Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fad9293-78b8-452c-8a0b-e4aa8a3ad1de.roa
File: 7fad9293-78b8-452c-8a0b-e4aa8a3ad1de.roa (raw, json)
Hash identifier: 3oBI6YXyZxtE9fW1Yh93OwNS/YnkivqXgORXgmLUNoo=
Subject key identifier: 82:D5:42:48:A8:FB:32:C4:01:91:C9:27:58:3A:09:04:5D:4C:C2:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DA56B9714D9F20B3649157E32F22A98ED162A4C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fad9293-78b8-452c-8a0b-e4aa8a3ad1de.roa
Signing time: Mon 06 Oct 2025 17:50:54 +0000
ROA not before: Mon 06 Oct 2025 17:50:54 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a5:6b:97:14:d9:f2:0b:36:49:15:7e:32:f2:2a:98:ed:16:2a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:54 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=fd18131f165b949810ce32f1e718224675c8151dd06ab9bc59f9a6bd34e69ac1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:8e:1d:4f:a2:d5:33:f8:05:c7:07:01:82:
27:47:90:65:5f:78:44:78:00:53:8c:2a:e8:b1:29:
3c:01:ec:b9:f2:a6:06:53:19:b2:5d:d3:0a:12:1d:
a6:c6:9d:60:f0:58:1f:85:2b:c1:8a:96:d8:75:28:
51:80:7c:96:02:f7:f1:f1:26:48:ac:20:ca:c6:5f:
8b:94:a2:5e:85:ec:f2:00:25:5b:a6:2f:6a:f3:af:
03:7a:24:af:33:cf:51:3e:04:a2:14:8a:07:ae:46:
e5:35:aa:87:74:30:20:9f:41:b0:b9:c8:f6:ca:7e:
d0:9e:8d:19:eb:bd:56:8c:17:ef:54:97:21:d1:97:
d9:d8:5f:9d:49:65:e5:6a:64:48:96:21:37:5d:b1:
c6:2c:fe:24:95:6e:72:15:10:f2:d7:65:95:16:7b:
91:55:b3:3d:ad:f7:7b:c3:1b:ec:5d:da:13:c8:d7:
2c:a8:e0:96:9f:57:7a:e3:fc:a3:56:cc:62:e9:a1:
18:fa:51:ea:d1:dc:a1:b2:69:66:df:51:a4:f2:eb:
ad:12:26:c9:2e:a9:43:7e:87:83:49:13:c0:26:5e:
ca:7f:4b:81:d4:2b:bb:9d:9c:11:90:d1:eb:b3:f5:
91:66:22:3b:af:e1:c8:af:ab:47:b5:b6:9c:0d:42:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D5:42:48:A8:FB:32:C4:01:91:C9:27:58:3A:09:04:5D:4C:C2:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7fad9293-78b8-452c-8a0b-e4aa8a3ad1de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:4000::/40
Signature Algorithm: sha256WithRSAEncryption
23:99:dc:c6:80:bf:aa:3f:33:1a:39:a6:fc:64:b0:e6:1d:bb:
dc:e5:16:7b:f1:6e:d6:f2:4f:f0:3f:e7:41:2d:6a:50:f3:2f:
5d:30:37:fd:da:9c:fb:17:d8:73:5a:40:49:0f:9c:a2:d4:e7:
18:27:35:96:58:3f:34:03:bb:a8:ea:6e:8d:93:53:75:77:db:
48:f0:ec:f5:17:e0:a0:b0:56:61:c5:4b:15:aa:5a:15:ba:d7:
5f:20:aa:58:85:04:b1:fb:fe:2f:2f:c7:40:63:3e:95:a4:7f:
85:9f:f4:8a:0d:2e:b6:26:bd:c3:93:bc:b4:57:df:f0:8a:f9:
b8:24:cb:37:70:85:57:18:cc:f2:55:6d:78:f5:a0:48:c8:ae:
f1:f7:22:cc:b1:cc:78:1b:01:19:ee:31:a0:a3:d7:57:e6:24:
08:d5:10:f9:18:60:a0:d7:d6:79:64:76:8d:1d:f9:46:d0:05:
42:86:53:b9:d6:94:62:08:fa:48:73:2c:e2:6c:98:6c:b0:9c:
f2:3e:38:e0:d3:89:f6:6c:35:c2:a8:35:b6:cb:25:13:94:10:
43:3e:a5:33:3e:f2:ce:8d:11:d5:5b:ea:6a:fb:73:59:db:b0:
88:07:f0:70:d7:46:df:86:a3:5f:96:8e:cd:74:5b:0e:99:62:
e4:32:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:32 2025 by rpki-client