Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
File: 834ff2b2-55b6-4011-9d9b-451a7311335d.roa (raw, json)
Hash identifier: bcl5alsJvFgfv5XmiXi7vmx0CZqHNcPXmbmuT01BH5c=
Subject key identifier: AC:8B:7D:7A:ED:67:C4:B1:FC:0A:67:0E:FC:7E:77:A4:C6:BE:F7:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 283E98BB714D4D1074816E243EDB0882E1E75910
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
Signing time: Fri 26 Sep 2025 19:20:56 +0000
ROA not before: Fri 26 Sep 2025 19:20:56 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3e:98:bb:71:4d:4d:10:74:81:6e:24:3e:db:08:82:e1:e7:59:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:20:56 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=7ef99d32df03342abeb6223ab0103e9733df1b79e888420e9aed9c947813a883, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:84:79:77:ec:fe:02:92:c7:fa:4f:9a:0d:bb:
8a:a8:14:ec:e8:03:62:65:ef:b4:7b:25:23:5b:f3:
66:58:15:c8:46:79:3e:4c:f5:ac:d8:2d:44:81:d1:
c8:1d:4b:2c:9a:19:a5:18:d6:29:b2:e4:f1:02:22:
29:70:e9:0c:09:7d:f2:a8:56:9e:2d:60:28:93:ab:
11:e2:c9:08:88:32:00:f5:fd:43:d4:d9:85:1c:ec:
d6:3c:9e:94:0b:dd:15:10:6c:13:f7:4a:b5:37:9d:
39:32:07:d9:85:9e:74:6d:86:73:01:3b:d2:48:3d:
68:af:ce:4b:0b:31:e8:c8:37:61:12:b3:b4:7e:5e:
a7:3b:27:23:37:af:02:8e:8a:54:a3:d5:0d:c1:10:
58:61:a7:bf:d1:10:08:44:79:38:0b:48:f8:9e:5a:
ad:48:07:7b:fc:c9:8d:83:11:49:4c:f2:45:2f:3c:
f2:6c:6b:09:d3:9e:d1:ff:84:a0:5c:f5:e5:f6:57:
8d:dd:51:2a:4e:bb:da:22:23:77:b1:6f:a5:7a:e7:
5f:a9:4a:51:ca:24:65:99:cb:6d:9f:d9:5d:39:a9:
a4:69:01:45:25:66:b8:f9:28:2b:b9:07:fb:d1:75:
d7:0a:54:8d:d9:db:38:e3:f2:d2:68:c8:ea:5b:20:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:7D:7A:ED:67:C4:B1:FC:0A:67:0E:FC:7E:77:A4:C6:BE:F7:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:b000::/40
Signature Algorithm: sha256WithRSAEncryption
42:07:c4:dc:d9:11:9f:60:a8:08:40:fc:9e:f2:3f:10:6f:fa:
8f:2d:8a:ea:23:7f:59:f1:99:e1:26:0d:88:a7:66:fc:5f:a2:
2f:9c:c3:67:da:9e:43:71:b7:fc:69:33:33:ad:86:21:6d:c1:
18:59:4c:6f:32:64:bc:45:c7:2f:02:91:2e:56:9f:db:96:90:
c8:31:4a:ad:42:ee:da:0c:01:79:61:ec:cc:0c:98:16:8b:38:
e8:2f:6e:77:88:95:fa:22:7d:cf:c1:64:c5:9f:46:ce:46:cc:
a7:d9:35:73:3c:04:c2:17:72:d0:92:c5:f1:75:a7:56:f0:73:
88:c8:1a:4d:00:43:5c:9d:25:99:2c:0f:5b:11:41:4f:1e:1c:
e1:44:4e:c5:96:95:90:3f:d2:eb:34:48:73:2f:14:4c:ac:3b:
3c:7f:80:28:f1:73:e4:e6:8e:b9:28:fc:f2:cb:1a:c2:1b:1b:
fe:11:4f:43:f9:16:02:4b:fc:4f:db:e2:5b:2c:77:a4:96:f5:
1d:bd:eb:f2:4a:34:47:3f:cc:d4:ed:e1:dd:9b:e0:d3:c8:61:
e1:cd:cc:4d:0a:84:4c:6b:e8:08:b4:26:39:b1:b6:7f:47:29:
df:28:20:d1:53:65:a0:a6:18:c1:72:31:3d:f0:6e:e2:93:d4:
fb:e3:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:27 2025 by rpki-client