Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
File: 94d1ece6-a642-4297-8fb7-d7003b36fe75.roa (raw, json)
Hash identifier: TJGAOtP0GYTp1W3iBt907o+GgzHqjgs5lPCu2dNdtn8=
Subject key identifier: 35:98:74:AB:68:39:F6:A7:59:FE:9A:7C:B8:21:B1:AD:52:0B:91:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02F1F4074CA085F7F09AF8ADED7D429EBE601E69
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
Signing time: Fri 26 Sep 2025 20:01:04 +0000
ROA not before: Fri 26 Sep 2025 20:01:04 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f1:f4:07:4c:a0:85:f7:f0:9a:f8:ad:ed:7d:42:9e:be:60:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 20:01:04 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=fcafabf59c64625b7c255facc19f05bf23623fa81351f67e0312681a2c243c00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:5a:86:b1:21:cb:98:53:cf:fa:08:8a:02:
4e:9d:57:33:70:b7:af:ce:61:2e:88:ad:64:6a:5b:
6b:51:c9:b7:fd:ef:1b:88:83:49:15:12:a5:c7:15:
cf:a3:7b:d2:1a:19:c8:76:40:21:a2:d0:5b:93:3c:
dd:79:be:d0:91:3c:cf:0f:37:3d:36:3f:0f:e1:19:
2b:7b:d2:b1:42:42:64:3a:bd:43:22:67:87:2c:b6:
99:84:3e:90:d1:55:1e:11:9d:36:72:8c:91:2c:aa:
1d:8d:ab:c4:c9:8b:41:75:9c:04:e1:88:69:de:5b:
e5:a3:ff:a6:0c:29:b0:ac:94:e4:92:1f:a6:a1:76:
30:be:cb:ac:e1:66:8b:e7:e1:d9:31:e4:dc:ff:08:
d4:51:0e:3e:1a:34:b9:a2:f7:a9:97:e2:c9:88:d0:
92:09:be:d4:24:fe:e7:6f:55:aa:2a:06:db:fb:74:
d5:94:4e:88:41:d7:d9:d6:af:41:2a:fd:5f:f5:b2:
b7:30:d3:3a:52:87:1b:a5:cd:c5:23:37:50:7a:7e:
42:65:93:ce:66:67:f0:76:80:7c:d6:b3:a2:be:e2:
c1:97:2a:d1:41:b1:5b:d6:c0:dc:9e:59:08:8d:2c:
db:83:c0:92:8a:c0:69:5e:d7:75:e4:9e:c1:3d:e6:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:74:AB:68:39:F6:A7:59:FE:9A:7C:B8:21:B1:AD:52:0B:91:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94d1ece6-a642-4297-8fb7-d7003b36fe75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:800::/38
Signature Algorithm: sha256WithRSAEncryption
b7:e7:c2:32:e3:9a:8a:a3:e0:91:09:23:f8:d8:ce:04:03:a2:
c9:4b:ea:a0:ff:bb:8c:73:ae:61:ac:61:b3:45:b2:13:d6:6f:
21:8d:f1:8d:a7:b8:71:76:9c:5e:be:d9:f6:1b:1b:21:22:02:
de:05:4c:5d:4c:dd:4f:e8:97:83:9a:8d:4e:d3:76:f1:86:99:
f2:d7:ac:ea:5b:d2:06:05:c1:2a:7e:eb:4b:d1:8d:34:1c:f3:
72:ac:51:4e:54:3f:5e:b4:71:fd:ca:53:6b:22:11:0f:96:47:
1f:60:5a:08:45:fd:df:05:ec:bc:8e:85:12:bd:77:50:20:d9:
18:62:79:10:8a:24:12:49:90:bc:8c:6b:1a:d3:b0:40:fa:d3:
55:91:9b:5e:be:b9:bd:01:d7:5e:5d:ae:0e:d7:94:14:c1:bf:
82:6e:3a:65:88:5d:47:ef:c8:7a:b6:db:6c:fe:b4:6b:a8:ac:
d4:ba:98:06:df:4d:6d:db:46:08:e3:af:69:ff:b0:21:4b:5a:
96:8a:ab:c0:a1:c8:28:50:08:01:52:f1:85:80:22:0a:3d:82:
3c:05:63:e7:d4:ac:ac:e4:9e:4c:0e:0d:b8:d1:5f:ab:99:f1:
f5:6c:8d:84:42:80:68:3c:fd:48:6b:85:bc:fd:49:e8:38:33:
33:b6:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:57 2025 by rpki-client