Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
File: 76af8472-01ad-4042-b385-078d559d94d0.roa (raw, json)
Hash identifier: paco2hMOsrHtB+Djx4WZS4lCxhro0uNh1qj3SuVcWTQ=
Subject key identifier: BB:AA:7D:3A:3E:96:EE:47:F4:EE:2E:59:03:E1:54:04:7D:1E:92:37
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 528D64118B6DF49D0880B7DDC4D992966F0017DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
Signing time: Mon 29 Sep 2025 15:24:13 +0000
ROA not before: Mon 29 Sep 2025 15:24:13 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8d:64:11:8b:6d:f4:9d:08:80:b7:dd:c4:d9:92:96:6f:00:17:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:13 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=ab3eeb78e5ba8771d6aef7f76f75d3daca792f1f4fce64991882229da5d6879d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:a9:83:60:8e:90:ce:98:25:c1:0e:5a:07:
ea:59:c5:7e:df:c7:86:7a:12:7a:96:ae:d5:9f:3b:
f0:1c:3a:01:6e:b9:1a:91:75:d1:c5:ef:20:df:8f:
e9:55:e0:9b:56:ba:58:2a:91:a0:87:8f:47:c7:92:
63:dc:fb:e5:54:59:c4:5a:2c:f7:80:ac:db:c3:25:
23:39:cd:1f:67:3d:a1:f4:c3:69:a2:aa:4b:9a:3a:
a2:2f:c2:b8:4e:c7:7a:63:47:5f:28:62:c7:be:d5:
bb:c6:dd:c8:f4:f5:e9:50:8a:3e:16:cf:a1:88:ea:
4b:80:e9:d6:2d:5c:53:af:28:cb:41:a9:f5:d5:db:
78:99:9d:f8:bb:5c:1c:a1:d4:75:87:3c:ee:a9:06:
64:6b:e5:a9:f3:5f:5a:45:90:4b:1d:5b:d2:a8:5b:
73:c6:71:84:2c:ac:a8:e0:49:92:f9:89:96:c9:cf:
7b:88:7c:38:b4:53:f8:3c:7a:60:57:27:db:98:1a:
1f:f6:56:af:cf:11:dc:c2:d5:b0:5f:09:de:34:93:
4b:79:cd:c8:9a:24:e0:3f:b9:61:13:cb:97:97:2e:
bf:d8:51:46:62:57:2b:12:b8:25:f6:b5:1b:c0:f3:
b1:fa:08:ad:9c:1c:ec:0e:db:83:b3:c7:e1:33:c9:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:7D:3A:3E:96:EE:47:F4:EE:2E:59:03:E1:54:04:7D:1E:92:37
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76af8472-01ad-4042-b385-078d559d94d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
a8:af:6d:59:d3:ce:e4:67:59:f5:d7:81:cd:dd:76:9c:7f:69:
1d:d4:b8:86:b4:74:e2:61:79:40:c9:ff:f9:b1:5c:24:06:5f:
22:a2:f0:88:fc:5c:d5:d4:f3:1d:66:43:29:f9:7c:3e:8b:4a:
33:9a:93:92:af:6b:61:1f:0b:a9:ec:83:ea:52:24:c2:61:ae:
eb:72:9b:a5:16:d4:20:b3:32:64:7d:eb:94:3d:d7:d1:40:79:
e1:9d:fe:42:d2:23:5d:cb:08:09:73:a8:93:d8:5b:66:7a:c9:
38:9a:92:f5:50:af:1d:35:b3:88:06:fa:73:9d:08:ee:fb:88:
85:06:d1:68:3c:3e:cc:5b:c8:f6:88:6b:f4:21:35:a7:98:24:
2a:3e:b7:3a:96:20:2f:12:7b:27:41:93:ff:13:84:85:61:88:
15:7d:a9:b8:d4:50:50:06:26:1f:af:94:83:36:e6:6f:34:ae:
67:9a:9b:06:df:dc:e9:22:d3:7f:82:9d:9e:8c:0a:ea:92:2e:
47:eb:6a:aa:af:6c:b9:e4:6f:22:1f:92:61:2c:d7:e8:43:e5:
32:96:78:6e:ef:4a:fe:6e:cd:ce:77:8e:97:d4:ea:7d:65:79:
e3:ca:4c:c6:2a:88:a2:d2:0a:05:0a:2a:9e:e9:2b:78:13:e5:
84:ad:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:53 2025 by rpki-client