Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
File: 99404275-57dd-4a36-8c29-529ab06d1d00.roa (raw, json)
Hash identifier: 4LXaAJII+MUpSakj4mPfD0Vhkz9qqPKJXfEEmdXKRSg=
Subject key identifier: C7:F3:01:61:7E:08:02:D5:B3:9B:B1:CF:0A:B0:E0:7F:B3:E3:11:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08069BF03EAB9C3F95F74A424196643AE2CE5F22
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
Signing time: Fri 26 Sep 2025 19:41:20 +0000
ROA not before: Fri 26 Sep 2025 19:41:20 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:06:9b:f0:3e:ab:9c:3f:95:f7:4a:42:41:96:64:3a:e2:ce:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:41:20 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=1d7bf50f854b8448e7751930b6b099b34ac72f25d0e776583a877964bb92c293, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:79:02:2f:ca:e6:c8:5b:fb:36:85:3a:82:
59:c0:1b:ae:d1:69:0d:9d:eb:3a:29:65:98:0c:dd:
f2:b9:b8:34:6f:9a:ed:d6:7b:d8:b5:db:3f:46:e3:
77:ea:c0:5b:71:77:b8:81:8a:a5:f0:af:4c:44:74:
37:01:15:12:6e:67:eb:e7:12:87:dd:cf:50:1e:8f:
70:49:95:6e:01:2e:92:dc:d5:6f:43:4a:ba:9e:fb:
f4:38:c3:b0:00:c8:af:dc:3d:06:8e:5d:58:ec:4b:
32:aa:bb:5a:0c:94:50:57:92:ed:d4:a7:e2:b5:2b:
ee:71:c8:30:1c:d7:9d:a6:80:1d:1a:6d:2c:07:67:
a4:19:26:b1:a2:29:35:4f:ee:1e:f1:6c:69:c7:fe:
9f:21:4d:71:be:a2:f9:7a:ef:77:48:8e:3a:e1:67:
21:f3:e3:45:03:86:4d:c0:2d:a4:4f:58:70:09:85:
fe:72:0d:64:ff:ae:7a:40:51:c1:28:36:bf:b3:99:
4d:e4:d6:dd:bb:b8:02:1d:d3:4c:40:a0:50:0c:42:
c1:58:83:a1:0c:5f:f4:b7:b2:99:4f:e4:26:30:49:
d6:3d:2c:10:44:86:bd:b5:db:59:b7:98:1b:a9:79:
ca:54:7f:17:d4:79:d5:d5:61:48:d0:b5:07:2a:b7:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:01:61:7E:08:02:D5:B3:9B:B1:CF:0A:B0:E0:7F:B3:E3:11:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:b000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:80:36:5f:ed:fe:70:e5:34:16:4d:72:28:6a:4e:f1:5e:29:
5b:f0:30:be:4c:41:ba:c3:ff:e6:bd:d0:be:d9:4c:fd:81:43:
a3:90:27:7b:a8:1e:47:7e:23:05:7c:ad:33:53:6b:3e:2e:96:
42:a1:f4:64:9d:08:87:73:62:bd:13:86:0f:fb:ac:ef:b0:76:
58:9f:18:b9:d5:16:8c:f4:06:f0:a6:70:a5:b9:00:25:f9:48:
aa:28:64:84:5d:e2:ff:cb:55:10:f7:15:bd:c6:14:5b:0a:69:
ee:46:1f:94:3b:0e:1a:f3:e8:7a:35:4f:2a:fc:9b:73:98:db:
d6:13:f4:76:d3:0b:99:a3:d2:25:46:48:09:df:da:c4:16:dc:
86:bc:fe:b4:9f:55:19:b7:fa:29:b7:b8:52:45:84:f8:49:d0:
52:84:25:b6:66:a7:b4:f9:ed:bc:f3:15:63:fc:21:e4:e7:2c:
b9:9b:fe:a8:2f:3a:0a:9f:c7:d9:85:24:a5:ea:57:31:bb:af:
8e:23:4c:9c:14:e2:ff:4d:b8:35:a8:d3:11:44:b7:1a:ba:d3:
5c:11:3a:f8:c3:bb:ea:a5:cb:d1:2d:8d:4d:ba:ed:cb:bb:4f:
06:98:c4:88:a2:ef:44:ac:30:b8:d7:bd:8a:e2:a5:ee:f1:a9:
16:9d:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:05 2025 by rpki-client