Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4bc5ce4-db80-4527-b720-60a744036322.roa
File: b4bc5ce4-db80-4527-b720-60a744036322.roa (raw, json)
Hash identifier: pBRfcw/znqcrBfH5oA9DQqwc7uSrY9Rw2YjSnuHDvg4=
Subject key identifier: EC:10:DC:CE:74:3E:93:A6:27:FC:4B:1F:53:2D:83:EE:00:CD:56:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1517F9CC15AC6B208EBEFF55708899B9A2DE5692
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4bc5ce4-db80-4527-b720-60a744036322.roa
Signing time: Fri 26 Sep 2025 19:21:39 +0000
ROA not before: Fri 26 Sep 2025 19:21:39 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:17:f9:cc:15:ac:6b:20:8e:be:ff:55:70:88:99:b9:a2:de:56:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:21:39 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=56a00c0497b63ae525c0aeef73417fbab7fe12901e477fe382e912c6e63063c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:53:65:d1:46:b5:42:7f:61:ea:4d:9e:11:
26:2c:33:d3:15:e4:7e:4d:9c:9c:43:d0:20:42:69:
ae:c7:19:4f:f8:7e:7a:dc:82:49:51:02:fe:58:f6:
37:f4:a0:cd:97:de:0b:8e:2e:e6:c4:32:9d:a2:d3:
42:10:65:96:0b:6d:0a:16:ca:dc:b5:25:9d:52:33:
ef:8e:19:4d:e3:df:17:38:01:dc:3b:95:7d:0b:fe:
2b:67:9e:90:b8:c2:66:9f:b1:8e:99:b1:ea:87:38:
a5:c1:d4:66:a5:b2:6f:17:ff:c8:3f:2c:3a:e1:55:
14:30:28:cb:6c:1b:14:b6:91:a6:6c:69:06:3a:36:
93:94:e4:42:d5:ce:8e:df:da:29:0f:44:40:64:8f:
45:8a:d7:10:e2:31:69:8a:14:48:b4:4e:4d:3f:de:
cc:65:2f:ef:42:6c:fa:48:74:86:08:80:ea:74:53:
15:7d:51:46:ca:df:2d:0e:3e:42:20:d0:0b:8f:26:
d6:f5:dc:10:86:c9:1f:2f:14:62:da:03:f8:f5:f7:
3c:4d:09:dd:cf:25:2e:89:b6:2b:9f:6f:21:6b:a6:
9b:70:c2:11:45:8a:92:6e:c7:46:55:0b:f1:7c:f8:
a2:a3:3d:71:62:e4:64:9d:63:71:6c:fe:e0:b9:74:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:10:DC:CE:74:3E:93:A6:27:FC:4B:1F:53:2D:83:EE:00:CD:56:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4bc5ce4-db80-4527-b720-60a744036322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:b000::/40
Signature Algorithm: sha256WithRSAEncryption
42:b6:07:9e:33:c2:73:12:a3:25:ef:67:bd:cd:3e:aa:d3:97:
01:32:98:26:23:f0:a5:90:fa:b5:86:65:b7:50:ec:1e:3d:a3:
9e:69:58:af:b2:32:7c:f6:bb:a1:3c:f4:20:02:8d:79:eb:29:
75:16:4f:54:23:d5:f4:9b:d8:25:d2:eb:94:15:bd:d7:6b:4f:
ae:c4:e1:68:03:d3:6b:3f:34:4d:18:3c:1c:1e:b1:53:38:d1:
29:74:db:94:e1:5e:96:94:5e:07:62:8b:57:2b:7f:a3:b7:7c:
88:1e:32:8d:7d:99:d5:1f:05:89:00:83:e7:39:05:05:30:b9:
75:e1:3f:68:2a:13:fc:d1:17:9d:26:86:58:41:59:fc:f3:5b:
47:66:90:86:ea:e9:f8:85:cf:a0:55:b6:65:c1:c5:b0:8c:4d:
63:9e:d6:da:3d:54:21:f4:2b:7f:5a:f0:16:20:b3:51:5a:14:
71:61:e0:d7:93:35:47:81:75:2c:f1:ed:5b:07:5b:a9:8f:3f:
36:cd:41:94:ae:fe:0b:be:27:63:cc:4c:08:0e:1f:4d:f7:a9:
2f:c2:1f:bb:ef:d0:49:d1:15:fd:76:d2:ca:a9:49:3c:a6:bd:
f3:5b:fc:08:b1:a5:1c:5d:82:65:0a:2e:e8:19:1e:46:0c:15:
96:ac:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:45 2025 by rpki-client