Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
File: bed4158d-91b8-4ba5-81d9-75a65b550b92.roa (raw, json)
Hash identifier: ZSziKjmfP8jMmPKXNydaalldK+uOoPeFFBh8jAACpJo=
Subject key identifier: 33:F5:47:8C:8A:2C:9D:A3:E2:C7:2E:59:C8:BD:69:6D:66:58:8F:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6667D85AE31A142E8053925479C74E90AD1D353F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
Signing time: Mon 26 Oct 2026 04:31:07 +0000
ROA not before: Mon 26 Oct 2026 04:31:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:67:d8:5a:e3:1a:14:2e:80:53:92:54:79:c7:4e:90:ad:1d:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 04:31:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=4b793a6aef98f949a823d0f8b5afc3a6f0dbc5ef888311edbe9d718e5cebb159, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:d9:2a:c0:5c:ab:f0:cd:c9:d1:b5:9c:b0:
68:7e:0a:c6:67:0a:a3:f3:6b:04:5b:c2:1c:63:56:
ee:66:52:37:fa:ff:5c:02:82:1e:18:4f:2f:f0:4b:
22:b2:1a:35:af:27:7c:48:08:3b:92:b7:05:28:b9:
d9:35:83:06:ca:06:8b:54:8f:97:32:a0:6f:00:f3:
16:65:bb:17:ed:ec:f8:f2:f8:35:7c:bc:5e:ff:df:
44:c5:96:e1:93:ee:7f:64:31:7c:50:4e:d3:18:d2:
ae:0e:95:18:02:a5:c2:24:20:cd:4c:8f:9e:e9:c2:
c1:e7:fc:50:ea:3b:13:d6:d7:06:c5:ec:b7:e9:74:
20:7f:71:62:00:1a:12:dd:11:dc:b2:9e:17:59:43:
ab:e7:da:f4:61:52:0e:a7:4f:fd:67:d2:93:8d:b6:
3b:0a:4f:76:45:c5:e6:82:62:a3:80:6a:45:d8:77:
ff:2c:d5:8e:b2:73:bd:61:34:ad:30:97:da:cc:3d:
03:1f:ce:f5:80:e5:16:09:a6:b0:6c:8e:8a:3b:b7:
15:20:86:23:46:10:48:88:16:3c:7f:38:01:48:5f:
ae:76:2c:93:ed:69:5d:70:11:bd:4d:42:66:ee:20:
03:33:65:da:d0:a9:19:18:83:43:c5:ae:b6:c9:ca:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:47:8C:8A:2C:9D:A3:E2:C7:2E:59:C8:BD:69:6D:66:58:8F:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:1a:bf:61:d4:aa:66:8a:34:cf:4a:42:04:a4:35:02:03:40:
5b:25:3f:46:8f:70:c3:f9:24:cc:55:db:d3:8f:e2:ab:ee:ef:
36:54:4b:6b:2c:78:66:cb:5e:1a:e7:ab:e6:96:3d:5d:05:a8:
45:6d:11:40:7c:22:be:93:4a:7d:31:07:30:25:d6:6e:3a:50:
15:15:42:9a:af:fd:07:cf:de:df:d7:fe:21:33:33:8b:ff:08:
cf:91:33:a8:98:1d:40:ee:fe:e4:ea:45:78:80:45:86:f6:88:
ee:e5:f6:9b:6d:cb:9f:05:28:d0:55:bd:77:00:ef:5c:a4:78:
39:eb:90:59:19:9a:6e:f8:97:eb:b2:eb:ad:68:b7:1c:74:f9:
fb:c4:80:64:b7:9d:3d:0c:2c:0c:4f:c0:f8:86:9a:5d:ea:34:
db:61:b7:b0:d4:14:77:53:72:a0:81:22:25:d3:f0:42:c5:66:
93:14:29:41:cf:5a:f8:64:95:a1:fd:22:d5:9c:99:61:e5:fd:
17:c9:a8:ac:91:14:28:62:7b:15:2a:5f:2d:22:70:93:92:86:
34:15:b3:77:eb:d4:58:0e:ae:07:d0:84:96:81:ad:03:b5:58:
8a:e1:53:cd:78:68:b5:b0:1d:17:92:bf:33:36:08:1c:95:70:
69:1a:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:42 2026 by rpki-client