
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
File: 4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa (raw, json)
Hash identifier: zkxl9btH2Mxqv76RTs3ayEWFhVBdjL8T0EHjpehC5xc=
Subject key identifier: 3F:5C:DD:5E:05:A5:A7:D3:25:09:B7:CD:B3:E7:A5:09:11:DF:79:C3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45E437DA43D9C3AA07CE906D1D74D1D672CCC67A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
Signing time: Mon 13 Oct 2025 17:56:09 +0000
ROA not before: Mon 13 Oct 2025 17:56:09 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e4:37:da:43:d9:c3:aa:07:ce:90:6d:1d:74:d1:d6:72:cc:c6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 17:56:09 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=c17b983cedef893c78186315013de964a405cb0c13ffe66d968c3596a82b543d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:84:4f:63:af:fb:1c:7b:a4:11:f8:b0:c2:
b7:e5:b4:9c:2d:80:3b:00:45:19:5a:c3:cd:98:9b:
af:9f:02:ba:ac:1e:64:82:02:c5:93:5f:cc:c2:69:
07:58:81:49:85:b7:4d:c9:75:f7:71:fe:85:5e:7b:
e4:65:15:d7:8e:ed:ce:fe:9b:31:a8:e7:2e:15:09:
51:29:b2:2c:a9:21:c5:5b:06:43:45:6b:4b:45:fd:
80:97:20:3d:4a:40:6a:32:24:35:ed:8b:12:30:70:
3d:3c:e6:83:76:6d:b9:59:43:86:e1:b2:89:91:10:
ba:10:db:e8:da:d1:04:ae:ea:86:bf:49:c7:f1:58:
73:44:81:0d:15:09:1e:71:a4:30:cb:72:c7:54:6e:
f1:92:a2:e6:1e:a8:11:5e:90:f6:d6:ef:e0:d7:0c:
b8:0d:b3:27:6d:63:6d:67:e1:44:32:61:69:de:15:
95:ad:47:58:ba:d2:5f:5b:cc:06:21:5f:d5:f7:ff:
74:b1:76:3b:e7:46:7d:14:72:d0:2e:d6:01:e2:60:
9a:d5:a8:07:f2:72:18:5a:ee:57:9d:5a:b8:bb:dd:
c2:8b:f5:55:47:d4:32:9b:ee:9a:89:13:84:af:12:
ac:bd:82:7c:3d:51:7c:1c:f4:4d:ae:e1:12:b0:fd:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:DD:5E:05:A5:A7:D3:25:09:B7:CD:B3:E7:A5:09:11:DF:79:C3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
63:75:b2:ca:8f:82:51:f5:b5:b6:89:5b:75:8b:a4:d9:59:3e:
7e:a4:d4:27:ea:9c:f9:2f:94:45:e3:ad:58:1e:49:d1:f5:8f:
b2:b3:0a:d5:ec:79:10:0c:ca:aa:df:60:a0:59:8c:db:7b:fe:
40:8d:b8:f3:85:0e:6a:4d:ed:8d:84:65:21:67:5e:f4:65:9a:
b0:fe:fe:2f:a9:9b:70:1f:c2:ef:a5:29:59:60:41:67:2a:32:
93:4f:59:1d:95:6b:bc:da:4a:ee:14:e1:a3:fb:57:b3:44:89:
ce:87:e4:66:35:00:ff:06:df:5c:6e:e3:8c:c7:78:1e:3f:f8:
10:0e:2f:b1:30:27:86:f8:6c:73:bb:73:54:b9:16:a4:b0:55:
99:74:0d:65:f3:8d:5d:c5:7f:cb:d7:44:0e:a3:fe:e6:56:c2:
c2:ff:41:cd:fc:9a:32:c4:80:04:a1:82:70:95:40:bd:60:47:
8f:58:1b:c1:d4:81:4d:0f:df:c6:ff:f1:9b:65:79:5c:c2:8c:
13:ba:4a:1c:aa:7c:be:27:d1:d5:f9:ce:dc:b1:56:2f:74:6b:
e8:e1:45:6a:b0:68:4e:53:20:c3:e8:ab:2e:48:07:94:4f:9b:
03:85:ba:c1:2b:cd:eb:9f:f9:44:cf:59:05:a4:61:5d:1c:79:
c7:8a:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:12 2025 by rpki-client