Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/63425b1e-aa24-421d-a531-9c9dc1414d48.roa
File: 63425b1e-aa24-421d-a531-9c9dc1414d48.roa (raw, json)
Hash identifier: vyBZI6Lw041tvGeSEfNps1oSJ+UIoG3jWqy3fYJqblI=
Subject key identifier: 1A:BC:35:9A:4A:F1:E9:0C:F4:D8:5C:AA:D5:5C:FB:27:AF:0E:B5:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 224C10BA2592BAC59870EFD470778092168F0AB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/63425b1e-aa24-421d-a531-9c9dc1414d48.roa
Signing time: Mon 06 Oct 2025 17:50:58 +0000
ROA not before: Mon 06 Oct 2025 17:50:58 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4c:10:ba:25:92:ba:c5:98:70:ef:d4:70:77:80:92:16:8f:0a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:58 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=03bdf8bbd9455e502264cc5205bb2b290cba46aa17d81f16a55fd2b2d161a334, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:2b:b6:28:94:46:a5:5c:55:81:c6:08:6b:
5f:1d:0a:0a:84:e9:ab:39:c1:b9:50:84:f7:83:06:
ba:2d:80:11:27:1a:2c:ca:e9:12:10:02:0a:30:76:
7c:ae:8a:89:44:ad:59:dc:9f:6e:c8:3c:ab:0d:21:
11:61:08:ad:2b:b9:7b:3c:4f:6d:16:df:5f:50:ed:
55:4f:1b:82:c2:69:0c:05:dd:07:e3:79:bd:96:af:
1f:13:37:e9:03:d7:ba:67:b0:3a:f9:db:a3:2e:5f:
f2:02:ef:bf:97:80:1c:9b:a4:8d:d6:3e:4c:4f:d8:
55:f9:db:0e:40:fd:92:ee:21:73:9c:4f:1c:cd:f8:
e1:6e:a8:e6:d4:57:b7:66:d6:53:69:95:90:60:52:
31:28:43:6b:06:67:5c:63:24:c2:e0:3d:bd:2e:66:
2e:8e:43:00:0a:db:b5:94:84:02:a2:8a:66:dd:8c:
80:94:e9:1f:5e:fc:21:ef:70:2d:ed:7a:a5:7e:da:
a8:1d:10:6b:8d:cc:42:6b:b3:0d:dc:0f:f8:38:0d:
34:de:99:d5:a4:8d:c2:91:58:73:29:c2:a3:9a:d2:
87:d3:a2:12:87:12:cb:0c:75:d7:61:fa:fa:4a:a5:
a7:1d:e2:60:4d:23:57:0b:59:27:66:53:bc:86:66:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:35:9A:4A:F1:E9:0C:F4:D8:5C:AA:D5:5C:FB:27:AF:0E:B5:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/63425b1e-aa24-421d-a531-9c9dc1414d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c020::/48
Signature Algorithm: sha256WithRSAEncryption
8d:4b:77:2c:47:f8:78:c9:57:74:18:4f:df:c5:cd:17:d0:2d:
c7:70:d0:c6:b8:4c:57:be:2c:99:61:9f:48:72:24:d5:fc:c0:
16:68:de:f7:37:c8:e8:ef:37:6c:64:34:6b:39:75:ae:84:4b:
e9:6a:bb:7d:a7:13:2f:e9:c0:d2:03:7e:3a:5a:bb:da:d6:6c:
84:39:51:6c:6d:6e:65:02:41:e7:4f:4d:43:09:5f:89:ca:08:
93:69:fa:66:68:2b:79:7b:ed:d2:30:93:8c:0e:e2:d2:96:9b:
ba:b9:fe:a2:56:f8:a7:15:0e:23:b2:cf:ac:b3:ac:e8:c9:ce:
b1:cf:b9:b8:94:40:b1:1c:a3:93:4c:7b:5f:3d:87:a3:a2:52:
8f:24:f9:a1:1b:bd:7e:ca:5a:f8:ae:87:61:5f:4d:e1:81:f6:
50:99:28:50:41:4f:49:ec:77:4e:cf:f7:e4:bd:8b:91:1a:73:
e6:6a:e8:1e:be:fe:cd:df:d6:e2:90:46:9a:f5:8d:8b:fe:d6:
34:63:9e:9f:9e:89:14:3f:cc:b7:63:4a:4e:a5:07:25:c7:17:
ca:78:58:f5:db:69:56:41:29:98:7c:f5:81:00:62:55:d9:af:
5e:5d:85:37:e8:46:36:3f:ee:17:12:74:8e:c3:f6:85:3f:18:
97:d9:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:45:27 2025 by rpki-client