Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dfb202f-6202-48da-a3b3-94f1ac000bc9.roa
File: 2dfb202f-6202-48da-a3b3-94f1ac000bc9.roa (raw, json)
Hash identifier: IFBl1ve7lFRZSrodXknmwmh+yf6kEdgnyf7+LKqQIto=
Subject key identifier: 0E:34:CE:7B:86:78:A3:52:35:DB:F7:87:1A:11:7D:CA:D7:42:B6:DE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54EF76FA406D80F3E3C9E86A8D3526ACB9251C5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dfb202f-6202-48da-a3b3-94f1ac000bc9.roa
Signing time: Fri 26 Sep 2025 19:51:32 +0000
ROA not before: Fri 26 Sep 2025 19:51:32 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ef:76:fa:40:6d:80:f3:e3:c9:e8:6a:8d:35:26:ac:b9:25:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:51:32 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=d01ccfb41d3b85a8215df4b577fb910e8ece88c75b1e4e9f521108b8bc1b31d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:cb:c7:af:93:8b:7f:37:57:9e:cb:f1:91:
fc:0a:b9:bb:52:47:f1:3b:45:7c:95:7c:e4:12:1a:
c3:ec:90:91:fb:02:3b:62:ef:ea:b1:e3:b0:1c:6d:
b7:3a:43:14:b1:0b:8f:be:26:70:9a:c4:d7:5f:84:
62:52:cf:3c:d0:9a:e9:78:62:fb:7c:37:0c:c8:2f:
9f:e4:f8:3a:33:df:a4:b1:28:33:a8:c5:a6:6e:6d:
dd:19:ce:b5:23:f0:4a:2c:44:24:3a:f6:3f:0d:4e:
a7:52:db:d9:98:c1:8d:2b:f2:ca:6b:b7:b1:57:40:
6f:39:e0:74:33:2b:0b:ba:15:0c:d3:30:f1:65:3e:
93:75:fb:4c:b1:0b:01:87:5f:9a:26:bb:95:52:7f:
4d:af:99:a5:50:22:ce:66:b2:31:bb:4d:ef:2e:5d:
96:2c:ab:b4:c0:08:5d:b1:3d:59:a9:86:e2:90:8f:
7e:c1:0c:66:4a:48:e6:27:44:50:dc:4a:61:fd:09:
47:7a:a2:d0:07:d8:dc:c9:b6:06:70:75:cc:ff:9a:
1e:55:3d:88:82:b1:af:0c:fe:c4:ef:6d:d2:78:8d:
88:83:1b:2b:3c:54:55:b5:cb:75:1e:1e:c1:9e:90:
8e:a4:16:08:df:83:eb:3c:c0:95:3b:6f:c0:97:6a:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:34:CE:7B:86:78:A3:52:35:DB:F7:87:1A:11:7D:CA:D7:42:B6:DE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dfb202f-6202-48da-a3b3-94f1ac000bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:9000::/40
Signature Algorithm: sha256WithRSAEncryption
be:a0:b3:03:f5:12:7e:f2:29:3c:c2:f1:6e:cd:ad:69:c7:b5:
72:9f:94:6c:3d:fe:ed:c7:12:15:f5:59:51:5d:95:7d:3d:e2:
ff:b1:ba:d0:42:be:c9:85:cf:c5:f2:59:f2:ef:92:82:81:c9:
a4:a1:8a:41:f1:3d:05:7b:27:13:b1:e6:21:6d:7f:67:d7:94:
a1:69:36:aa:54:ff:8b:0f:a2:cb:e1:b5:bb:2f:29:ec:1f:f3:
04:c2:8b:e1:85:62:4c:64:b2:45:71:7a:e0:5a:3f:f4:2f:70:
61:8e:70:de:5f:4a:d4:23:03:73:da:6b:de:04:df:ae:c0:08:
ce:77:8c:b1:6c:91:5d:d3:67:ef:c8:71:5e:13:7a:e8:d1:88:
7c:39:70:68:f8:c8:f7:ee:fa:40:30:da:ff:bc:bf:c1:88:f5:
81:ca:a2:99:40:6c:17:70:ee:cd:6a:2f:30:a2:77:4e:c3:61:
e4:86:df:3b:33:88:5e:b1:07:cc:d1:fc:70:5e:2f:be:4a:22:
97:ed:30:1e:75:41:8e:6b:50:e8:02:a8:47:18:c8:58:a9:9a:
d2:d2:45:eb:6c:14:a8:ed:cd:6d:65:02:15:91:18:7e:bd:e3:
7e:86:be:c2:07:2f:cd:95:82:13:88:fe:ff:41:1f:6b:1a:83:
50:65:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:43 2025 by rpki-client