Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
File: 655038e8-ae62-4d89-86ef-c5f745dc0c17.roa (raw, json)
Hash identifier: KXc35undJUHAU75WOtfW30K/M3skE2lGu3hTNUUM3+c=
Subject key identifier: 4C:DF:23:D2:66:F0:A5:03:47:0D:21:95:C2:16:C9:67:26:6E:06:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EA5154A50C2F2A180EDD5661F36769839D6CB3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
Signing time: Sun 19 Oct 2025 23:50:11 +0000
ROA not before: Sun 19 Oct 2025 23:50:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a5:15:4a:50:c2:f2:a1:80:ed:d5:66:1f:36:76:98:39:d6:cb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 19 23:50:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=159e954cf00297c0d0c0dbd657e12e613df39c5740d1e1e286febf2bc4508352, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:02:e3:73:09:89:04:dd:74:96:6c:89:6f:
37:9e:ce:47:c1:13:27:51:41:3b:8c:21:91:6d:d0:
2e:58:77:45:e2:3b:ef:de:f5:21:71:c1:74:ab:91:
4c:42:79:6e:5e:e7:55:aa:e4:c1:51:21:de:de:b5:
4f:bd:6a:e3:6c:d9:9e:3c:04:5c:72:17:83:de:c6:
6a:80:98:84:e6:98:8d:cd:52:ef:ea:d6:2e:45:d5:
03:0e:29:12:94:7d:af:a0:ae:bf:c7:6c:8b:92:1e:
6e:94:33:6f:9f:e6:7b:30:fd:07:61:c7:77:74:11:
0f:8e:f4:ee:9b:35:b2:07:01:10:4c:79:9a:e6:4e:
be:4e:99:bd:f0:40:af:ea:77:d1:09:28:8f:81:2a:
95:a3:fd:0c:1f:61:8f:fc:fa:49:59:b8:10:24:62:
b5:52:47:73:1c:27:20:a5:d1:bb:7a:57:99:ad:96:
9d:f7:65:fd:83:ef:ee:e2:24:61:b5:f9:0c:0b:cb:
32:04:19:03:6a:fc:a2:20:b4:5e:44:5b:8b:29:39:
68:62:24:10:a0:87:8a:f3:ca:2e:55:d9:6f:96:7f:
36:40:2d:37:aa:8d:bd:7a:a3:e9:de:0b:80:f0:14:
58:23:92:8f:36:2b:e0:ab:2b:22:25:45:80:e7:62:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:23:D2:66:F0:A5:03:47:0D:21:95:C2:16:C9:67:26:6E:06:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/655038e8-ae62-4d89-86ef-c5f745dc0c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:840::/48
Signature Algorithm: sha256WithRSAEncryption
ae:46:eb:45:81:cd:ac:13:1d:63:56:94:71:55:46:d3:89:74:
55:ba:8f:d1:fd:87:05:0a:2e:92:20:21:cc:a2:41:ee:12:96:
75:12:3e:99:c2:43:40:fc:cb:a3:d3:e2:b6:e8:f8:ca:fa:8c:
8b:a0:1b:c5:6d:04:59:7b:b7:09:91:b4:78:e8:45:2b:11:9d:
fb:96:3e:0f:1a:b6:e6:1d:36:d0:6e:1a:c4:38:68:c2:c4:2a:
05:76:a0:23:c4:02:a1:1c:e8:d8:66:51:34:3e:d9:2c:6b:2b:
ed:54:de:ef:cc:9a:53:66:81:24:b7:38:77:cd:f1:12:cb:3e:
5b:91:8d:a9:8a:7d:05:c3:43:d6:06:fa:e9:ec:c9:43:14:11:
db:68:2b:3e:5b:63:92:65:b2:c5:e2:6b:c8:87:ac:aa:81:d6:
44:7d:1f:dc:1b:a6:ad:60:0f:a2:e9:ab:46:3c:a4:67:98:d2:
a7:62:e9:48:f3:b4:00:c4:ab:90:9e:6c:70:49:e1:d7:2f:b1:
66:91:77:9a:81:be:6e:84:ed:6b:7f:75:7b:c2:0c:a5:3b:17:
a9:05:e6:e4:f9:59:41:6f:7c:94:6d:3e:da:0b:fb:69:da:71:
a6:70:ce:12:80:a7:f5:49:b6:95:2d:89:57:2b:0c:d7:c7:5e:
59:45:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:11 2025 by rpki-client