
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
File: c3736673-707b-4dfc-aca4-88dcbb52a94d.roa (raw, json)
Hash identifier: 9BkrhgfHqOhkc1gcleCpy86zSRCWY11gFrz1w7gE2z4=
Subject key identifier: 6A:61:D7:8A:3A:4C:0A:06:25:85:21:6B:7F:3A:7A:95:10:D7:A4:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F27313ECF19736A19F4B48F49A77B26433826E7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
Signing time: Sun 19 Oct 2025 07:00:11 +0000
ROA not before: Sun 19 Oct 2025 07:00:11 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:27:31:3e:cf:19:73:6a:19:f4:b4:8f:49:a7:7b:26:43:38:26:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 19 07:00:11 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=c4361556570301291140c4917e138fe73cfb9d3a22f6b4fcbdb5fc68133e66c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:63:df:aa:6b:06:d5:b4:e6:64:2e:1c:db:
8d:20:fd:59:80:b7:af:a6:e1:bb:d6:5e:35:3d:76:
9f:e1:0d:1d:bf:58:c7:e8:4d:75:77:ff:80:ba:ea:
75:51:4a:e8:a5:c7:ea:61:a1:c7:1f:4e:12:4c:98:
86:5b:83:df:e7:a4:44:b8:f8:09:b1:ef:d9:07:8b:
2d:37:3f:84:ea:2c:5c:62:fc:f9:50:70:11:ca:28:
61:5e:e8:ca:9a:40:40:aa:17:b3:c0:72:ee:9a:8d:
1a:4f:bf:6c:af:d9:a4:c8:85:df:fa:bf:6e:7c:3a:
5e:90:81:71:48:66:74:53:ba:d2:07:7b:38:93:05:
ec:46:5f:2d:92:f6:d6:b7:31:4a:c3:f0:19:7a:1e:
d9:2f:0b:b7:24:46:86:09:c4:fc:c2:35:f8:a4:ad:
62:fa:bb:48:25:4c:a0:a8:86:64:f1:c8:80:27:f7:
be:df:70:4a:9a:75:b4:0c:e1:3d:52:28:c8:5b:3c:
63:c6:a0:ee:3f:27:f3:89:00:75:9a:bf:12:b0:d3:
a0:9a:5a:61:c5:47:f5:c4:05:44:95:14:86:bf:9e:
6b:ea:8a:3b:63:31:f8:30:0e:4e:63:c0:a7:09:06:
79:76:b8:92:78:db:fe:a5:73:81:db:ec:53:22:16:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:61:D7:8A:3A:4C:0A:06:25:85:21:6B:7F:3A:7A:95:10:D7:A4:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c3736673-707b-4dfc-aca4-88dcbb52a94d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:800::/40
Signature Algorithm: sha256WithRSAEncryption
3e:cc:f0:07:97:e6:59:05:4e:eb:8d:c5:54:2f:03:b6:a4:c9:
4c:c6:77:c1:e4:b6:b5:d2:ee:46:66:0b:fc:d0:e9:87:51:c7:
e7:71:44:cb:37:65:47:5c:c0:dc:be:06:50:5e:09:80:85:10:
f2:16:63:48:56:df:3a:bd:37:17:af:3d:6a:47:cc:64:38:d3:
5a:5f:3a:b1:60:3f:ab:74:5e:dc:15:b0:3f:7c:8c:a0:87:c7:
89:79:8f:82:30:66:cb:a5:c6:e4:38:83:36:02:e1:c5:41:6b:
d9:47:5e:82:4d:71:0f:ea:0a:b0:fd:ce:85:17:6f:8b:1d:ed:
20:26:9c:a9:af:57:21:f6:05:5a:8d:64:52:35:b7:33:8f:b6:
92:fb:76:3d:18:07:eb:d5:a6:3d:ad:87:13:78:b8:1c:e5:03:
58:62:09:e0:d3:82:eb:b6:5c:85:e2:55:d3:14:4c:76:f1:e8:
43:75:a4:1c:1a:4e:f3:4b:29:77:1d:60:7e:bb:a3:eb:5a:cc:
35:53:9e:65:a2:44:4e:e7:97:7f:44:b8:77:5b:1b:93:21:84:
f2:a3:1d:80:78:04:41:dc:d9:50:bb:b8:7a:28:ff:80:46:7e:
dc:62:96:81:d0:a1:67:60:f4:c6:b5:5e:e5:15:b1:45:59:c3:
53:da:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:09 2025 by rpki-client