Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
File: 93c73d28-6ada-4f65-bb8d-8fbee434c001.roa (raw, json)
Hash identifier: 566b4JcewCVsckpngs7w2UU164pq7EySCPPP2X3wbzQ=
Subject key identifier: 6C:32:06:6F:D5:EB:6D:4B:F4:C6:EF:6E:6E:35:CD:CB:B7:B8:EB:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0947746050CDB93C9E922802EE17AD61538B0E79
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
Signing time: Fri 26 Sep 2025 20:01:41 +0000
ROA not before: Fri 26 Sep 2025 20:01:41 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:47:74:60:50:cd:b9:3c:9e:92:28:02:ee:17:ad:61:53:8b:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 20:01:41 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=8254776d5c8cd37d88422e5653d2600630f07d90ba889ac0de8a74514c75191f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:ae:86:1f:b5:fe:50:9d:b6:ad:19:f3:ee:
11:c6:84:8c:21:a4:94:dd:99:e1:ff:33:dd:0f:05:
e7:a9:90:3c:b3:64:98:e9:78:fb:28:5a:fd:54:1e:
1e:88:24:18:59:ef:e6:c9:b2:a8:24:89:e0:0f:8d:
52:4a:20:6d:61:02:4b:e8:24:bb:78:31:33:89:0e:
c5:aa:ab:e0:1d:d0:3c:3d:35:ac:e4:8c:5a:03:f2:
94:f1:ea:cf:1d:7e:ef:6d:16:4f:2a:60:af:53:4e:
cb:ed:7b:e8:14:2b:5b:1e:b3:26:e5:e3:7b:1e:d5:
83:29:f2:52:c0:8b:64:c2:5a:21:3c:d4:b9:21:9b:
50:5b:e7:ad:c9:56:cf:a4:64:e7:e8:ee:d7:7d:90:
8f:5d:65:dc:56:f1:a6:78:e1:85:5e:a7:64:e2:92:
57:26:ca:fa:dd:85:1e:37:a4:0c:12:2b:c6:65:5b:
4e:ca:05:0f:63:87:a4:a0:d3:d5:97:91:f0:30:93:
02:e3:35:2f:57:80:f9:71:f0:3f:5f:be:86:47:0f:
85:3d:5e:f3:49:16:c3:7e:4c:26:e9:61:f0:e1:cb:
b6:9b:5f:2f:9f:f9:57:c0:05:f1:f9:01:ff:29:f4:
da:ea:ec:61:54:bd:12:93:ac:bd:98:c8:f6:7b:b2:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:32:06:6F:D5:EB:6D:4B:F4:C6:EF:6E:6E:35:CD:CB:B7:B8:EB:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:400::/38
Signature Algorithm: sha256WithRSAEncryption
11:2f:d4:60:14:e3:6e:9e:fd:70:d2:02:a8:68:7d:29:1b:80:
71:03:90:5c:cf:3a:33:bc:96:cf:fb:a0:0a:db:a8:9b:c9:2a:
d0:63:1a:93:91:2b:c0:38:55:63:d2:e7:19:97:af:09:97:a2:
f5:ba:ad:1b:bc:14:78:fb:d7:ae:b1:ef:18:24:94:ef:b1:c4:
4c:fe:2f:0e:a6:e9:94:0e:0b:27:6e:4e:f2:74:cf:3a:56:e2:
b5:e9:e4:9c:46:fd:9f:1e:31:71:3a:f1:2a:ea:9e:31:74:c7:
21:54:1d:2a:72:a9:19:a8:e7:0b:35:9e:76:3e:64:bb:c8:f3:
c6:0d:ed:60:02:5b:a0:9a:e5:a6:a2:96:e3:98:3e:8f:93:81:
a3:36:54:ae:aa:7c:f3:e1:fa:a2:57:2e:ae:94:ef:8e:7f:84:
ba:47:a6:ae:d6:54:d6:76:ba:07:97:a4:83:3f:ac:08:61:8e:
d4:49:4a:90:ff:c3:d3:c3:85:d6:25:11:6b:31:5a:2e:c7:d8:
93:a4:26:35:c3:12:86:1c:60:a6:45:21:d0:27:2f:38:3e:e1:
65:46:84:86:ab:3b:85:61:f4:6c:b2:14:cd:1f:c3:fb:a9:56:
f0:bc:8b:d6:9f:36:d3:6d:55:2d:4e:9c:78:65:b1:95:09:87:
1e:97:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:34:00 2025 by rpki-client