Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: ZWcSEMmIhHLRJM9o9wNp7UyEieMsBA8MM4OBJ1dnNG0=
Subject key identifier: 8A:2D:FF:EB:64:C4:1C:C8:66:DB:4F:9D:75:11:FF:51:35:94:23:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 702D463D2543DCB47FF070AF58F9A4CA9448385E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Fri 26 Sep 2025 20:10:56 +0000
ROA not before: Fri 26 Sep 2025 20:10:56 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2d:46:3d:25:43:dc:b4:7f:f0:70:af:58:f9:a4:ca:94:48:38:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 20:10:56 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=1a954fb69672e7cce6c97baaaf2c0c3800955ce162f011bda3c9ea816a8ac51d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:4b:f1:de:9c:36:d3:e1:74:69:8f:a5:8e:
56:0d:ad:e4:e6:32:4f:20:47:c1:8d:96:af:b2:4a:
6a:24:4c:e0:ba:65:5d:19:9b:0f:82:b8:5a:cb:a0:
cb:71:08:89:2c:be:da:42:1f:a0:9c:bc:a7:dd:94:
19:50:8f:10:e8:fd:64:8e:d6:0c:ff:1e:86:42:df:
37:e5:a2:1c:e2:d2:34:a9:10:33:0e:6b:6c:6e:c3:
1d:ee:1d:f4:1d:91:5a:e8:24:55:46:bc:22:68:9a:
0c:1d:3f:ce:a3:71:71:de:a4:a0:70:84:00:9e:a5:
f2:a3:ea:e9:fd:e1:1f:10:da:e2:ca:82:b7:e0:07:
37:99:08:53:27:aa:85:94:c7:f0:51:32:44:2f:0e:
54:c7:11:da:e2:ca:96:bc:09:c1:5d:13:bb:39:2a:
03:6c:13:c8:1f:50:d5:0b:23:94:33:2a:f8:04:53:
0f:3b:9f:c5:21:09:14:0b:7f:ea:1e:d1:42:36:bb:
37:bb:89:73:5a:5e:d0:18:a5:49:cf:f0:75:33:f6:
67:c0:f7:7b:f4:6c:e1:13:f5:21:ab:93:9e:53:23:
8f:9d:41:db:6f:ac:4d:49:94:56:2d:3f:99:51:3d:
ed:4b:ab:76:de:31:a8:20:8e:c5:f3:61:a1:19:df:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:FF:EB:64:C4:1C:C8:66:DB:4F:9D:75:11:FF:51:35:94:23:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:be:94:18:de:24:75:de:1a:e7:73:66:57:12:85:86:28:16:
db:f6:ee:2e:c6:74:e9:6d:72:1d:e3:be:e7:55:e2:d8:38:4c:
08:b6:61:1e:95:ef:4f:65:60:0d:3a:23:df:be:82:71:d9:82:
a1:a7:4e:0e:41:2b:3a:6d:27:10:4e:6f:1c:7a:77:2a:cb:9e:
ef:ba:fa:c3:a3:07:f5:e6:67:37:a5:35:53:ec:44:c3:ef:5f:
c0:38:a9:c9:68:d1:01:3b:1e:4e:aa:68:19:b6:e9:ae:bf:e2:
c8:b6:83:d7:23:fe:ea:10:a8:d6:30:02:a4:ed:8e:bc:b8:5f:
43:c0:39:e4:8d:17:b1:00:d5:4b:e5:e9:08:53:fb:14:ea:1e:
01:ea:14:09:4b:0b:a4:8a:98:cd:eb:1e:9c:71:69:4a:4b:fc:
6b:76:85:6c:9b:75:48:db:63:11:62:b1:07:cf:fa:0f:d4:db:
2c:47:07:2a:1d:b3:28:b3:6d:1c:d9:be:36:0f:e0:27:37:d0:
a7:e1:dc:46:33:27:f2:33:58:a4:bf:4b:b9:8e:96:7d:1d:7b:
58:fd:d7:9d:48:d8:fc:60:f7:9b:ac:d2:7a:ea:26:83:99:71:
6d:d9:4d:62:9c:29:63:c4:49:6f:9f:2e:c2:f0:84:52:e4:84:
17:75:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:25 2025 by rpki-client