Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
File: 4aa20760-fb28-4393-bec8-9ffb467f03e4.roa (raw, json)
Hash identifier: HBTx70lxGrinKT0pQsw1gN3vuFAOzJx9sfMZ9i418+c=
Subject key identifier: 80:66:61:0D:05:A9:BD:EA:8E:6B:18:A1:68:E2:21:19:35:23:86:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 464098916990248418D9239967A162EED6424520
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
Signing time: Fri 26 Sep 2025 19:40:06 +0000
ROA not before: Fri 26 Sep 2025 19:40:06 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07a:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:40:98:91:69:90:24:84:18:d9:23:99:67:a1:62:ee:d6:42:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:40:06 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=714d9362e679a90fd91178c5ec48cca206ee9e4c3b36a8bb4dc3da1ede59f11e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:f5:97:d3:69:ba:c4:14:da:a7:5f:b4:6f:
66:f5:88:ae:c3:a9:15:de:89:7f:cf:f1:f5:cf:54:
0f:85:70:57:fb:37:1e:f0:d6:99:ce:f0:dd:c0:be:
c1:cc:89:82:0b:f3:6e:21:5e:22:26:52:92:78:56:
92:df:26:6b:32:9d:6f:6d:b8:59:4f:ed:83:ce:81:
89:ae:5f:53:e8:ef:47:11:40:08:4e:8b:87:28:08:
10:c3:00:b9:af:b5:b0:4a:1e:d2:4d:e9:8a:e6:ef:
8b:9d:65:39:47:1d:be:c7:4d:87:5f:27:5f:72:b1:
9f:89:ac:d1:a3:73:c2:6a:36:f8:68:6c:7a:be:5b:
4f:7a:84:fc:41:1b:0e:c4:ed:13:65:35:41:bc:f4:
01:b5:64:56:dd:2a:06:95:85:71:89:93:3c:b1:ce:
aa:a1:2b:f6:d1:c5:a0:c7:dd:8d:ca:c0:94:e4:86:
91:4f:75:d4:48:52:b2:b2:3d:1b:f7:f9:54:ca:b4:
3f:9d:43:9d:cc:88:95:16:0c:48:0f:0b:55:4b:c2:
db:bd:14:d7:14:fa:2a:44:cd:8d:d1:b8:21:05:4a:
59:28:2d:54:01:76:36:98:04:00:c6:2b:58:b1:85:
f6:0f:8b:d3:68:5a:7d:a3:bd:df:d7:ea:bb:a4:42:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:61:0D:05:A9:BD:EA:8E:6B:18:A1:68:E2:21:19:35:23:86:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4aa20760-fb28-4393-bec8-9ffb467f03e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07a:6000::/40
Signature Algorithm: sha256WithRSAEncryption
3e:54:ea:be:b5:68:2c:8d:b4:4a:45:00:f3:85:0c:53:34:70:
5b:8a:67:8a:7c:20:9a:ae:d0:14:2c:45:a4:4f:8a:c7:b5:cd:
cd:b0:ac:82:43:b8:93:e1:eb:62:8c:88:31:7d:27:5e:fa:bb:
19:37:1e:19:89:83:28:60:5d:1f:20:19:ff:86:d5:d6:c6:b1:
37:23:41:be:57:16:d4:56:50:70:47:4f:ae:33:b9:04:c7:54:
d1:7b:5d:32:fe:f5:57:35:55:7a:83:ae:74:3d:fd:12:87:b5:
5a:d4:a5:9e:67:cc:5d:5f:f6:34:d2:34:66:ee:4d:b0:2e:ff:
df:0c:19:46:20:db:c8:93:c6:d6:29:27:3f:dd:53:51:bb:10:
bf:52:e3:20:10:c5:5b:4c:3c:5a:16:b3:6f:b8:19:98:10:a5:
1d:5f:6a:4b:23:2f:1e:c5:e8:e9:78:66:0d:d9:de:ee:db:b0:
03:49:ad:47:54:40:93:67:57:54:72:49:14:70:96:9c:f1:1b:
5a:b5:a5:ba:cc:e8:31:dc:d7:26:c0:88:70:30:aa:91:0d:de:
d8:cd:16:75:df:23:2c:f8:00:a2:eb:4e:4f:d1:ad:24:39:ec:
7c:63:9b:0c:83:36:ec:62:f8:79:9f:1d:5c:fe:b7:db:21:db:
19:ac:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:27 2025 by rpki-client