Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa
File: 21442095-1d11-4516-867c-53ad149e6c07.roa (raw, json)
Hash identifier: nhpphtPDP0DSoHPBrNDX72qfpj5Y6iUxsWRib7ZuNGE=
Subject key identifier: 15:6A:4D:5D:9B:5C:22:5E:67:D2:E2:7D:A3:84:C0:AF:05:B3:DA:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 794936D9BA8A38AA9A90A2C7BA7AAF9BE8940D54
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa
Signing time: Fri 17 Oct 2025 21:40:12 +0000
ROA not before: Fri 17 Oct 2025 21:40:12 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:49:36:d9:ba:8a:38:aa:9a:90:a2:c7:ba:7a:af:9b:e8:94:0d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 17 21:40:12 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=1a830b289194ef33218d270f2ed97faf03651ee6a8e7ee81f218d0f6a6b206fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:0f:86:97:9f:ee:1b:9b:93:62:cf:a7:66:
bb:fd:a7:75:5b:76:8e:b4:70:c4:9e:65:c4:cb:8b:
3b:a8:73:e2:49:30:f3:55:87:e5:42:35:4f:79:32:
6e:1d:9c:ce:2e:9e:bf:19:e7:1d:38:40:57:8e:75:
5b:57:ed:d5:77:a6:d0:fb:0d:80:fc:dd:01:67:fc:
1b:40:6f:bb:b1:f8:ee:27:7e:e8:7b:65:0b:a4:c7:
68:13:30:bd:27:1a:16:b9:1e:71:ed:e7:79:b1:a5:
4f:dc:2e:b9:c2:0e:79:63:b2:f0:c8:ff:0d:82:33:
d7:c1:52:8e:86:60:52:b2:db:97:ad:c8:5b:25:42:
a2:01:97:53:ab:8b:e7:c8:27:62:62:51:e8:9c:4e:
50:5b:8f:6b:93:cc:97:7d:d0:f7:c0:69:f4:88:96:
96:3f:c8:ab:14:24:32:88:57:48:a9:1e:0a:51:7d:
47:57:fd:5a:d0:09:6b:e7:f7:e7:5c:d5:2a:84:a6:
23:f4:7e:9f:7a:25:60:c8:57:70:9a:a3:5a:ef:77:
8f:ab:92:7f:bd:ef:53:66:2c:bd:75:8a:6b:e9:1c:
52:9f:2f:97:39:1e:1c:bb:32:e0:28:43:37:ec:33:
98:53:0c:b5:27:7f:bc:ec:b0:88:01:99:1f:32:3a:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:4D:5D:9B:5C:22:5E:67:D2:E2:7D:A3:84:C0:AF:05:B3:DA:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/21442095-1d11-4516-867c-53ad149e6c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:800::/40
Signature Algorithm: sha256WithRSAEncryption
6f:c7:95:2e:62:e4:6e:b3:71:67:89:02:a4:6c:46:00:bc:76:
a5:12:73:1d:cd:16:90:b2:eb:7d:89:8c:e9:db:d1:be:77:3c:
e6:36:0a:7b:f7:24:6d:45:38:b8:43:be:db:c0:31:9b:3d:c5:
bf:82:d9:e6:fb:32:ce:7f:fc:c9:72:04:09:de:62:fa:69:5c:
7e:d0:87:8c:5b:d6:e4:ba:a4:57:e4:c1:86:4e:71:29:f9:38:
cb:c6:bc:2e:e8:d1:8b:69:83:4a:8f:32:8f:6d:91:69:4a:47:
c1:c1:ab:b6:f6:1c:45:b2:fa:26:27:ab:8f:b1:ee:5a:03:b1:
03:a4:dd:0d:e1:b4:f6:7a:62:e6:8c:93:6f:a1:8f:b8:72:2e:
f7:8e:aa:64:dd:94:46:ea:77:05:9c:bb:d4:78:38:23:45:c4:
ad:1e:c1:93:21:d2:43:2f:a5:d9:e4:a4:c9:b5:b0:a1:a8:14:
1b:06:d2:e7:4d:a3:32:8b:46:c7:e3:f5:e2:46:2c:9b:5f:8e:
53:0a:fa:f1:b2:ec:65:fb:a7:1c:89:56:8a:79:c2:1d:e2:9c:
27:42:27:b7:e8:d3:48:c9:bd:ce:08:7e:9f:5e:ec:f3:2b:a8:
b1:71:8b:7b:f0:40:89:4b:9f:70:42:43:82:6e:0a:4e:9e:1a:
4b:46:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:47 2025 by rpki-client