Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
File: 11758a9b-0e07-4929-92b2-ff867af4fa4f.roa (raw, json)
Hash identifier: rPKkAuw9p+uoE2I3c58GhdmkvUO68Ra6VH4aIg6jjWA=
Subject key identifier: F7:44:A5:C0:81:27:B6:B7:55:DC:BF:8B:D6:6B:DA:46:EF:DC:C0:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 56FB7EE683C3244880711B6A38E7AF271799DD71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
Signing time: Mon 13 Oct 2025 17:55:55 +0000
ROA not before: Mon 13 Oct 2025 17:55:55 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fb:7e:e6:83:c3:24:48:80:71:1b:6a:38:e7:af:27:17:99:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 17:55:55 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=f5c1d20a5950ebc6bf48c0e758983ac8024cf154d4840bd89b43f04550a765e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:70:59:da:06:eb:1b:88:3a:ea:23:df:6a:
8f:98:be:c9:92:4c:85:18:0a:e3:8a:78:94:61:61:
73:f4:8d:a4:18:a6:86:56:7f:09:1a:a7:c6:b2:c8:
a7:8f:e0:62:a2:b5:76:c8:88:23:ff:67:14:dc:76:
d6:a2:90:43:c5:28:31:df:9c:87:cb:3a:3e:07:fd:
c0:cc:62:9d:bb:12:95:0d:d9:39:94:63:4e:6a:67:
d7:c2:2b:f7:88:87:fb:c7:c7:b8:56:8b:37:3d:58:
3f:ce:be:71:2a:10:70:03:98:43:2b:2d:53:83:73:
1e:5d:fe:f9:a0:44:8d:b0:af:a6:62:93:9b:08:91:
f0:71:8c:b8:0d:4a:61:40:4a:71:ad:eb:0f:ad:a6:
49:fa:9b:b6:08:66:54:d0:11:ee:06:eb:57:13:91:
c7:a8:a3:2d:55:2f:7f:b7:6f:51:7d:82:09:7d:23:
77:3f:2d:a8:b9:80:1c:7c:9c:8a:c2:e1:64:34:5c:
59:5f:e8:a7:35:99:08:f5:57:70:a4:a1:a3:5e:93:
8e:a8:61:07:22:74:c0:ba:4b:cc:76:51:51:53:fb:
44:5c:00:b8:10:40:11:f2:5a:5d:17:35:36:73:01:
e0:73:c4:0d:a5:5c:97:d3:e5:0f:38:0e:38:1f:76:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:A5:C0:81:27:B6:B7:55:DC:BF:8B:D6:6B:DA:46:EF:DC:C0:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11758a9b-0e07-4929-92b2-ff867af4fa4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
a8:41:3d:4a:ce:8b:c1:15:97:1f:f6:3b:1b:ff:92:aa:e8:4c:
1f:3a:15:bb:99:6c:e0:74:00:14:db:13:1a:f4:76:44:aa:7f:
7c:cc:82:c1:15:da:d4:a7:f5:1a:4a:f1:b9:12:c2:b7:a7:ab:
50:4e:70:74:5a:ff:64:89:7a:6b:be:00:00:d0:c3:81:ea:8a:
f2:27:56:29:5e:4b:8d:e0:81:b7:2f:f6:34:3f:e5:65:bb:d9:
46:12:ea:fe:e8:3b:e2:53:85:8d:6d:24:76:8f:c1:1b:c3:49:
76:50:93:ac:bf:c6:de:7b:08:b6:97:71:5a:5f:f9:f0:08:0a:
c9:cd:56:74:3b:19:ca:45:96:35:e5:78:73:35:37:60:67:19:
3a:89:58:ac:94:4d:b8:49:a1:73:71:e8:5f:cc:ec:72:da:01:
f7:2e:19:a1:65:00:89:60:54:eb:6a:8c:58:57:83:99:69:53:
8c:c1:27:fd:10:d6:35:24:51:70:ca:03:5a:c2:73:f4:cb:58:
51:0a:d0:2f:df:35:7a:13:f8:00:0f:48:c6:5f:26:ad:09:d7:
d9:ac:3c:74:4e:ff:81:f9:6a:f1:18:5b:55:68:3f:74:4a:42:
e2:e7:01:04:ee:66:0c:7c:db:f9:09:e8:10:e8:d9:ad:7c:e4:
50:a0:a2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:16 2025 by rpki-client