Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: iNkN7dA8CpaqeC73TDwE37sfG9aVntX9Qcd3oLBc3Ig=
Subject key identifier: 20:74:0C:CF:1F:74:A4:1D:4A:6D:4D:22:98:37:EC:5B:C0:5A:76:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27FF7FBE95062B445CD6800524CD2F22A6E128A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Sat 28 Feb 2026 05:20:47 +0000
ROA not before: Sat 28 Feb 2026 05:20:47 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ff:7f:be:95:06:2b:44:5c:d6:80:05:24:cd:2f:22:a6:e1:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 28 05:20:47 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=bc3bf9922d8af56663266c8b5deda252f3d0109e48d42e88a795abfb3e1c250a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0f:81:a5:15:a3:77:58:d7:f0:5d:fd:a9:99:
92:fe:e3:fc:f7:e4:ec:62:ce:04:46:73:44:4d:8d:
45:68:15:b9:18:14:08:4f:27:31:22:29:67:d4:51:
4a:ce:51:58:87:85:3f:e0:05:9c:69:70:3e:23:d9:
6e:f0:fe:07:81:17:c5:7e:40:cd:a5:f4:8a:d3:69:
b2:06:24:15:a7:93:05:fc:d5:1b:46:fb:10:64:49:
66:12:c9:d4:11:30:0e:aa:52:fb:2d:fc:f1:51:4b:
65:03:f5:b4:9e:7b:73:25:97:38:79:de:5c:97:cd:
f8:9b:71:da:33:42:c0:1b:cc:51:ad:1d:ee:bb:83:
59:b4:4c:6b:06:bc:ba:d0:1b:5d:c2:ed:92:b5:cd:
7a:d3:e2:24:d0:90:55:f1:7b:c7:12:c0:03:07:74:
55:7e:ce:b3:44:6f:fa:14:67:1e:65:a9:c0:66:1e:
e8:86:8f:56:c4:0b:b5:98:48:33:ba:45:89:c3:65:
07:e6:fa:e6:27:6c:51:3e:1f:ec:7f:b8:64:d7:48:
bd:7f:c7:b1:ea:7a:c1:ec:b3:c7:cd:83:4f:7b:36:
29:bb:fc:95:98:6d:78:3c:c7:b4:19:69:ff:ac:9a:
44:04:b6:6b:b6:cb:b7:52:f0:0a:a9:67:51:4f:4c:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:74:0C:CF:1F:74:A4:1D:4A:6D:4D:22:98:37:EC:5B:C0:5A:76:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
55:03:8f:b0:52:60:43:46:36:81:74:3d:f9:25:7a:d6:36:4e:
e5:8f:bf:cb:b1:56:c1:ad:ac:11:11:52:65:48:b8:b9:ef:04:
d8:eb:75:47:3b:62:cd:05:32:a2:2c:0f:0a:d4:73:99:93:2c:
e4:a9:f7:5e:b0:85:df:2d:b0:fc:73:1e:b1:d3:0e:18:d2:68:
e5:7c:19:af:64:52:8d:9e:d8:56:5d:f8:b3:71:d1:d5:6d:a1:
94:c2:3d:93:18:1d:87:b4:d3:c6:b4:21:da:6f:91:56:91:52:
8e:d8:0a:27:d2:53:83:b8:65:f8:e8:20:1a:14:bf:62:8b:68:
0d:f2:d7:33:37:b9:d2:1b:14:63:a3:5d:ad:00:ba:77:82:12:
8f:b7:5c:35:c1:af:88:67:3a:a3:4e:91:3b:72:c3:86:9c:2b:
f6:b8:78:dd:a9:18:20:81:a4:68:62:28:bd:04:4d:e6:52:d0:
74:a2:94:a9:b5:b9:fb:5d:d0:78:97:d2:be:0d:1e:e2:91:6e:
8a:42:1a:6d:0b:f3:04:e7:b6:d9:2b:76:17:26:07:ac:78:65:
37:12:44:0c:2c:ad:dc:02:4d:2b:af:84:10:a8:96:bf:e4:27:
2c:52:96:76:74:88:89:3c:a4:2a:e7:9e:0a:e3:f4:2a:f3:a7:
18:3d:ef:46
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJ/9/vpUGK0Rc1oAFJM0vIqbhKKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjAyMjgwNTIwNDdaFw0yNjA1MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjM2JmOTkyMmQ4YWY1NjY2MzI2NmM4YjVkZWRhMjUyZjNkMDEwOWU0OGQ0
MmU4OGE3OTVhYmZiM2UxYzI1MGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPEPgaUVo3dY1/Bd/amZkv7j/Pfk7GLOBEZzRE2NRWgVuRgUCE8nMSIpZ9RR
Ss5RWIeFP+AFnGlwPiPZbvD+B4EXxX5AzaX0itNpsgYkFaeTBfzVG0b7EGRJZhLJ
1BEwDqpS+y388VFLZQP1tJ57cyWXOHneXJfN+Jtx2jNCwBvMUa0d7ruDWbRMawa8
utAbXcLtkrXNetPiJNCQVfF7xxLAAwd0VX7Os0Rv+hRnHmWpwGYe6IaPVsQLtZhI
M7pFicNlB+b65idsUT4f7H+4ZNdIvX/Hsep6weyzx82DT3s2Kbv8lZhteDzHtBlp
/6yaRAS2a7bLt1LwCqlnUU9MeosCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQgdAzP
H3SkHUptTSKYN+xbwFp2ljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRkMzM1NjItMjY1My00NTQ5LTg0ZGMtMjVmOTZhYTEwYTgzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CEA
MA0GCSqGSIb3DQEBCwUAA4IBAQBVA4+wUmBDRjaBdD35JXrWNk7lj7/LsVbBrawR
EVJlSLi57wTY63VHO2LNBTKiLA8K1HOZkyzkqfdesIXfLbD8cx6x0w4Y0mjlfBmv
ZFKNnthWXfizcdHVbaGUwj2TGB2HtNPGtCHab5FWkVKO2Aon0lODuGX46CAaFL9i
i2gN8tczN7nSGxRjo12tALp3ghKPt1w1wa+IZzqjTpE7csOGnCv2uHjdqRgggaRo
Yii9BE3mUtB0opSptbn7XdB4l9K+DR7ikW6KQhptC/ME57bZK3YXJgeseGU3EkQM
LK3cAk0rr4QQqJa/5CcsUpZ2dIiJPKQq554K4/Qq86cYPe9G
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:37 2026 by rpki-client