Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3144161-8808-4ee4-acfd-f4445054c195.roa
File: c3144161-8808-4ee4-acfd-f4445054c195.roa (raw, json)
Hash identifier: EBdAoHWU6QOCQzAthoCWaZrmddRYde0NYgmYY3xcexk=
Subject key identifier: 39:20:D1:FF:8D:77:8A:E1:8D:83:9D:E0:64:7A:AD:C0:DA:4B:68:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D10A69457A4E5E4E624960D51E32FBAD09485A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3144161-8808-4ee4-acfd-f4445054c195.roa
Signing time: Mon 06 Oct 2025 17:50:37 +0000
ROA not before: Mon 06 Oct 2025 17:50:37 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:10:a6:94:57:a4:e5:e4:e6:24:96:0d:51:e3:2f:ba:d0:94:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:37 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=430538345b993a15e14268f56f70ea58336ada513ed0108f4ef30a8ef38df1db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:26:20:e8:6d:25:1b:23:3a:17:7d:fe:16:
92:9b:8e:60:76:2f:12:c2:92:f9:78:8c:ed:9b:d5:
cb:33:f6:2a:f1:36:31:c1:90:6f:d6:d1:9d:f4:00:
68:25:53:0d:ff:f0:23:22:c3:b5:97:7f:44:ce:aa:
73:81:f0:58:c1:ae:70:38:0a:8d:d9:38:a2:86:61:
ea:1f:45:49:0c:2e:6a:4d:17:c0:e9:6b:86:09:b2:
04:f8:5a:78:f2:25:74:b4:c5:9b:2e:02:7d:5f:75:
e3:98:a3:c4:29:e2:75:df:62:71:11:33:4b:4b:35:
11:b5:6e:6d:48:f9:f5:b6:52:4b:61:eb:0f:bb:5b:
c3:f9:0b:f8:a6:c2:37:6c:4e:3d:ba:63:1a:47:8d:
d6:f4:47:88:aa:7b:82:9d:b7:5e:14:f1:d2:6b:8a:
cb:3c:2c:7d:6f:aa:ba:2f:7d:ee:82:8c:3e:10:49:
d9:08:ba:c8:b8:80:6f:5e:4a:71:98:a2:5d:9e:ff:
ea:3f:70:a4:d4:2c:df:a2:36:40:38:9c:f6:f3:d6:
8a:47:8a:eb:81:8f:0a:0d:2b:83:93:4b:ee:43:32:
f8:7e:5b:52:c5:c8:0e:f4:da:98:83:72:ff:2c:f2:
cd:57:7f:47:23:3f:bd:32:e9:75:32:fd:96:17:48:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:D1:FF:8D:77:8A:E1:8D:83:9D:E0:64:7A:AD:C0:DA:4B:68:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3144161-8808-4ee4-acfd-f4445054c195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:8b:a9:9c:03:a0:e4:a5:3c:aa:9e:b6:56:31:da:67:64:7e:
8e:28:2e:c3:21:6d:dd:5d:93:6a:bb:81:76:76:94:3f:42:af:
e1:08:f1:05:a5:5b:f6:ce:08:87:7f:6a:b6:57:cc:db:70:3c:
c7:e9:72:0f:6c:3c:2f:3b:27:da:02:5f:45:b3:d1:30:06:3e:
c2:69:40:72:ab:59:72:98:69:56:6f:bd:23:83:a1:01:dc:34:
fd:7c:63:ed:52:b6:2a:e6:91:15:49:85:ee:5d:06:88:69:6b:
d6:77:c3:41:b8:3b:42:4f:2b:b1:90:56:90:6d:42:a1:9a:05:
0a:72:14:aa:6c:5e:2b:93:69:ff:ec:bd:86:9b:d8:56:da:95:
ac:6e:a8:2e:f4:b1:c5:ca:7e:c0:77:84:f0:d2:c4:52:3a:89:
52:17:21:32:d9:11:42:df:10:bc:c2:10:d8:85:00:08:08:d3:
78:d0:28:cb:28:a0:a3:7f:7e:0d:10:e0:bb:76:20:7f:08:e7:
fa:84:24:59:47:93:4b:40:df:08:77:1f:15:60:1e:59:56:1d:
4d:19:81:ca:90:76:2f:b3:f6:8f:2a:39:fc:97:6e:b7:17:0e:
7b:98:07:14:34:35:b4:ad:03:bf:13:01:f8:84:6e:91:0f:69:
a2:51:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:36 2025 by rpki-client