Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
File: 7665346b-5715-4d4a-9ee7-32affc669e92.roa (raw, json)
Hash identifier: on3ODx9exNLz2l3burkvNgTXY6airZ0MJgBNnX/s8Rc=
Subject key identifier: 66:50:5A:FF:3B:05:76:72:75:96:D4:DD:C4:13:32:04:CB:ED:0D:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 680E8C52A81A44EC2B0D60B9151A413D8CE492F1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
Signing time: Fri 26 Sep 2025 18:21:03 +0000
ROA not before: Fri 26 Sep 2025 18:21:03 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0e:8c:52:a8:1a:44:ec:2b:0d:60:b9:15:1a:41:3d:8c:e4:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:21:03 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=f4ce48299a780c6d5aa70b814f77a1157c0826d1491d2f04afad2de50c873d5f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:d5:56:ef:fd:d9:85:78:19:06:91:14:c3:
3a:73:9d:6c:dc:69:23:bf:eb:da:d7:f5:76:ff:69:
24:a4:17:29:cf:4f:e0:13:66:3a:74:95:f0:57:e2:
a6:47:26:21:9e:38:40:1e:e9:e1:23:5a:03:3a:15:
92:9f:04:d7:4d:14:cd:f8:7d:61:b4:53:1d:69:23:
8c:12:55:89:66:89:27:b4:34:77:d8:85:75:54:15:
0a:91:06:05:38:08:c0:fe:ab:37:3a:62:42:63:7f:
75:cd:48:2b:41:48:3c:1f:65:9e:04:15:4d:2c:38:
42:53:30:a3:2a:ab:16:0d:5d:99:45:c2:ae:29:b6:
36:f1:f1:01:ca:87:d5:b6:9f:87:db:c3:d3:88:29:
04:35:85:9f:b2:f9:04:cd:11:ad:d0:44:98:96:72:
8d:4f:00:d1:33:e7:3c:b9:13:16:99:7b:b5:b7:70:
7f:22:ce:32:f5:22:eb:d3:0f:c1:6d:3a:08:9c:26:
68:47:2a:7a:89:62:59:31:06:04:c9:e4:66:f1:d6:
d2:d0:17:b4:7a:d0:39:c4:ab:de:6d:3f:c4:21:85:
43:c4:3a:35:64:84:cd:1a:8d:b2:55:c2:f0:e1:16:
62:77:0c:2a:2d:53:9c:43:2b:0f:38:13:49:d2:7b:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:5A:FF:3B:05:76:72:75:96:D4:DD:C4:13:32:04:CB:ED:0D:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2040::/48
Signature Algorithm: sha256WithRSAEncryption
2d:97:7d:c6:1a:4d:32:61:d4:ea:23:6e:88:7b:8a:96:b7:b3:
f3:7f:df:94:0e:0f:dd:bb:fd:0b:99:4d:cb:3f:4c:78:67:a9:
e5:ff:7d:d4:95:55:a1:7a:d0:6b:12:bd:8c:25:0f:dd:58:4e:
d3:b1:51:e1:98:15:26:57:7b:8b:39:5b:29:9a:1a:15:85:e4:
3e:b6:72:b2:27:f6:42:f4:85:43:09:ee:98:a9:f2:5b:63:a2:
52:b0:25:07:58:75:81:29:bd:10:c8:ed:92:33:c9:66:f0:51:
11:89:bc:a0:10:0e:a2:ae:a6:04:79:68:03:d6:88:1e:3c:f1:
dc:7a:b7:2f:45:73:ea:af:21:31:e4:ac:b3:f5:ef:79:41:4e:
14:8e:38:d0:5b:15:fa:9e:be:c9:94:f1:f2:cd:58:8c:a8:27:
40:24:df:e7:81:ae:7f:9a:31:84:47:5e:e0:3e:16:66:b0:01:
93:f5:c3:c3:43:f9:06:dd:80:e9:58:0a:2f:e6:63:91:82:9b:
19:c8:bb:ae:1d:08:12:5c:d0:d8:9c:fa:dd:75:24:66:4e:85:
f2:27:7d:dd:47:37:8f:6f:b8:32:c9:38:7c:d7:e3:d3:3e:0f:
b6:18:4a:51:fc:97:ce:c8:53:24:84:58:0a:7b:33:db:61:a4:
6c:e3:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:48 2025 by rpki-client