Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
File: b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa (raw, json)
Hash identifier: W/xnZ0TF+i6QwZXYYBZqVQqhnEldNMHaui6J4bYsDHA=
Subject key identifier: A9:72:62:D6:BB:BE:B3:62:F3:D1:35:1B:64:81:AB:66:DF:A6:43:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DD401EEAAC5C5EF4E99C452CD114B64CB426448
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
Signing time: Mon 06 Oct 2025 18:10:06 +0000
ROA not before: Mon 06 Oct 2025 18:10:06 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d4:01:ee:aa:c5:c5:ef:4e:99:c4:52:cd:11:4b:64:cb:42:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:10:06 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=0892d44ec170682efb861f0a8fa9e9e84e236096ab5e03934028e27d62960451, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:e3:79:3d:55:f7:dd:97:a1:8e:f8:b2:cd:
d2:35:03:60:17:ad:8e:a3:6c:96:9b:fb:d1:1f:e6:
69:7f:42:c0:92:db:1d:de:ee:0b:3e:24:c6:40:35:
83:64:43:0a:ca:ac:86:a1:58:5d:7c:0b:4d:cf:2b:
fa:5f:46:cf:d1:f2:b1:06:24:98:9f:78:03:3c:c3:
cb:5b:27:87:d2:09:24:0e:7f:00:7d:04:f1:04:30:
b6:86:b2:b6:f4:ca:bd:28:ec:1a:0a:13:2a:06:33:
d0:1a:30:9f:2b:c6:63:db:35:09:de:72:c0:7a:87:
98:52:da:e4:c5:98:e1:c8:2b:54:5f:d5:b0:d5:27:
a1:78:ec:b1:d1:8b:7c:04:8c:40:c8:d4:04:1d:13:
7e:60:82:2d:26:19:46:33:e6:c4:fe:52:44:00:f4:
4f:81:c3:27:60:0b:39:00:0f:6b:99:a3:af:20:ac:
5c:2f:1b:89:1e:47:4e:3e:f6:98:b4:dc:80:6e:8c:
39:86:22:ce:07:f6:10:1e:1c:f1:12:4b:73:99:7e:
cf:e3:d7:74:de:41:a1:bb:33:e9:8f:c3:25:ac:07:
b5:cb:14:5f:65:7e:ea:6d:8a:c1:6d:d5:14:de:73:
3d:90:3a:a6:25:0a:1c:92:08:42:2a:3a:39:f2:45:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:62:D6:BB:BE:B3:62:F3:D1:35:1B:64:81:AB:66:DF:A6:43:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:8000::/40
Signature Algorithm: sha256WithRSAEncryption
73:02:97:12:93:f6:4e:ad:e7:af:56:72:54:cd:0c:47:95:4a:
05:95:8d:fa:33:5e:80:16:37:a2:ed:16:c8:2e:90:6f:c0:b9:
d6:b3:13:24:27:35:1b:8e:c2:64:d6:7f:c7:b7:2b:d7:d5:ca:
56:21:e7:61:00:6c:63:59:95:2a:7d:84:b3:57:e7:1c:f8:9d:
3d:86:3b:a8:3e:c1:b1:36:02:2b:d7:a7:ad:1f:d1:22:30:54:
58:3c:1d:9c:ac:81:20:50:fc:7e:91:58:7c:16:77:67:ad:47:
fc:a6:8f:1e:39:bf:48:6b:a4:52:d0:0a:9f:65:79:32:f6:7f:
88:5e:4a:f9:d8:c8:d5:30:53:ad:05:2e:02:d4:c3:b5:6f:05:
ea:cc:c7:30:cb:d7:c8:ca:fb:d2:c8:0e:70:b2:1f:be:2f:36:
60:7e:df:67:29:81:f9:a8:1b:68:98:ca:35:5b:14:ca:46:40:
67:af:64:d1:18:d2:32:26:a9:95:91:c5:cf:9f:e1:2e:4b:e0:
8f:c5:04:a2:13:6c:fc:95:9b:95:b2:35:bc:64:ff:eb:7c:fb:
d4:2b:97:8b:c0:45:e3:45:28:f3:76:57:36:7f:e0:f1:9a:7f:
1f:78:ee:fc:77:e2:0e:88:2c:4d:68:0a:ae:48:56:23:c1:a7:
32:7e:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:23 2025 by rpki-client