d6:23:2f:e3:30:54:
4d:a0:c1:02:60:28:2a:00:9e:5c:e1:f9:56:45:fc:
c4:55:6c:43:86:01:ff:ce:23:80:1d:d6:09:b7:f6:
1a:54:05:85:90:ab:6b:cb:9d:c8:86:ea:36:d1:17:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:C8:4A:67:A3:09:EA:91:BE:8E:27:C1:2A:12:26:D7:6E:DF:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be43dd39-558d-4a44-9ced-00461f1d4c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c7:be:a8:cc:0c:c4:dd:03:25:2a:e1:29:17:8a:12:5e:d3:0d:
f3:de:23:2b:5c:5f:31:6b:d4:f2:94:c1:27:49:b3:00:4f:12:
6a:9e:f7:0f:ed:ce:73:26:ea:3e:de:e8:4d:67:bb:32:c5:b3:
98:77:22:16:93:e8:9e:4a:5b:23:ff:a8:4d:de:ef:64:56:77:
9b:51:af:0f:02:dc:f2:60:72:c9:1f:00:cd:27:c5:54:75:31:
57:34:6f:58:a1:56:a4:75:e2:23:46:89:e5:a5:e0:58:3a:5c:
b1:35:97:f2:9e:16:ab:83:c4:d7:2b:67:88:83:52:8c:4d:54:
3e:09:64:87:3b:45:6a:7a:b2:dc:5d:f4:7e:c6:e6:88:ec:cb:
f0:ff:9f:fe:e8:dd:b8:12:6a:4b:89:8a:86:82:e0:67:5b:6d:
bd:57:67:7d:aa:cd:99:36:0c:05:be:88:21:a8:6a:51:c8:b6:
fd:f3:63:10:b2:d6:1d:17:fb:b9:f9:4c:f5:fa:74:a5:df:11:
a3:87:4a:ff:d8:68:0a:5e:84:6b:e1:46:0f:e5:2b:f9:93:1e:
a8:e0:f6:7c:16:1f:5d:f2:a7:55:9a:a2:55:45:b2:6f:bf:82:
d0:53:59:01:30:c1:90:2c:ec:e3:17:60:57:dc:0d:ea:93:2d:
6b:e7:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:23:01 2026 by rpki-client