Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
File: 88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa (raw, json)
Hash identifier: UwrO2tZlDBOyWRiB60XnM+R5+TBkz0Zqp699JOrDtTo=
Subject key identifier: 14:7D:32:F1:C4:2A:D9:3E:C3:2E:73:A5:42:02:A5:6A:B6:6F:D2:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7EA104544BD33A059C9E283B1758C7B6594DB278
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
Signing time: Fri 26 Sep 2025 20:01:29 +0000
ROA not before: Fri 26 Sep 2025 20:01:29 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a1:04:54:4b:d3:3a:05:9c:9e:28:3b:17:58:c7:b6:59:4d:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 20:01:29 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=6a03d2e420f94f7f2aa052f1bebe0734ee89fc63f43af439c4b2536b1b4f718a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:2a:ee:99:bd:cd:09:9c:0e:ac:b1:73:ae:
e0:60:f3:23:87:63:66:a9:09:ea:63:ca:80:76:ed:
27:f3:1f:a4:15:4c:9c:69:97:2c:fd:34:96:de:3d:
57:8a:2a:da:1a:d5:25:34:a8:82:f6:5b:ac:5f:e2:
fa:fe:14:db:b7:1f:ab:55:40:67:b0:f5:00:ed:3b:
d8:30:9a:fb:ad:cd:c7:4e:91:23:c8:5b:ef:60:75:
ca:4d:a9:f9:be:36:3a:ef:62:90:90:e8:8a:c8:cc:
da:fb:2e:0f:65:0f:93:10:ee:d2:24:9c:19:9e:e9:
c5:52:64:32:97:4a:12:03:60:7d:88:e4:c6:1f:1b:
86:84:02:66:b8:b0:d5:f3:71:e0:ad:54:34:44:5e:
db:2b:ee:1f:82:61:64:4d:c3:57:cd:ea:2a:97:f6:
0a:cb:77:e8:d4:52:cd:e0:57:23:2b:f0:09:58:8d:
60:89:2c:4f:db:bd:da:4e:bc:79:2f:ee:de:77:64:
4b:88:c3:bf:7f:59:88:af:62:18:d3:59:59:b6:a8:
20:bc:c9:43:1c:71:3d:af:46:b8:c4:70:23:d0:ba:
96:cd:63:2a:8e:1b:3f:3e:d4:31:71:10:73:b2:7b:
62:62:3c:fe:7a:02:ce:5d:42:15:83:8e:34:ca:3e:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:32:F1:C4:2A:D9:3E:C3:2E:73:A5:42:02:A5:6A:B6:6F:D2:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/88800f9f-48fd-4442-a6f6-7a504e1cb3b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:c00::/38
Signature Algorithm: sha256WithRSAEncryption
c8:4b:a1:5d:dd:db:fd:f8:db:48:ce:f7:aa:93:7b:2a:5d:a2:
79:e8:b5:d2:bf:30:f8:58:bc:1b:9c:6c:8a:4c:86:c4:f7:8d:
b3:12:03:51:9f:bf:52:c4:1f:dd:b1:3c:5f:61:a1:a5:c2:2e:
18:e3:8e:1b:12:a9:b6:fd:2c:df:ac:cd:d8:32:54:f5:b2:7d:
8b:7d:64:f4:37:b2:5f:b6:2c:ca:22:23:27:23:7d:e2:78:7b:
9f:8b:fa:41:fa:c5:43:db:08:f5:22:56:16:43:6c:40:e9:5d:
b0:77:c8:1c:81:13:49:2f:c7:b6:ba:59:d4:48:14:2c:0a:02:
a5:18:9b:32:2e:31:45:25:12:37:8c:f3:56:cd:e4:88:d3:93:
0f:0c:6e:9e:be:5b:4a:a6:cd:74:4e:2b:fd:24:94:0f:cf:92:
9a:b8:57:89:91:66:ae:fe:c9:5e:d5:1d:6f:4a:d7:ba:d3:5a:
a0:66:16:32:88:bb:b7:9c:ef:ad:84:81:8c:88:90:a8:77:35:
4e:fe:4e:c3:db:cf:17:d6:b2:70:d9:b9:be:c8:c6:fd:f2:f6:
2d:7f:81:49:fe:00:f9:f5:2d:82:f9:f7:57:90:02:37:09:03:
2c:0f:2f:62:dc:ad:3f:90:17:92:e3:bc:8c:54:fb:aa:97:41:
06:f0:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:09 2025 by rpki-client