Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: 9tSs3lyutZNJvjyMgg+SxhbCFBsUOdcPq+aTF3mQh+c=
Subject key identifier: D5:7A:DE:2A:98:88:7F:FB:E5:D8:E6:CE:1D:1D:AB:82:A4:3A:AC:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B589602EB2AD1D94170B5FFAD3107BDD6286EC4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Fri 10 Oct 2025 17:10:18 +0000
ROA not before: Fri 10 Oct 2025 17:10:18 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:58:96:02:eb:2a:d1:d9:41:70:b5:ff:ad:31:07:bd:d6:28:6e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 10 17:10:18 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=1d8a718c34d693663b0f355ed4d012a4fc55b3e8fc9c0f1f36f5384193408ce5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:48:dc:ef:0f:7b:cb:95:d3:e5:35:3a:71:
bc:24:04:c8:1f:0b:ce:af:8a:ba:4e:c8:01:a2:f6:
1b:a5:bd:43:a1:7b:6e:46:0c:3b:36:ea:b3:6b:1b:
b5:ce:2d:44:8c:ba:1f:d8:f1:ad:86:19:5e:82:0a:
9f:63:14:67:f6:b9:ee:3e:5d:b9:7e:80:f1:ac:81:
9d:99:df:a2:80:75:60:61:1a:4a:c7:4d:be:88:cb:
d8:cd:8a:16:0b:a0:27:88:56:ee:52:bd:3e:ac:2c:
dc:56:80:cb:9b:17:10:a2:3d:cf:63:89:11:a3:9b:
7d:91:2c:30:7d:99:ab:6d:68:09:07:5c:ed:27:99:
e8:20:77:ff:20:ee:53:3e:56:92:27:ec:48:c7:18:
96:56:4b:56:fb:0a:b2:ea:9d:3c:00:e1:9a:22:48:
93:39:d5:56:4f:4e:8b:08:e1:6e:2f:03:c3:96:e0:
1f:09:eb:de:5f:3b:d3:61:d7:a7:0a:20:11:de:e2:
f5:27:2d:2a:0f:27:76:10:73:b2:7d:4c:8c:49:d9:
fb:2c:00:f1:d4:e9:ec:c5:f8:41:07:f5:b8:c8:74:
13:70:f2:bd:56:f2:50:5d:03:ec:78:4e:a6:47:67:
a5:67:58:16:b4:c9:a7:80:19:86:8e:43:76:d1:2b:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:DE:2A:98:88:7F:FB:E5:D8:E6:CE:1D:1D:AB:82:A4:3A:AC:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:f2:55:d5:9d:05:02:8f:e8:98:d0:3d:55:01:e2:5b:d6:ca:
3c:99:03:9d:8b:a6:7b:83:96:b9:99:b6:52:32:29:6d:bb:43:
b3:21:06:51:08:82:f6:3c:39:a4:d2:7a:2c:40:e3:eb:7b:88:
44:0c:2d:a1:5a:3f:1f:78:18:8e:0f:51:23:46:c5:7a:0b:7f:
e1:65:1d:cb:f5:84:94:40:58:07:95:e1:55:f7:dc:02:cf:03:
96:a0:4c:db:93:92:2d:07:ad:75:79:a6:ca:98:43:f7:2f:ac:
15:4f:86:61:3e:ca:af:82:7b:79:12:23:bf:86:6e:64:9e:ff:
ba:05:e5:57:a4:63:d5:73:f7:e3:f1:49:27:81:e2:34:d2:d9:
eb:93:6c:c1:b2:38:9c:d9:61:2e:9f:28:8f:33:36:32:20:43:
dd:af:98:76:84:7b:b1:ce:d3:65:d5:e2:7d:a5:22:1f:7f:a0:
d4:b8:1a:30:9a:b0:fd:90:b2:79:03:1b:86:05:e9:fd:a8:b6:
85:7a:7c:77:40:8c:b1:98:27:8b:2b:84:b9:4d:5d:7c:8b:96:
c5:f5:18:7a:85:87:bd:2e:c1:df:c8:4b:b0:34:b6:a4:b4:cd:
18:5d:75:70:f4:d2:84:ed:0b:ce:91:6a:b8:ae:99:da:83:57:
db:1c:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:14 2025 by rpki-client