Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bfae711e-b0c4-404f-be1f-a99990818ac6.roa
File: bfae711e-b0c4-404f-be1f-a99990818ac6.roa (raw, json)
Hash identifier: zfCoSv+gOaOEJCA1zn7UNTE71oTBlaTHifcaTJnpedE=
Subject key identifier: 46:47:46:3E:34:38:A2:04:F3:B0:E6:C9:0B:77:30:E3:70:4D:AD:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 698D246ED94F765D32BD88E27DC422EC60C42D9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bfae711e-b0c4-404f-be1f-a99990818ac6.roa
Signing time: Fri 07 Aug 2026 05:30:51 +0000
ROA not before: Fri 07 Aug 2026 05:30:51 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8d:24:6e:d9:4f:76:5d:32:bd:88:e2:7d:c4:22:ec:60:c4:2d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:30:51 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=aeada70bc774a49e6ffe370fc3f5dd7e61314d830f944ca0febf213fa3106de6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:7d:dd:15:a5:3f:d9:81:ab:ee:44:c2:03:
43:63:f2:b2:67:cd:22:5c:2e:9c:cd:7b:25:a3:05:
a0:38:ce:25:5f:f0:3a:fa:28:97:2e:83:a4:76:23:
05:dc:ad:35:4f:04:18:64:f4:13:3f:92:9a:85:59:
47:1f:2d:6f:4f:f2:ff:b5:fb:3f:24:21:88:62:77:
97:01:b6:a0:f1:c9:b5:8c:92:b7:1d:a8:c0:32:47:
22:b5:64:4f:b2:07:0b:fb:21:da:49:c4:22:48:30:
f8:e0:50:f5:73:34:5a:58:31:67:56:c5:ee:ac:b1:
ab:06:0f:8b:bd:e3:e3:f2:b2:4b:62:81:64:0f:fe:
79:05:55:b4:0b:d2:f5:9d:9c:a2:eb:03:9b:ca:f5:
c5:8f:e8:ac:39:9a:9e:18:73:41:4d:f0:79:db:71:
e8:c5:f9:64:75:43:97:d3:5f:f5:10:69:99:13:40:
0c:62:74:c7:ff:4c:6f:07:9b:b6:b4:8b:b4:67:20:
78:48:a8:e2:3c:8f:a8:8f:66:9b:ea:83:92:f0:4b:
50:fa:bc:50:e1:e7:6d:02:c5:35:fe:42:d0:d0:4f:
08:2b:75:0f:13:34:3b:66:14:18:61:73:ab:9f:ad:
49:60:0b:d9:90:c9:bd:30:3b:b0:c8:82:97:38:29:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:47:46:3E:34:38:A2:04:F3:B0:E6:C9:0B:77:30:E3:70:4D:AD:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bfae711e-b0c4-404f-be1f-a99990818ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/23
Signature Algorithm: sha256WithRSAEncryption
89:53:83:75:ac:cd:3c:82:4c:26:c5:73:1b:59:9a:7e:a0:83:
ba:69:77:cf:ab:b9:3c:db:46:70:8b:c9:62:2f:fa:2a:6e:70:
b6:86:85:c4:69:22:5e:43:65:ae:82:17:93:6d:a6:d8:98:d2:
ee:1a:1a:d2:5b:f3:e4:72:5d:46:d0:56:a6:7f:0f:b9:3a:79:
f4:52:ef:02:7b:d0:ca:fa:89:cf:1a:57:f5:31:d7:78:84:ba:
9c:83:f9:48:5e:c3:f0:de:66:d9:23:fc:3e:dc:26:83:68:37:
f4:89:4d:0c:d6:ca:6a:60:da:25:fd:27:ed:40:8c:6d:fd:65:
33:25:af:1a:9d:c1:2a:35:e2:26:55:3d:0c:40:bc:8d:cb:35:
18:a1:9f:d5:a5:cf:f7:bf:5e:ed:b1:c5:ce:42:d6:ca:34:d8:
6c:87:eb:25:54:e8:eb:6c:35:85:2d:17:07:1c:5f:f3:10:ff:
49:be:a0:33:e7:3d:1c:18:33:fe:8e:5f:5f:48:95:77:c0:77:
18:76:3c:a8:d0:11:6f:4c:00:0c:bf:3e:e2:80:61:b0:aa:af:
07:c2:ab:c9:4d:4e:9d:98:a0:b0:c3:0b:3a:2b:a1:c6:2f:6c:
e3:8d:6a:d3:e7:6f:7f:8a:de:f8:f4:c2:94:9e:1e:85:75:b8:
f3:6f:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:10:13 2026 by rpki-client