Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa
File: a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa (raw, json)
Hash identifier: e5vTFM2iIyAKT2HR4x0+3m99/1iCCUW8W6jQ2s11u9s=
Subject key identifier: F9:0B:9D:FF:70:3D:E3:6F:3C:A8:8F:FF:8B:0F:91:A8:51:43:5C:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C958DE14271F25CA64010DBFEFAAC68E20C855B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa
Signing time: Fri 10 Oct 2025 17:04:25 +0000
ROA not before: Fri 10 Oct 2025 17:04:25 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:95:8d:e1:42:71:f2:5c:a6:40:10:db:fe:fa:ac:68:e2:0c:85:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 10 17:04:25 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=4b433d33fef725dc21f309d1c156656471fd4813a5b595ec8464c1176a478751, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:d6:7e:ec:ab:07:13:86:bd:5d:d5:75:05:
d0:40:a0:ed:d9:3d:f9:50:b5:ce:ff:d5:08:e2:69:
50:54:cc:2e:30:cf:23:58:68:44:05:eb:9a:45:dc:
67:c4:f3:dd:66:08:d3:88:60:90:e5:4a:72:7b:e8:
ce:5e:ac:81:4e:9f:3d:3a:44:de:b0:56:d9:f9:a6:
7d:85:09:25:ec:d4:e7:a9:9c:b1:91:c8:e9:cd:1e:
62:6a:ae:3b:c2:23:a6:db:e1:58:52:46:8e:07:f3:
a4:f2:bd:97:93:63:91:de:35:f9:75:0d:d7:db:30:
4b:ec:ca:90:85:4c:eb:e1:16:6a:4c:de:fa:c7:8d:
7e:d7:ed:6b:ef:82:08:69:8a:8b:6c:4b:ff:eb:58:
b3:ac:ca:c7:71:98:f0:96:8a:27:c1:1c:55:40:fc:
0c:95:a0:64:bc:d2:d8:2e:a5:2f:63:77:c1:f3:c3:
36:de:d6:9a:db:96:77:7d:f8:d1:5b:07:7d:27:af:
cf:43:8b:c9:74:0c:a4:18:74:6a:7a:cd:55:41:6f:
c6:8a:21:45:6c:43:c6:da:0c:ee:4d:69:88:5c:75:
26:93:d2:82:b3:e1:77:1c:36:29:06:54:a8:42:5b:
48:2e:33:bd:6d:d8:42:23:89:d5:11:17:b9:05:e4:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:9D:FF:70:3D:E3:6F:3C:A8:8F:FF:8B:0F:91:A8:51:43:5C:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9351f0f-1de7-4e75-9502-939a8ea72ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e::/32
Signature Algorithm: sha256WithRSAEncryption
02:f3:43:aa:6a:3a:e4:91:20:b2:1f:9a:f7:ab:ab:17:a9:07:
47:63:aa:2a:8f:a3:3a:a4:2c:1a:72:e9:ef:79:be:be:ec:24:
d1:31:34:e5:d0:74:d3:a2:d1:1f:e9:41:63:f0:a0:fe:cd:a2:
4b:ec:bc:1f:65:83:cd:4f:60:ce:c6:fb:02:43:9f:1e:1f:27:
4c:3d:a4:04:a4:97:10:d0:51:f1:59:0f:58:ee:4e:bf:3c:2b:
d6:02:aa:e6:9b:6f:66:d4:56:7c:d9:a8:36:02:d1:b2:57:61:
ed:e4:16:2b:a1:e9:7e:b0:af:8a:81:f2:3f:aa:00:d3:cd:a3:
28:98:d2:15:67:7e:26:f6:6e:de:27:9d:e2:5a:ea:fd:d0:ea:
e3:40:bd:03:0c:3a:a8:c5:84:36:6a:c5:fc:73:87:be:69:16:
bd:2e:39:94:4f:9b:c2:f6:27:ad:f2:74:09:a9:61:3e:cd:c5:
e1:c9:4c:79:5a:8e:45:c4:24:1f:a7:8f:da:69:f5:b8:f1:29:
ef:59:42:a4:30:48:b4:01:fd:d9:f9:74:28:70:5f:c0:0d:8f:
e6:4e:c6:e8:5b:d2:0f:d1:0b:e5:3b:ad:c0:e2:0a:51:c3:08:
17:44:16:be:b5:5e:d1:70:7d:a0:e6:bd:fa:52:77:f7:ad:cb:
02:4d:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:59 2025 by rpki-client