Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
File: be610cc2-170e-494b-b1f3-db73bc5ff027.roa (raw, json)
Hash identifier: faeFTQ2w2IdeSRMIlBAntUa5MNj6XzY8kPCvcSl/zdc=
Subject key identifier: DD:D9:CC:60:B6:C3:8E:69:7C:B1:49:E3:C1:39:8B:CC:11:A6:C8:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02042D447E36A1D90EDFE3D06416A10668874336
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
Signing time: Fri 07 Aug 2026 05:20:43 +0000
ROA not before: Fri 07 Aug 2026 05:20:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:04:2d:44:7e:36:a1:d9:0e:df:e3:d0:64:16:a1:06:68:87:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f087821a5274c5c72dccd3276b097c5fb51d2af959eeafd86e6f00a8f7f023b6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:c9:14:a2:ac:f4:4c:fc:a6:3f:b0:0b:a0:
17:3e:92:b0:02:5b:ac:94:5f:12:0e:8e:26:e0:56:
af:9e:d2:29:e9:e0:0a:c4:bb:f3:86:9c:4a:41:07:
9d:f1:2f:52:3e:be:df:a9:36:47:96:8d:b9:a0:ff:
97:2a:19:80:47:58:9d:55:db:db:d2:2e:9e:5a:be:
03:ae:87:55:67:38:26:77:fa:32:7c:e0:57:59:a6:
a1:ec:12:bf:6d:f8:43:6e:60:76:8a:24:f3:31:e7:
b1:fa:86:3b:69:49:cc:9b:0d:61:ef:04:8f:fb:cd:
ec:36:2f:3f:fd:27:aa:3f:4b:bf:0e:d6:5a:1e:56:
6c:ac:48:64:79:df:76:68:4d:36:41:36:29:16:c2:
41:82:09:f2:3f:17:e0:ec:cd:0e:87:36:45:33:b0:
02:6c:f4:83:e2:83:ec:6c:b5:96:2b:ef:b1:e6:03:
6f:34:53:1e:7b:1f:09:71:91:ad:84:d9:0b:f2:78:
1c:a4:64:28:a9:73:91:54:f4:6d:0a:bb:fd:e4:97:
e3:15:47:6d:16:aa:13:b5:23:54:e2:d2:a5:6c:c7:
48:6e:14:8f:5b:c5:12:31:92:d8:f1:b4:a3:94:a7:
2a:fe:e1:4d:7c:8d:05:60:d8:7f:0e:5b:8a:68:1c:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:CC:60:B6:C3:8E:69:7C:B1:49:E3:C1:39:8B:CC:11:A6:C8:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be610cc2-170e-494b-b1f3-db73bc5ff027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6080::/48
Signature Algorithm: sha256WithRSAEncryption
bf:85:4e:1e:c5:70:9c:2f:f1:ac:6e:c3:50:c3:98:92:63:14:
a0:c4:04:e8:7c:b8:76:d9:07:22:64:52:7e:a1:aa:84:31:36:
c2:44:12:8a:31:0e:f8:94:3e:1a:88:1b:e1:05:f3:e3:ce:30:
35:88:2d:15:3a:60:80:6b:fb:3e:a2:69:12:2d:84:9f:b0:c4:
2d:24:77:0f:33:76:39:24:39:8c:e1:c5:99:bc:55:9b:ce:a2:
df:9d:e0:9d:3f:4f:e8:11:92:72:e7:21:a1:a5:86:f4:53:88:
6e:7d:77:07:e9:dc:fc:ac:3a:f4:87:01:29:13:7b:ee:f2:2f:
90:1b:c9:bd:b4:f6:db:ab:f3:1f:a0:fb:59:56:c5:8f:84:cb:
1e:e9:9a:34:0d:d5:7b:15:22:59:db:4a:0a:45:e6:41:1e:3e:
c4:c7:af:9a:c1:be:e7:fd:ae:cb:20:a5:17:7e:f2:2f:b7:c7:
10:b1:0a:af:57:11:f4:5c:5d:9e:43:00:68:f1:af:45:0d:c2:
37:eb:7f:a7:e1:3a:19:2d:75:b8:40:31:48:ad:8a:73:c6:dd:
eb:a3:7b:5f:40:13:e9:b4:18:2d:eb:6b:7c:fa:6f:0f:a8:6b:
58:58:9e:2e:ee:07:2a:f7:b3:fa:c4:52:86:6d:53:d3:9e:b8:
eb:7f:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:49:17 2026 by rpki-client