Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
File: 6fa185be-42e8-4c62-ba43-464d0598c2ee.roa (raw, json)
Hash identifier: xbmJsTw/pwIr+iEQLiY6glASF1N/xHegMw1QfVlURkc=
Subject key identifier: 95:7D:60:9E:33:5B:3B:7A:15:D2:E5:6F:81:4D:1C:7F:42:46:49:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10A093CB59A62569CC872B98C87926CF3DD2FC46
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
Signing time: Mon 06 Oct 2025 18:01:03 +0000
ROA not before: Mon 06 Oct 2025 18:01:03 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a0:93:cb:59:a6:25:69:cc:87:2b:98:c8:79:26:cf:3d:d2:fc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:01:03 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=9e6a667ff295d0afc74b5822a8e6c89a2c084eaa8adbd8185d0931b156f069d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:7a:dd:dd:5f:df:55:d5:d0:73:de:27:c7:
7d:53:51:12:c8:8e:e7:59:2d:f5:e4:4c:e0:8e:3d:
a4:1e:f6:de:c8:70:46:42:61:82:22:89:9b:1d:48:
2c:c4:0d:05:cf:d2:cf:63:3f:f0:7f:5e:cb:8a:3f:
d4:c5:50:cd:ed:d8:f9:0d:48:00:2f:e7:ea:be:4f:
f9:04:40:4f:bf:f4:b9:2b:c1:d2:31:b3:4a:fa:dd:
b4:58:78:7a:50:a2:87:04:ae:96:10:b8:de:c6:f6:
b3:cd:a7:9c:27:07:e1:40:4c:63:b6:5e:56:a2:b3:
f9:1f:9a:b5:23:dd:6d:c8:e4:8b:84:a2:41:79:6b:
f1:2b:01:52:dd:e2:88:00:45:29:c7:53:a2:40:6e:
2d:15:62:28:0d:e4:6b:40:1a:33:3d:49:32:80:f6:
0a:1c:77:a0:c9:90:6a:ca:7e:e4:9b:9c:96:12:a0:
9e:b3:a8:ab:b3:45:57:16:cc:0a:4a:d2:75:bb:80:
e2:8b:1e:19:b7:e8:f9:db:e3:a0:0b:56:73:a3:01:
4d:69:b2:b6:27:77:e3:b6:a0:ec:f4:5a:a9:23:a4:
9d:eb:fe:aa:a0:14:96:50:d9:7f:76:e5:c2:fc:09:
43:89:f8:5c:7e:5a:92:cf:8e:06:67:f4:8b:6f:9c:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:60:9E:33:5B:3B:7A:15:D2:E5:6F:81:4D:1C:7F:42:46:49:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6fa185be-42e8-4c62-ba43-464d0598c2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:b080::/46
Signature Algorithm: sha256WithRSAEncryption
91:94:c4:b0:ee:d7:e5:52:f5:a5:fc:c6:27:74:23:21:54:33:
8d:66:bb:8d:66:b7:f2:f1:7a:75:e9:e6:97:0e:76:9a:2e:58:
04:fd:c0:9b:65:4b:b0:2c:62:e1:18:60:3f:ab:f2:58:51:eb:
b0:7b:eb:7b:b6:da:5d:7f:7c:6a:02:7d:b1:eb:a9:5a:49:a1:
cf:4f:ee:50:aa:2d:cb:3d:48:c6:04:e7:7c:bc:e6:cd:21:48:
34:c9:a6:50:4f:cf:dc:26:91:2d:20:bc:b0:39:85:b2:9c:49:
ec:51:45:08:e3:14:cf:4d:c2:29:bc:37:1d:08:19:19:f8:60:
41:4c:86:cb:4e:52:1e:4b:f1:7b:2f:cb:08:3a:6a:de:47:56:
73:0a:06:2c:d5:16:34:e0:9a:cf:a0:57:b5:42:1c:5f:49:8d:
e0:c0:51:cf:56:b1:01:47:4c:5b:e9:40:0d:18:e4:4c:7e:10:
56:fb:ae:08:35:52:28:16:46:d0:4d:2f:5d:64:3a:af:07:82:
2d:a9:ed:91:99:df:bc:4c:33:86:29:fe:a3:cd:77:a8:b4:03:
0b:75:b0:0d:36:67:6c:38:94:41:37:d7:17:e1:b2:a1:e5:7e:
b9:a4:3d:38:f7:57:c2:90:a2:7c:00:42:69:8d:b6:aa:45:63:
4f:fe:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:07 2025 by rpki-client