Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/000ad043-0981-4c59-a1f8-0cd90ca9eb96.roa
File: 000ad043-0981-4c59-a1f8-0cd90ca9eb96.roa (raw, json)
Hash identifier: nkFdsomG2CFW22AWBU0A1tu2J4LyYaIO6odWBbr5YfM=
Subject key identifier: 88:B3:C6:BF:50:3D:7E:95:BE:4B:7A:01:BF:4B:B3:41:A4:B0:3A:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79095395C07495F59C1CEF3CB9C97E343676ABCA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/000ad043-0981-4c59-a1f8-0cd90ca9eb96.roa
Signing time: Mon 06 Oct 2025 17:50:40 +0000
ROA not before: Mon 06 Oct 2025 17:50:40 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:09:53:95:c0:74:95:f5:9c:1c:ef:3c:b9:c9:7e:34:36:76:ab:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:40 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=0fc935785ab74d75f1de5a081be91e11ee33617d9a99112358f1e096811a8f67, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:8b:fb:0a:56:f4:68:a7:cc:85:4d:a4:c7:
47:91:83:2a:61:5c:43:3b:e2:fc:a7:49:44:ce:41:
58:ae:f5:aa:cf:2a:bf:12:e2:1e:a5:d1:71:8e:e1:
2b:df:b8:ea:2b:5c:d2:ef:1c:05:14:2a:87:cf:a4:
36:08:ae:0c:ce:99:81:94:c8:f2:f9:10:6b:6f:d0:
b7:95:7b:9c:38:41:c3:5e:f9:b3:4e:e6:97:15:29:
a3:a7:8e:02:cf:1e:c9:f7:d7:54:8c:10:c4:91:86:
f3:ec:aa:e9:57:79:18:ef:b5:ca:9b:39:ae:3a:b8:
95:a0:0c:7f:ea:14:dc:60:19:b7:01:c9:44:fe:a3:
1e:60:4f:6f:57:a8:0b:ec:da:48:fe:17:2a:dd:d5:
ef:bd:06:1b:74:29:b7:89:3c:81:35:f8:76:7f:27:
11:28:6a:3e:86:15:57:45:e9:ce:8e:e2:ec:4e:9a:
aa:dd:1e:5e:46:35:dd:54:73:8b:4c:8e:e9:02:5f:
32:53:62:07:c6:4c:bd:46:49:c2:ea:c1:38:d8:0f:
c4:4f:84:a2:a5:77:d7:fa:d2:e6:44:a7:c5:5d:d1:
3a:1f:cb:77:0d:60:62:d9:98:fe:b8:a4:4c:24:38:
c0:a9:d3:3a:1d:1e:ce:eb:8f:93:f4:18:86:a5:7e:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:C6:BF:50:3D:7E:95:BE:4B:7A:01:BF:4B:B3:41:A4:B0:3A:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/000ad043-0981-4c59-a1f8-0cd90ca9eb96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:90:cf:bd:52:d4:21:53:78:16:ab:e7:02:38:c1:3c:aa:69:
5a:eb:19:72:94:14:68:9d:c2:a2:bf:1d:92:37:3e:2f:7a:24:
17:aa:03:21:52:59:c4:6f:7c:f5:82:37:03:71:a2:f4:36:6b:
c7:a0:58:45:6c:95:f0:6c:26:1c:c4:e3:eb:1b:8f:f2:44:36:
c3:ac:59:87:71:05:da:d7:9a:8c:b4:4f:93:3b:60:40:4d:72:
13:9a:23:48:57:29:6f:7a:e3:87:70:71:06:98:3a:3a:95:29:
73:14:b9:b5:f0:2b:d6:0a:af:be:fe:be:98:d8:8b:2f:34:3b:
db:45:7f:7e:c3:2d:7d:60:a0:89:4d:ed:74:b4:29:6e:7f:89:
48:e3:bd:fc:16:55:08:b9:1f:f1:f3:79:9f:75:72:59:a0:9e:
52:26:b7:8e:b4:eb:95:37:ab:81:fa:d6:dc:4e:c7:ae:bc:3d:
15:bd:18:0f:96:72:36:bf:05:4a:81:4f:9b:ca:04:0c:18:47:
bd:30:0d:a9:0f:14:9b:e2:db:07:c8:45:1d:37:5e:d3:5e:a4:
be:ef:f0:70:8c:52:e5:66:b4:39:6f:7b:ee:e4:bb:62:c8:6f:
2a:b6:e8:10:03:24:32:0d:d6:91:e0:37:82:73:fc:91:8c:2f:
9d:fb:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:32 2025 by rpki-client