Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
File: be610cc2-170e-494b-b1f3-db73bc5ff027.roa (raw, json)
Hash identifier: i6bPjOaPYRIEFWWLxpJ6972iaeqU+RmFDWsL5MKlFFQ=
Subject key identifier: 77:C3:79:2C:B2:90:FF:CD:81:69:DE:9D:11:87:66:AB:45:5F:53:4A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 090C5C09A43E70A26DF8724B03EE199A04C5B8B4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
Signing time: Mon 26 Oct 2026 05:10:18 +0000
ROA not before: Mon 26 Oct 2026 05:10:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0c:5c:09:a4:3e:70:a2:6d:f8:72:4b:03:ee:19:9a:04:c5:b8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:10:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=fb47fe10f94bb9e3ca54c11b170735b4302de07426ad5e28e5780797ab84fd2a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:cf:44:53:fd:13:45:63:f3:28:af:67:e8:
87:52:3c:3b:7b:f8:47:fd:ba:8c:6f:0f:32:89:5b:
1b:32:01:2e:44:b3:75:53:ef:52:46:8d:ea:ce:d1:
90:e2:99:74:97:6f:a0:a4:98:9b:23:da:f7:4c:22:
fe:b7:53:e5:f4:82:57:f6:fc:8d:6a:28:29:e0:0a:
f4:9d:65:30:89:dc:cb:ec:4e:09:e0:9e:4a:21:20:
b6:cf:95:59:1c:03:f2:ab:88:33:10:6f:55:54:2d:
c6:85:70:34:c2:a7:1e:0c:f3:bc:71:89:e4:ef:25:
56:1e:37:9f:c5:f8:46:a8:47:19:3e:71:de:ec:bb:
3c:37:59:8b:84:ff:0d:14:84:f3:67:19:44:3f:41:
99:0b:86:cd:87:6f:04:3f:a0:9f:85:d1:0c:0b:ff:
b6:5a:d8:5a:09:93:fa:14:8b:9c:35:17:c8:d4:38:
49:fb:8b:93:5d:05:b6:7b:97:df:45:15:d2:ad:16:
71:32:f5:f1:93:c4:25:0a:fc:48:46:7a:b2:de:00:
c2:ff:05:88:b1:53:fc:c9:e6:08:a0:e8:13:7d:3a:
61:ee:10:d7:2d:b2:4e:91:34:91:77:ac:05:5c:ef:
bd:55:0f:0f:37:a8:5f:87:66:8d:24:7a:f3:24:39:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:79:2C:B2:90:FF:CD:81:69:DE:9D:11:87:66:AB:45:5F:53:4A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6080::/48
Signature Algorithm: sha256WithRSAEncryption
76:65:fd:ef:fa:c3:63:c3:35:3f:51:c2:9c:4d:1e:6c:ba:79:
f2:51:27:2d:14:c7:80:22:29:74:06:57:19:fe:44:d9:f9:ff:
6e:7d:2a:79:36:57:71:e4:e6:3c:5a:3d:ec:5e:d7:04:b4:b6:
bc:9e:93:c2:52:a2:ed:95:fa:11:f1:b7:34:23:36:5c:5f:b1:
8a:81:e2:eb:29:30:a0:ab:88:e1:3f:b9:77:d5:11:b0:c0:d2:
19:98:1b:92:15:71:f8:4c:c3:20:f1:7e:d2:f7:96:ff:8d:51:
08:a3:ad:84:f1:cd:da:f3:d2:78:54:b7:7e:68:21:28:07:ed:
f2:c5:37:15:d6:e4:1c:16:f0:05:93:f5:1b:68:ec:41:27:12:
c4:2a:20:22:95:63:a5:1c:cd:a1:98:8f:1e:ac:59:ee:43:6b:
1c:16:25:27:3d:54:c0:f2:f5:f3:e4:c3:32:8c:b9:61:e2:04:
55:bc:da:b4:82:4a:8e:81:fd:fc:bc:b1:39:99:01:97:63:0b:
8a:1d:07:d6:4d:d2:5b:e8:db:3a:0f:7c:61:9e:b5:f4:0f:12:
6b:64:69:6f:61:f3:bb:68:7d:0e:52:12:f7:a8:fe:8b:01:3f:
b4:6b:02:f0:6e:2b:2d:26:94:84:5e:d2:9b:5c:ce:5a:08:06:
6a:4e:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:54 2026 by rpki-client