Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
File: 8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa (raw, json)
Hash identifier: /ZnLVIYdOiwM1oiW7LuqnNJ7jsgmf6AhtQE1zSrfLE4=
Subject key identifier: ED:A1:CC:03:9A:D3:F8:E0:9E:60:AF:45:AD:77:BB:DD:2F:EF:25:01
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52281CABA08C0D22DB64D10A4B97B3C03330B0EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
Signing time: Fri 26 Sep 2025 19:00:59 +0000
ROA not before: Fri 26 Sep 2025 19:00:59 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:28:1c:ab:a0:8c:0d:22:db:64:d1:0a:4b:97:b3:c0:33:30:b0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:00:59 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=b994212ce04ae8f3d2132ccfe513104471a504f0918b6bbf6fc6a3afa980b1cd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:75:5d:fc:5b:d9:d8:e4:e6:b9:a1:5e:9e:
1d:38:ed:be:e5:81:96:da:67:56:c0:ec:e8:e9:a6:
02:c6:bb:49:e4:ed:13:df:d1:78:74:35:90:da:91:
38:e5:f2:df:b8:ea:50:db:ce:64:ea:a8:14:fe:75:
b4:37:62:7a:fe:41:3a:29:a2:50:ab:45:14:9b:78:
d7:ce:78:05:ec:07:21:8a:44:0d:f2:7b:c7:04:ec:
48:5b:3c:0d:fa:42:f2:5a:82:1e:f0:d6:51:c5:c9:
fb:04:2e:3e:0d:97:72:04:55:ce:24:b3:69:7a:72:
b8:a7:90:18:f6:76:f4:00:48:4d:fb:3e:9b:90:cd:
3c:4f:0f:7e:94:fb:a1:92:cc:06:8b:3a:e1:60:97:
03:c4:8e:d7:26:88:4e:6d:5a:ad:b5:6e:8d:a0:36:
84:8f:66:ca:28:c1:7d:8b:8a:7e:0c:3a:b5:99:f9:
ad:6f:c1:b7:5f:66:52:2c:42:11:15:e9:8f:1e:aa:
3b:ff:b1:46:0e:9a:89:c4:a1:13:f7:f7:d9:b8:dc:
78:9e:bd:e7:fb:83:f0:21:26:f3:3b:8b:d0:82:27:
a0:91:22:6a:11:26:23:b8:e1:07:41:c2:a8:b8:60:
58:ed:1b:d8:63:88:51:46:9d:3e:d6:17:1d:2b:26:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:CC:03:9A:D3:F8:E0:9E:60:AF:45:AD:77:BB:DD:2F:EF:25:01
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:5c:ff:db:83:a1:e5:94:a3:96:2b:90:d2:59:0a:40:ff:5c:
b8:c0:21:67:41:6a:58:e3:eb:9f:ed:78:62:61:ad:87:5c:53:
75:c2:d8:d8:a3:74:7e:1b:85:1b:01:71:f3:a4:fe:60:ba:66:
5e:78:e6:8c:d6:e1:f3:7c:60:b3:c5:d0:ee:55:1a:fb:7e:65:
dc:f8:d5:46:79:f4:62:59:4d:25:2e:bd:19:3e:6b:39:e7:c0:
5c:df:fd:e4:81:34:29:d5:77:58:d2:15:34:07:82:de:f7:51:
1b:a5:9f:c4:a0:14:67:1e:1b:be:5e:4f:cf:db:c1:14:23:c5:
a9:7b:f1:65:a0:fc:f8:1a:e5:c5:bb:0f:e3:04:25:c0:1a:0a:
05:8b:5d:32:4b:d9:41:77:0a:32:02:f3:05:2d:a1:f2:d3:e6:
09:ac:85:29:8f:57:35:09:05:10:0d:de:83:0d:35:6c:46:13:
b2:05:9d:80:31:4b:6e:ee:69:8e:2a:eb:fe:6d:99:ad:0e:d1:
a0:2a:72:88:2e:43:85:fe:72:b8:0f:03:60:a8:2d:ca:45:97:
6f:6d:8d:32:ca:da:4a:39:f8:15:50:7a:49:66:3e:25:11:f2:
26:28:aa:0e:20:2e:01:fc:27:db:76:54:ac:51:df:0a:b9:89:
6e:e0:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:58 2025 by rpki-client