Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62fdd3ae-c001-45b4-baa8-75770ac2624d.roa
File: 62fdd3ae-c001-45b4-baa8-75770ac2624d.roa (raw, json)
Hash identifier: TCTDGEtnHruJGp9MV1jJ4thiQ0ov1eFQdPeVNKktXbk=
Subject key identifier: 09:D2:55:20:EB:F1:27:59:F9:7B:EA:B2:C2:04:90:3D:7A:DC:B2:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 323CE631C7D897DF6A830D2E7E2384B31007F25B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62fdd3ae-c001-45b4-baa8-75770ac2624d.roa
Signing time: Mon 06 Oct 2025 17:50:37 +0000
ROA not before: Mon 06 Oct 2025 17:50:37 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3c:e6:31:c7:d8:97:df:6a:83:0d:2e:7e:23:84:b3:10:07:f2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:37 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=86122552a7807cf248b1e55cc8868f4a6b9016d67828c4fa6e9ba836b30f72e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:b3:88:4d:41:85:7a:f0:21:a0:0d:a3:bd:
ea:99:38:c1:08:95:da:ef:43:62:a1:20:12:0c:97:
5f:13:90:59:67:50:ce:f6:b5:52:3d:70:ca:70:3b:
61:55:89:fe:42:2f:d5:c4:42:14:56:26:cf:46:2d:
23:3e:96:24:7a:0d:32:c2:8f:a9:c7:34:55:47:bf:
58:b8:45:d2:ce:9a:8c:31:9f:dd:9a:3a:56:3d:ee:
70:c1:f9:18:d0:bd:79:82:65:d8:44:59:9f:20:02:
02:14:6b:41:88:9a:39:bb:97:2e:3f:9d:60:fb:d1:
36:c4:03:2b:3f:df:72:4c:f6:d9:68:44:bc:b2:84:
f1:dc:29:5b:93:9e:fd:f4:d0:03:46:d7:7f:a3:11:
08:d0:d9:6b:28:5b:7c:de:47:03:cf:49:f8:8f:7e:
f1:de:4b:15:78:f5:94:e7:b1:6d:84:54:a8:65:65:
b5:58:2d:c4:00:6b:90:90:61:b8:cd:5a:03:4f:11:
67:10:5c:fd:16:42:b5:61:c6:4e:68:04:6b:94:b3:
cc:64:51:a1:46:b3:e3:c5:48:ec:70:71:79:92:bd:
97:8a:ba:c8:b3:0d:58:bc:86:de:14:d8:60:3c:4c:
45:c1:5a:c7:8c:9c:80:33:68:62:28:b2:40:80:41:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:55:20:EB:F1:27:59:F9:7B:EA:B2:C2:04:90:3D:7A:DC:B2:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62fdd3ae-c001-45b4-baa8-75770ac2624d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:800::/40
Signature Algorithm: sha256WithRSAEncryption
84:52:01:e8:b7:1f:1c:cc:97:21:76:f5:34:29:82:7c:87:e8:
29:c0:ac:02:bf:32:13:21:39:c7:c6:9d:31:44:a1:74:92:78:
87:cf:7b:0a:0f:4c:96:8a:8c:bf:47:2d:91:15:92:8d:44:fc:
02:32:d3:f7:21:56:2b:cd:fa:c4:a4:d0:6f:21:f2:4f:91:53:
b4:1b:49:25:c6:cf:95:57:9b:e8:82:1f:73:3e:14:76:e2:f2:
c1:85:10:53:39:b7:9f:6b:f4:74:dc:74:5b:44:e2:13:26:f8:
2f:47:9c:e3:21:ec:a9:85:22:bb:3b:96:a0:e5:de:59:da:96:
d8:e2:d8:9d:96:32:39:65:b5:8f:c9:59:4b:d1:1b:3c:e9:63:
be:9c:a3:98:fb:1e:49:94:09:27:aa:39:b6:9d:71:bc:c6:a5:
3c:33:35:19:ab:99:cd:df:11:15:98:20:21:d3:0a:1e:a3:4e:
70:50:58:aa:11:a4:3d:c2:83:ff:21:e3:8d:94:5c:a7:c0:32:
9a:96:c0:54:9e:1d:fb:3a:ee:9e:b2:30:45:f0:90:72:1d:5a:
a9:81:84:7b:8d:f7:25:d0:02:42:93:f5:ca:aa:a1:9a:6a:44:
c4:13:0c:9f:e1:f8:6f:cd:f8:7e:b0:b3:5e:d3:de:f0:cc:6d:
12:c7:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:11 2025 by rpki-client