Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/012c9415-fd75-453f-91b6-b57a394d548d.roa
File: 012c9415-fd75-453f-91b6-b57a394d548d.roa (raw, json)
Hash identifier: Un+r9o9/uPul4qLVTlvJDkzMHfA07QCky1I/wyOoI/c=
Subject key identifier: 97:96:6B:9E:48:E5:04:FE:71:C3:E4:C7:B8:0F:2E:9B:6B:10:2F:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 30282A1B470C678312C6DDE0830D53B89A6E135F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/012c9415-fd75-453f-91b6-b57a394d548d.roa
Signing time: Fri 17 Oct 2025 21:10:12 +0000
ROA not before: Fri 17 Oct 2025 21:10:12 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:28:2a:1b:47:0c:67:83:12:c6:dd:e0:83:0d:53:b8:9a:6e:13:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 17 21:10:12 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=76c528c49f50caec69d89c583fb21261ae19e4e3ce3dc5050dbc31eb25fa8ef4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:63:ed:64:1e:66:2f:55:39:72:56:62:bc:
57:2e:d3:9f:43:fc:db:62:35:23:a4:3d:d8:ca:b3:
8e:b3:76:cb:68:ef:23:f6:e3:ce:22:e0:b5:a8:31:
9d:07:cd:44:41:59:84:7c:9a:3d:84:9a:06:eb:c3:
db:86:18:f5:24:f9:c7:7b:c8:1d:27:74:02:5c:33:
b6:cc:8c:a0:3b:d8:55:ee:0a:c9:ce:7a:cd:1d:67:
35:ec:dd:8e:9f:de:c0:91:a6:5d:60:77:05:1d:1b:
ce:fb:00:da:bd:8e:70:8f:7a:e9:c9:af:5c:69:31:
bd:39:af:b3:ba:32:72:d8:ec:b1:32:be:25:20:22:
ca:94:37:2e:44:b9:8e:2f:b2:e7:08:f4:27:fd:41:
06:68:6b:96:5e:87:93:1f:26:29:45:d7:23:58:b6:
7f:20:32:a3:2a:c0:47:6b:a1:c4:26:f5:09:0b:c0:
a2:ed:67:3a:66:d5:b8:7c:d4:5c:78:76:21:13:f2:
c0:bf:50:de:30:78:db:cc:53:34:c3:fb:ed:ca:c6:
22:44:f4:6c:67:5d:d0:4d:96:a1:0e:af:e4:26:79:
da:4b:e8:10:39:90:1d:0a:ae:4c:b4:9a:20:11:24:
5b:8a:42:6a:79:62:11:25:f1:b8:ba:ac:e5:cd:fb:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:96:6B:9E:48:E5:04:FE:71:C3:E4:C7:B8:0F:2E:9B:6B:10:2F:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/012c9415-fd75-453f-91b6-b57a394d548d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:6000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:4f:4a:ca:db:3f:8d:d9:99:3a:dc:44:3a:a0:ea:04:0f:33:
8c:1a:e8:19:ec:d5:f6:59:cb:9a:e5:0e:82:a5:f1:28:d6:f6:
02:db:e3:08:66:3d:8d:42:ce:6c:dd:09:96:41:f0:e1:58:8b:
9e:22:bd:2b:17:33:d8:67:db:cc:72:76:90:10:ee:07:bc:89:
77:12:36:05:54:d9:99:af:59:d1:48:95:25:b9:b0:6c:f2:c0:
60:fd:b7:d2:51:5c:e0:8b:8c:b8:04:e6:f8:11:ca:0b:00:90:
a8:e3:c1:bf:b8:28:cb:86:29:95:20:23:cb:85:a0:13:ee:17:
df:f9:b6:3f:f7:e4:5a:4e:e7:e2:da:46:9f:c7:9f:de:f7:5b:
37:fc:d5:94:41:e1:36:5e:9d:a4:f3:3c:30:b6:30:1d:c5:34:
93:87:ca:fc:7b:19:63:df:85:a4:00:ee:33:46:a7:2e:d1:8b:
a8:1b:eb:0c:3b:a7:2b:ac:5a:e2:e0:bc:30:d2:b3:69:eb:1a:
8d:a3:95:03:b8:b5:cb:81:6e:97:bc:3a:b1:ee:86:2a:9e:cd:
95:3d:14:d7:79:8f:7c:a2:26:bb:5f:d1:44:08:8c:55:8a:6a:
a7:15:f5:c2:68:4c:e1:50:9d:79:8c:ec:ec:79:e1:6f:69:5b:
8d:57:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:45 2025 by rpki-client