Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d4df9a1-29bf-4886-b50b-cc92b7ace18f.roa
File: 6d4df9a1-29bf-4886-b50b-cc92b7ace18f.roa (raw, json)
Hash identifier: X411+4NEfgPE0HRa26yJvxaHkw6hu9Wpel3jeBwhFCE=
Subject key identifier: F1:0E:30:E4:A6:F3:4B:68:F9:3A:E0:F8:02:D7:B7:3C:52:68:BB:D2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A5247206F4E9D9C71CE6C72B75334FB6D68EA9E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d4df9a1-29bf-4886-b50b-cc92b7ace18f.roa
Signing time: Mon 06 Oct 2025 17:50:59 +0000
ROA not before: Mon 06 Oct 2025 17:50:59 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:52:47:20:6f:4e:9d:9c:71:ce:6c:72:b7:53:34:fb:6d:68:ea:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:59 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=001cb8427be3cf8ad9e7447b2d44899542d762c3cf6772737105d0ee66c0b641, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:2d:c1:1f:b3:1c:e5:c9:ab:4e:ec:ca:2e:
f7:fa:87:17:25:ad:df:4d:9c:23:23:57:91:46:75:
98:1b:1c:ae:73:34:0c:d8:ea:e8:a4:7c:f3:09:09:
48:8d:f0:cf:90:55:5c:22:0b:4e:31:8e:54:90:d3:
4f:f0:a1:ef:83:e7:2a:b0:6e:96:32:07:bd:8c:7e:
30:2e:5a:ea:af:2b:dc:d6:44:ca:fb:c4:68:d0:37:
e0:ff:01:df:18:d7:c1:71:75:82:c0:dc:b9:9d:6b:
63:f8:dd:dc:59:e1:36:b3:ed:8d:28:b8:ff:f4:cf:
6b:0c:8f:15:01:fa:21:55:99:c6:8d:0b:78:59:8a:
b8:0f:a3:aa:c4:9a:8a:07:af:bb:47:7f:70:b5:81:
fa:c5:a3:5a:7b:7c:00:4b:df:ea:8a:4f:4f:45:4e:
6f:5a:97:f4:8e:4c:d1:6f:3a:fb:bc:52:13:cb:6e:
45:9a:d1:22:80:a4:db:33:a6:e9:d8:9a:21:e2:7b:
0c:8f:56:7a:31:41:ce:68:3e:aa:c8:bc:8b:7c:71:
25:f7:85:75:58:98:da:e9:f4:2a:f9:99:ab:4b:7a:
50:75:aa:db:13:b0:86:78:df:fc:76:11:3c:f1:60:
07:bd:e7:30:af:b2:22:67:5c:50:56:00:d7:cb:73:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:30:E4:A6:F3:4B:68:F9:3A:E0:F8:02:D7:B7:3C:52:68:BB:D2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d4df9a1-29bf-4886-b50b-cc92b7ace18f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:b080::/48
Signature Algorithm: sha256WithRSAEncryption
69:cf:38:ed:fa:a5:96:43:fb:e4:be:8f:c3:ff:13:05:9c:40:
d1:b1:b6:63:d0:2e:d4:65:08:92:69:64:c7:14:c7:50:fa:48:
e5:a6:03:a2:eb:2d:b8:3b:d8:bc:da:eb:99:19:fb:76:86:da:
f0:63:60:c3:2c:2e:f7:ce:d7:81:fc:7a:f1:99:9f:af:24:68:
f3:e4:05:fa:3d:45:a8:9c:52:b5:a6:4b:ca:62:8f:6c:41:74:
22:3d:d0:cb:04:4e:37:52:99:8f:b4:ac:95:e4:48:52:c8:65:
e0:d0:c2:47:9a:03:d3:52:b7:49:9b:95:1b:d4:b6:8b:ed:47:
01:2e:82:2a:8a:2e:a8:f1:2d:d2:58:41:c3:a4:a2:5c:50:47:
5e:ae:e4:dd:a2:96:ec:70:c9:8d:bc:da:c4:3e:42:8e:c4:7c:
f1:bc:12:52:ed:33:02:b5:9e:af:0c:7d:3c:7a:ee:24:92:e6:
89:62:91:4d:8e:be:95:3b:ec:18:02:f7:e3:a8:30:df:44:cc:
fd:96:b2:fa:ef:9d:0c:62:9a:dd:99:5b:4e:a3:09:89:6c:7f:
d5:1f:d2:88:1a:6d:16:fc:2f:f8:52:af:0f:51:ae:5d:04:be:
0d:5f:11:ca:31:1d:c0:f1:5b:8b:37:3a:da:63:da:9b:2b:ef:
fc:6f:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:15 2025 by rpki-client