Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa
File: 2d9f3120-fab9-43aa-973f-4142925b1416.roa (raw, json)
Hash identifier: 4Y2eP3EMO0XJPGXl2W5v9xfn5AZNuEhq7heod7KzRec=
Subject key identifier: 86:AF:FA:15:F9:66:B7:3D:B7:C7:DF:8B:42:B9:B7:FF:90:B6:9F:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 324C4C27EBA99D279FD9261E147A1454102FDC89
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa
Signing time: Fri 26 Sep 2025 19:10:07 +0000
ROA not before: Fri 26 Sep 2025 19:10:07 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4c:4c:27:eb:a9:9d:27:9f:d9:26:1e:14:7a:14:54:10:2f:dc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:10:07 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=63844e9f9675228b628e667ca4c0ee766e87bdb2cccadfb11b7fd3d8c556e33c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:cf:cd:76:30:2e:d5:de:0e:19:b4:c3:5a:
c6:90:94:32:64:53:05:cf:eb:91:b8:6d:d7:af:f0:
2b:80:77:fe:38:81:57:89:9c:7f:68:ce:03:bb:75:
66:40:8d:b7:a7:f7:ca:db:ad:0f:44:ce:ff:a7:d2:
45:72:6b:90:f4:23:03:b3:8e:69:00:4f:19:26:b4:
ed:03:98:45:47:99:5f:eb:74:15:61:87:f8:1b:49:
4f:52:1b:8a:2f:fb:98:66:99:c8:4f:a3:bf:2d:37:
30:a5:6f:24:e1:20:a0:da:f0:c3:61:05:4a:14:95:
67:8f:f9:bf:ab:f0:ed:57:93:5c:e7:a9:cb:a1:05:
a8:ea:52:5f:bd:74:14:85:0d:bf:31:88:ca:a0:c7:
8a:80:61:7d:b5:20:39:6d:a1:c3:7b:19:14:46:b6:
96:af:11:f2:0e:b5:ac:30:ed:62:26:9b:8f:0f:56:
87:cd:4f:0e:02:16:be:ad:95:04:96:55:0f:86:7e:
32:1a:02:e2:d0:65:1b:b5:b8:7d:20:e7:61:26:29:
52:2a:ab:cf:43:31:16:be:be:d8:20:e4:e7:02:2f:
ce:16:1f:a2:dd:d2:71:9f:86:e8:a1:37:a3:53:2c:
8e:55:5a:e6:16:85:a3:29:cb:6e:2d:a0:2d:de:c5:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:FA:15:F9:66:B7:3D:B7:C7:DF:8B:42:B9:B7:FF:90:B6:9F:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
65:92:7c:07:24:95:3d:be:87:7e:6e:56:c8:b1:75:2f:b0:1e:
fc:a8:52:e0:bb:52:59:bb:59:d3:c4:35:db:0f:80:65:fa:19:
66:2b:7d:21:d0:4d:ce:26:37:b1:0a:f2:ce:43:6f:c6:c0:51:
fe:63:04:f9:b7:2f:57:6c:11:cc:67:5f:25:96:63:a3:3f:91:
f7:ff:eb:9e:9c:77:34:1b:20:27:29:36:a0:12:5b:62:6b:6a:
a8:47:1a:f1:ea:9c:f4:02:d1:60:db:3f:11:0f:c4:c7:83:f0:
38:7d:e5:bd:31:1c:e6:d8:02:2c:40:ca:83:c0:47:ab:fc:98:
98:d6:27:22:bc:ba:b0:ec:34:3b:1d:e8:a0:e6:96:7b:c2:65:
b9:71:3a:fc:19:37:79:63:81:f5:1f:1a:46:1b:25:71:19:2a:
a5:f1:f2:e2:7a:ce:c9:61:60:fa:de:d8:16:c4:6c:c0:e4:aa:
cd:cc:c1:ad:81:c7:3c:34:96:98:df:77:5a:df:e2:6b:4c:5b:
92:54:64:6a:55:1d:40:eb:ba:a3:1e:a7:50:ce:38:31:e0:2a:
e8:e7:bf:99:ca:c3:23:52:15:75:9d:c4:49:c5:40:69:d3:ac:
d1:f0:1e:10:e1:ed:97:1f:04:e3:82:e1:47:b1:e3:3f:9f:c3:
7f:ea:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:28 2025 by rpki-client