Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
File: 007aa6ae-ee04-4168-a465-d2d3db70f19f.roa (raw, json)
Hash identifier: CNltAWyYC9kDpa0UoTvWk4R6AHJE/LP83FD7Mru9ua4=
Subject key identifier: D1:7F:94:37:EC:ED:AF:50:07:44:5F:32:48:24:CE:B0:A5:97:A9:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06EA7A0685ABDB377CCEF0E40752BC0BC14D3552
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
Signing time: Fri 26 Sep 2025 18:20:09 +0000
ROA not before: Fri 26 Sep 2025 18:20:09 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ea:7a:06:85:ab:db:37:7c:ce:f0:e4:07:52:bc:0b:c1:4d:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:20:09 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=b9ebb087e240c8af0f80da6cb5c359825ce8d425d647f9bcffdfaabb26ede386, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:a5:0d:d9:1a:87:ba:d5:21:46:35:93:bb:
b5:99:75:5d:9a:d3:52:da:ad:0c:88:7c:7f:40:51:
66:bb:2b:07:90:2c:56:98:26:f1:03:87:f6:42:32:
6c:4c:6f:8e:0b:db:10:64:83:a1:b9:5b:a5:92:73:
a4:23:70:fe:1a:fc:d5:73:e7:0e:92:a6:10:41:d9:
82:a5:05:65:53:c2:45:ce:d6:0c:eb:95:85:85:5e:
8c:36:28:c0:68:2f:3c:3f:e0:fa:0f:ac:12:27:0a:
03:4b:7f:55:a0:ae:3e:8c:da:9f:3a:16:e2:4a:c3:
1b:c8:fc:ba:eb:55:44:c4:42:f4:25:85:70:e0:a4:
ce:06:65:8c:92:5b:57:4c:28:ee:75:91:a1:c1:59:
dd:21:57:55:2f:11:08:11:9e:49:7e:cb:78:3c:cf:
4f:a0:78:50:1d:bb:a1:2c:f4:72:e8:92:d3:83:07:
21:22:ce:de:b5:9f:28:4c:f7:be:09:13:0d:59:41:
a5:68:d3:62:ac:6d:46:fe:ce:ce:ab:bc:98:3b:1e:
85:bb:4e:de:03:16:ad:55:c3:9a:ce:1a:59:03:bf:
11:74:7d:1c:27:8d:a1:ca:ca:8e:70:f8:a9:9f:5b:
d5:fa:46:e7:4c:b1:8f:e6:a5:a5:9f:a0:df:a8:e9:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7F:94:37:EC:ED:AF:50:07:44:5F:32:48:24:CE:B0:A5:97:A9:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1040::/48
Signature Algorithm: sha256WithRSAEncryption
0a:f3:37:5b:a8:4d:90:29:fa:5c:bc:56:3f:62:2a:92:8f:78:
45:ef:78:c1:17:a2:f1:31:79:de:d9:20:38:2b:7b:55:04:5e:
f6:31:22:58:37:0f:d7:0d:e2:05:3b:be:1a:ea:f5:98:8c:94:
85:b7:80:12:96:c3:88:4d:98:3d:a9:ba:bc:52:c7:99:df:7f:
7f:2a:c8:7f:55:e5:ea:8b:12:f7:f7:f8:1d:7c:e7:54:de:2c:
54:e1:25:ca:d6:27:b0:e7:a8:3c:ca:c9:f3:5c:26:d7:8b:fb:
07:b7:6e:43:a8:c8:22:24:76:cd:ec:74:5c:50:3d:e3:19:ae:
45:83:98:75:8a:b9:b3:8d:60:15:98:fe:46:52:a0:47:49:eb:
8d:c2:26:f1:c0:55:74:43:a4:17:01:1f:5d:1f:0d:49:79:7d:
2a:25:53:90:c0:0f:a8:e5:64:23:d4:87:f6:32:1c:c9:e4:e1:
ce:92:09:a4:67:0b:fe:2c:1e:a1:90:90:cf:e7:b9:ba:0b:33:
52:d3:1c:46:0b:3f:c6:bc:e4:94:80:ee:32:7a:70:d3:31:34:
14:76:62:ec:a4:2f:c5:2d:24:6a:ed:c0:72:77:b7:1d:c9:16:
d1:a5:43:26:72:f2:93:ec:aa:4c:c1:16:cf:86:d7:39:96:d9:
e6:42:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:08 2025 by rpki-client