Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
File: bed4158d-91b8-4ba5-81d9-75a65b550b92.roa (raw, json)
Hash identifier: PW1yQ7MfwztBSBL+OWvj9QkUkJoRpi0o8Zn4fzrnbm4=
Subject key identifier: C9:C7:2C:77:F9:0C:20:40:8D:2F:26:8B:FA:3E:F8:17:BF:A0:C5:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 293ACEE6C6128BBA8BE2FDFE999D6BAC21A88B33
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
Signing time: Fri 07 Aug 2026 04:30:37 +0000
ROA not before: Fri 07 Aug 2026 04:30:37 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3a:ce:e6:c6:12:8b:ba:8b:e2:fd:fe:99:9d:6b:ac:21:a8:8b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 04:30:37 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bfccf84996e7c75df15b6104ba64d69325482f4a536e6fe4b0f329c33334532d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:68:9c:57:d2:a4:7a:c4:44:22:6d:e5:06:
f8:56:7f:57:00:d6:20:76:c3:7d:53:d1:e7:f3:05:
2a:01:bc:85:00:bb:92:d0:72:bd:47:fd:08:88:ef:
ed:64:bc:cc:3e:7a:bf:48:96:00:84:b3:41:cd:d7:
7f:53:8a:44:b6:7b:b8:73:de:75:58:db:39:e5:74:
ce:82:25:b7:2f:8f:c4:d2:df:d6:b0:ef:ab:b8:dd:
7c:22:a6:17:57:e5:d6:5e:b2:a4:e3:27:b8:42:13:
c7:59:17:36:27:60:a1:cd:74:2f:bb:38:94:5f:1f:
41:d6:50:60:b9:e4:3c:c4:10:78:0c:22:dc:10:b2:
9d:77:bc:42:de:6f:d0:e8:f4:72:4d:08:40:25:80:
50:48:a9:59:1e:67:15:97:2d:79:f0:f6:d1:b8:9c:
37:43:c8:62:ad:a8:dd:9a:69:e2:92:c9:a3:37:f1:
fc:a7:0d:93:1f:b8:79:8e:9f:fb:3c:e8:46:35:c1:
a5:ed:48:a0:f9:f8:6a:0e:29:f8:51:26:72:a2:cb:
e6:48:5b:c8:ce:fc:73:42:61:d6:c2:70:06:b9:00:
ba:9a:b1:a1:b4:9f:c9:1c:78:f0:b0:2e:13:26:ba:
91:49:00:2d:6a:bb:86:d1:cd:7f:6d:83:e9:3a:65:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:2C:77:F9:0C:20:40:8D:2F:26:8B:FA:3E:F8:17:BF:A0:C5:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bed4158d-91b8-4ba5-81d9-75a65b550b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:3d:78:91:2e:b2:ee:fd:67:91:bc:fc:c2:44:5d:86:1c:c7:
c7:4a:4c:fa:77:31:57:75:f3:c3:2b:9c:11:58:bd:e1:01:1f:
fb:e7:17:68:02:c0:b9:74:b7:08:30:70:b2:9c:4e:09:f5:a8:
b6:11:9e:71:c2:6f:10:d3:4f:fc:89:38:66:34:68:bc:11:a2:
85:da:60:66:3e:fa:ea:3c:4f:3a:39:70:51:14:3a:28:28:55:
cb:92:7f:09:bc:17:9d:10:b8:4a:eb:c6:0c:8c:fe:b3:95:7d:
6c:74:4a:d5:81:88:7d:c3:f2:71:d5:b8:fd:58:da:09:05:ee:
46:97:15:68:b8:2e:c7:61:48:da:60:47:89:5f:a6:e3:ac:68:
03:fe:0f:bc:9a:61:d1:f0:d3:0d:93:bd:61:77:5e:65:a2:0a:
8c:fa:37:79:0a:0c:aa:11:55:43:f8:f6:dc:a9:44:52:6c:50:
50:78:ea:a3:95:2a:79:61:af:e9:15:6c:61:a5:b7:a9:97:e4:
96:05:58:3a:5d:54:a6:ed:e1:1d:4e:45:d5:2e:58:73:40:68:
96:58:d0:d8:bb:4d:c2:d1:4a:65:90:f4:27:f6:d1:b9:51:8f:
e8:d4:2a:ad:58:67:3f:41:b8:32:42:f1:34:4c:5b:e0:8c:bc:
b7:8f:0e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 22:02:38 2026 by rpki-client