Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
File: 9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa (raw, json)
Hash identifier: 33v0xp8Cn8SmXeS1D0KX+T9LrRo18W+YxmV590GRwRw=
Subject key identifier: EC:D2:1B:C1:48:BF:98:23:2F:02:F8:71:D4:52:49:A4:93:54:20:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7091DBDBDCDA478077AE50D7B95F6C6578D15AF8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
Signing time: Fri 17 Oct 2025 21:40:15 +0000
ROA not before: Fri 17 Oct 2025 21:40:15 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:91:db:db:dc:da:47:80:77:ae:50:d7:b9:5f:6c:65:78:d1:5a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 17 21:40:15 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=c147e33a058d50472ae12cf7b634267844fa2067ab7ca3b5c0b67dd3a81e3e0f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:9e:55:7a:d5:48:d7:cd:2d:78:42:e0:fb:
c7:07:b5:04:72:ab:46:10:13:87:8b:a7:7d:5e:0d:
e9:c4:b2:6a:55:1b:d7:ac:df:4d:d0:82:43:a1:a0:
79:61:89:7b:81:c8:ea:30:eb:fa:7a:e9:91:42:2a:
e3:8f:b4:74:44:9a:be:f2:46:ed:a5:35:35:54:fe:
bb:32:3d:ae:99:cf:0a:fd:87:bf:90:05:c8:d6:54:
b4:b5:cd:c7:03:ec:fe:40:55:4a:88:29:ce:bd:e7:
93:89:f9:13:42:fa:c7:9b:7a:c4:84:ba:70:58:4f:
b3:b8:59:40:62:e2:50:91:35:ab:9e:2d:c7:2e:4e:
20:3d:4a:45:b1:ab:5b:aa:fe:27:8e:cb:3d:79:77:
52:27:76:ac:83:4d:4b:da:8b:29:9e:d9:36:a2:b7:
12:4e:bc:22:94:bb:fe:02:d0:2e:65:78:30:39:72:
0b:1a:ac:13:14:19:6e:cf:9d:45:c7:ed:46:ae:5e:
88:83:2a:20:08:c5:da:6e:b9:af:65:46:27:c0:b7:
7b:c4:e8:ae:26:d8:80:bc:f0:8c:67:be:cb:10:c7:
dc:6d:b7:09:7f:87:9d:ab:e9:35:ac:b4:85:57:a0:
92:90:c6:10:42:be:6d:a3:6c:41:0d:5e:93:22:b3:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D2:1B:C1:48:BF:98:23:2F:02:F8:71:D4:52:49:A4:93:54:20:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e6d0034-7dff-4701-ab93-2a9d5ed918c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:e000::/48
Signature Algorithm: sha256WithRSAEncryption
1c:0d:5d:2a:62:a4:87:3d:d5:bd:ec:69:ac:85:df:0a:69:e4:
73:a3:b5:ef:5e:2c:e6:40:ce:7c:6a:46:05:2a:79:c4:aa:83:
f0:63:ed:00:0f:98:86:d9:13:2f:8b:1a:a2:a1:c1:a5:15:97:
02:d1:47:c2:70:e9:2f:f8:8f:31:16:07:31:89:5e:1a:6e:a3:
16:1c:d5:fc:d8:a2:05:93:ee:db:04:78:0a:64:51:ad:ca:ae:
43:ca:a9:9b:87:30:99:8b:6c:98:fc:5b:8c:9d:dc:67:31:9a:
15:ba:c4:c6:59:7d:5f:66:41:2e:0c:3c:0d:b5:2c:f4:c2:61:
1d:8a:5f:dc:61:ca:a0:23:38:3f:1b:97:c2:ed:a7:55:3c:b1:
05:8c:c4:ac:8c:b9:f0:d9:e3:84:fd:c5:19:7a:77:22:da:c2:
75:7e:a7:50:96:19:1e:bf:ee:ed:24:b6:4a:38:73:c9:1b:bc:
52:85:01:03:ae:a7:4d:57:17:24:03:23:88:19:a6:76:ba:63:
aa:b9:0f:34:4d:55:5f:f7:83:34:8a:53:57:65:69:7c:f5:72:
e3:cf:6e:2a:59:c4:da:7a:1e:eb:9a:34:f1:4e:bc:da:f9:11:
10:08:04:f9:b0:51:c9:34:12:21:d4:ab:61:63:93:14:df:f2:
88:cd:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:28 2025 by rpki-client