
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e690adc-099c-4d58-ad1b-856f693d90b3.roa
File: 7e690adc-099c-4d58-ad1b-856f693d90b3.roa (raw, json)
Hash identifier: Y+NBmB+GsXwWNyTFeuWZ5EwLSansV9C8UTSUMqHSQQQ=
Subject key identifier: 42:84:7D:F1:DE:0D:A4:D0:27:7D:94:56:3D:57:FD:0A:05:37:8D:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C2AC2C4C577D79914462B5C575F196BACC2C614
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e690adc-099c-4d58-ad1b-856f693d90b3.roa
Signing time: Mon 13 Oct 2025 18:00:06 +0000
ROA not before: Mon 13 Oct 2025 18:00:06 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2a:c2:c4:c5:77:d7:99:14:46:2b:5c:57:5f:19:6b:ac:c2:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 18:00:06 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=d7b05f04ab390e6643c78f03fa653e07280339c0f1ff9e7f82620b8daf595881, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:eb:23:59:1f:aa:65:ef:30:2a:e2:03:98:
82:80:46:09:4f:5b:9b:51:63:74:2e:93:36:f2:10:
18:f4:35:58:d3:3c:2f:dd:70:b5:3a:fb:55:67:df:
d6:96:00:a4:9d:e0:a4:ae:45:0d:6b:13:64:36:55:
2f:84:68:db:fc:74:be:17:78:59:82:1d:f7:f5:b2:
4b:27:93:4b:68:1b:fd:d6:fe:f5:03:43:2a:7a:16:
bc:dd:03:0b:1c:17:29:e5:e2:91:71:71:9f:4a:1c:
bb:15:db:8b:1c:ed:3c:99:f0:92:1c:15:db:48:5e:
00:7c:53:68:ec:63:f7:a0:f4:86:ba:25:da:36:95:
47:77:72:a3:9b:a3:ae:2d:85:50:86:e3:c7:f4:65:
12:ad:eb:f0:41:cf:5e:7d:ca:a8:20:14:e2:ef:f9:
53:57:53:be:f3:ca:ec:30:f4:d4:a2:51:52:8f:d9:
43:68:e7:c2:0e:9f:f0:be:f2:c0:97:75:35:1e:66:
95:31:cc:39:cb:ac:a5:1a:13:61:43:0b:3f:4b:6a:
37:e9:b2:ca:b6:45:23:e1:ef:a1:1b:f6:27:91:c1:
be:0e:89:7c:dd:bc:f1:1f:ca:11:4c:48:a0:25:13:
31:d8:d0:ca:4c:52:4c:67:fc:22:d8:95:97:31:ba:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:7D:F1:DE:0D:A4:D0:27:7D:94:56:3D:57:FD:0A:05:37:8D:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7e690adc-099c-4d58-ad1b-856f693d90b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:c000::/40
Signature Algorithm: sha256WithRSAEncryption
50:b7:08:04:12:a4:e9:72:f0:31:2d:c6:83:03:c3:d8:c6:cf:
45:13:25:c6:97:7f:84:39:d2:1a:d2:7f:5d:29:82:4c:0b:ef:
ee:9c:bb:2f:03:64:a5:f1:93:ed:f4:e6:0b:6f:3d:53:6c:21:
16:42:29:b3:7c:30:01:28:56:c7:d9:5c:17:d7:aa:fc:73:29:
26:21:5a:36:6f:bc:81:c7:73:7c:6f:2b:2a:0d:70:b4:d2:88:
1e:bd:f7:2f:35:26:39:6a:d6:94:91:a1:14:8a:df:4f:9a:a3:
37:d9:61:fd:e1:cb:29:6e:95:0d:5b:bd:09:da:35:50:46:ea:
a5:05:a3:e5:63:49:8c:38:e7:f6:3a:db:52:b0:cf:aa:35:ff:
44:95:f7:e4:17:27:a9:49:91:25:6c:d8:a8:d8:0a:7d:84:da:
3a:af:e4:14:4d:d1:47:44:46:da:2f:8f:fa:99:3e:5a:60:2d:
fb:6b:13:d8:6c:72:dd:29:a7:28:cb:9f:e1:b7:60:56:4f:47:
d6:46:7b:ef:6c:77:11:56:8a:42:1a:4d:9a:31:37:7c:e6:85:
86:d5:c7:3a:0b:ef:44:15:74:08:a9:6e:87:41:5a:85:20:6b:
b1:bf:51:73:c0:40:8b:fc:a3:9d:0a:92:e9:fc:4b:f2:fe:44:
ec:87:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:09 2025 by rpki-client