Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
File: a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa (raw, json)
Hash identifier: /IQyLhs4IljeNqJLkAn1tlff8oilUK3NIQuCR6GqWpA=
Subject key identifier: 08:B5:20:08:5D:E1:84:94:4A:AB:07:3D:F6:A7:D9:BA:73:4E:16:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 654C57A9227D5E005D1BECEA1E0C86CEBAA5798F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
Signing time: Fri 26 Sep 2025 19:40:07 +0000
ROA not before: Fri 26 Sep 2025 19:40:07 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4c:57:a9:22:7d:5e:00:5d:1b:ec:ea:1e:0c:86:ce:ba:a5:79:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:40:07 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=3f81bce289cbb00fc96d37e2f4c148cf9a661f0f92e1f6ace9e0d6c8e5642654, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:06:c2:63:16:fb:14:a2:22:bb:2a:6d:cf:
0f:39:73:67:0c:b4:8c:3c:99:16:a0:b9:d8:4b:71:
be:f0:0c:df:c7:81:a5:96:47:94:e5:52:23:a0:9e:
a1:0d:a9:5a:aa:6b:b7:5e:bc:92:90:78:82:af:70:
97:61:84:12:8e:6a:c9:3c:a0:ad:d4:c0:19:7b:47:
07:b1:43:ea:2e:39:3d:e2:a9:2d:83:2f:4a:65:d1:
1f:7a:0f:02:32:b7:95:1b:b9:ee:6b:49:7c:0b:e5:
f7:1b:4d:d1:09:13:55:9d:e8:98:fa:b4:88:64:93:
00:49:2d:dc:10:8c:12:05:f6:60:39:90:f6:b5:17:
58:9b:c5:b3:7d:81:3a:f8:af:3e:b4:0d:38:b2:78:
50:9f:97:15:e1:41:6e:13:54:93:63:f2:71:7e:0d:
b0:e4:3a:e8:5a:00:8c:be:f0:9c:58:5d:c3:09:4a:
ec:be:b4:a4:c7:29:d6:9d:97:a5:e7:71:c2:6a:c8:
df:80:c7:a7:05:6a:f8:16:00:a9:86:c9:ca:84:52:
ce:81:94:02:7b:f9:23:81:0d:49:5a:b2:f6:ba:21:
06:34:82:8e:5c:ec:45:9e:07:ae:4a:7e:4b:e5:0b:
75:43:35:30:26:2d:43:d3:75:a1:c9:0a:bb:97:fe:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:20:08:5D:E1:84:94:4A:AB:07:3D:F6:A7:D9:BA:73:4E:16:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:9000::/40
Signature Algorithm: sha256WithRSAEncryption
61:ce:e7:4c:80:b8:19:76:df:63:dc:da:cf:eb:93:7d:61:f8:
8d:2b:9f:a5:97:2e:f7:81:cd:62:96:39:3a:27:54:5f:3e:c9:
5f:d3:e9:9b:95:17:72:04:2b:b1:87:e3:6b:03:9f:48:66:26:
03:2f:47:cf:21:b0:6a:d6:cd:54:88:ca:74:cb:da:f0:96:1e:
ce:56:ef:cf:b1:5b:de:c4:e4:e7:b5:f6:a0:93:3e:cb:57:a5:
2b:34:41:30:c1:7e:7b:c8:f4:c1:96:85:a6:74:49:f3:f4:d1:
f4:2c:16:e4:f8:55:b4:c2:ff:1d:ca:55:a2:de:fd:a4:de:44:
dc:89:50:7a:56:47:1f:c6:6d:80:60:da:03:3d:10:cf:7b:cf:
81:87:a3:45:33:38:5f:77:d8:45:0f:3e:c7:ad:c9:71:8b:6d:
ec:c2:9f:f2:cc:e9:11:d8:9f:45:fe:d3:50:48:04:a4:fc:14:
34:c7:e2:42:78:72:4c:d6:10:99:78:90:9a:fb:50:16:7b:a3:
a3:42:c2:31:84:63:08:88:de:b6:11:46:13:c7:50:e7:85:04:
43:11:8c:dd:53:38:b5:51:7f:d2:c8:69:8e:a6:1b:78:cf:15:
cf:b3:09:c3:f1:af:15:c9:5b:a6:bf:5a:f0:43:e3:91:2c:ba:
73:0d:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:59 2025 by rpki-client