Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
File: bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa (raw, json)
Hash identifier: BlsuwJcnn0DGzq9oY8lrBj4AV2bmT7Sli/TTOP4dUzQ=
Subject key identifier: 47:14:21:B9:87:67:79:74:BC:46:CE:E3:DB:1E:85:2E:5F:0A:CB:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B98E4F334C94261415E3DA66BC86D826634496E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
Signing time: Fri 07 Aug 2026 05:10:20 +0000
ROA not before: Fri 07 Aug 2026 05:10:20 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:98:e4:f3:34:c9:42:61:41:5e:3d:a6:6b:c8:6d:82:66:34:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:10:20 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=14fc876ba47c84c24f022bd2cf0535071fb40c665f26d24c6d34bab98cd01d76, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:6e:09:4b:bf:22:7d:a6:c6:95:24:a6:0a:
a6:32:1a:54:d2:ff:66:d8:69:2a:76:36:85:c8:3a:
7d:41:b2:0d:dd:e8:6d:90:59:5b:7a:25:0f:4c:4d:
14:08:88:d6:45:73:65:fb:11:b4:4c:9b:e3:6d:28:
32:a0:cb:84:41:8a:aa:fd:c2:66:4d:86:5c:da:2a:
ae:f7:1d:7d:3b:98:22:a4:da:c0:a0:70:c1:4e:6d:
12:95:6a:46:8f:17:7d:1a:a6:24:a0:79:e3:8b:66:
47:bc:47:b1:65:09:4c:70:c9:74:25:9a:d7:e0:f3:
1d:3a:1c:0a:cf:36:d6:a0:a4:e4:80:09:76:b4:63:
59:2f:0c:e7:63:a3:d1:5a:8e:a7:88:24:b2:07:66:
5f:81:b6:65:3c:ce:a5:22:f0:c2:10:01:fa:13:98:
ed:a1:c4:3e:b1:cb:13:ec:1b:5b:af:d9:02:2c:77:
30:88:f0:e5:be:8b:43:88:0f:2b:6c:ae:71:b7:c4:
2a:78:ef:1c:97:7c:1f:f3:d2:01:3e:3e:f6:a1:6a:
a9:4c:6f:6e:ba:11:ec:bb:7a:3e:a7:b3:37:c9:f9:
01:25:81:57:06:20:d8:aa:05:d0:c8:40:e0:ea:2d:
34:8e:15:68:f8:f9:64:8c:8e:2e:29:21:26:5b:d2:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:21:B9:87:67:79:74:BC:46:CE:E3:DB:1E:85:2E:5F:0A:CB:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf1db0f3-6cad-4fcc-96c5-ddde700e6264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:b000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:e6:cc:f9:19:a3:c4:c2:76:25:ca:b1:b9:08:38:2d:44:28:
82:81:41:d2:0f:8e:ea:0f:33:6f:70:07:6f:b2:b8:54:f6:b6:
1d:f3:07:69:0f:e3:bf:78:c9:43:b1:06:03:d2:73:52:d5:44:
77:03:4a:7e:3f:c7:0d:d6:ef:46:21:00:39:2c:50:6f:5b:e3:
e5:6f:ae:82:da:68:87:29:d5:ab:95:d3:48:4f:0c:ef:cd:2b:
d2:d4:af:34:ce:01:82:73:fe:7d:07:63:d3:84:ea:69:a5:c9:
d3:31:27:cc:10:19:08:04:1c:54:01:25:f1:0a:c6:d9:54:01:
55:0d:78:88:d9:56:53:4d:17:49:91:b7:8d:c0:d9:5b:ac:da:
65:13:13:80:ae:1c:c8:f7:44:eb:d2:1c:3d:bf:77:f6:73:bf:
b8:62:04:cf:bc:da:0a:7a:70:46:3c:41:df:a7:d3:b9:38:6e:
a3:e5:d3:b8:69:92:7b:df:5a:29:1f:08:a2:6c:c0:09:22:82:
40:f2:9e:56:c9:07:88:50:b8:91:96:2d:ee:50:af:37:59:2a:
6a:0e:8d:9e:8f:31:5f:7c:51:fa:27:cb:37:64:a4:ff:18:8b:
d1:69:6d:43:ab:84:98:11:43:35:3b:8d:35:40:d7:05:71:2d:
ce:0c:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:09:59 2026 by rpki-client