Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
File: ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa (raw, json)
Hash identifier: zNqgmeyMyKr4Y3+jLtSm9F8pSTDhiCffx1OlFYJ5ahU=
Subject key identifier: 13:D8:31:C4:06:08:2E:C3:61:FC:74:D1:59:E0:21:4B:CE:27:F3:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15CD90ABCF7905CE6D838CC9D072ED54A1B460B2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
Signing time: Fri 26 Sep 2025 19:38:40 +0000
ROA not before: Fri 26 Sep 2025 19:38:40 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:cd:90:ab:cf:79:05:ce:6d:83:8c:c9:d0:72:ed:54:a1:b4:60:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:38:40 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=34c158b66fa847eb94f31068b9e64cafd3089d51d1c4b979298a04d2af80d495, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:9c:be:73:fd:d1:87:48:1e:20:1f:7c:85:
f6:ee:6b:c9:1e:ff:81:d3:65:e7:22:a7:bf:bb:46:
e7:0e:39:03:fe:80:b7:e5:72:cb:04:63:b5:bc:28:
4b:45:1c:71:23:87:ce:48:bb:53:4c:8c:91:5e:6f:
40:7d:36:c3:44:7b:48:f3:5f:dc:bd:ea:e4:fd:78:
fc:7f:1f:ed:6a:8f:c5:20:6a:f8:94:49:9d:8f:bc:
60:4a:3f:08:c2:27:ab:9e:ef:30:16:1c:09:86:93:
04:f0:31:b7:e6:d2:8b:09:e8:cb:4f:f4:7c:af:32:
9f:b3:8c:4e:b6:f0:ac:9d:e1:4e:e6:b1:a9:37:4a:
6e:6c:3f:0e:b4:de:b0:3b:e6:ca:35:0b:2c:9f:c3:
97:be:77:a9:d6:82:79:3c:a2:d4:88:82:9a:0c:7c:
3b:af:63:f6:cb:d0:c3:cb:7c:4f:b6:0e:99:08:5d:
d2:0c:b2:18:71:88:74:bd:da:bd:26:7c:ea:e0:43:
c5:bf:b0:62:71:b0:95:bf:11:b4:01:16:3b:cc:23:
8e:bc:46:2d:19:1b:a8:ea:b8:12:82:43:68:62:04:
c1:6b:10:ec:a4:ad:43:d5:c5:f4:32:76:0d:d7:34:
76:ae:5b:e1:eb:8f:97:bd:a3:c8:a4:93:38:40:f5:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D8:31:C4:06:08:2E:C3:61:FC:74:D1:59:E0:21:4B:CE:27:F3:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:a000::/40
Signature Algorithm: sha256WithRSAEncryption
71:2a:9d:f9:e2:71:b0:ae:9b:ba:1f:01:61:43:55:13:66:ab:
a1:59:91:67:b3:ce:a4:62:de:e7:42:6a:62:03:cb:22:eb:f8:
f8:80:91:bb:3e:ac:54:a9:fd:70:4d:73:c3:e7:00:b3:94:44:
07:52:92:20:6f:81:be:66:34:2c:27:8c:f3:ff:fa:e4:30:0a:
78:8a:5c:6f:c3:a7:a7:88:af:a5:44:f7:48:9b:6c:59:be:78:
db:2d:ef:56:4e:b6:cf:ee:3a:2e:d4:4b:ab:81:97:85:b7:c9:
39:41:fb:21:96:87:68:46:b5:62:dc:69:a8:18:3c:ca:50:ec:
76:cc:d6:ad:8a:b2:d6:1d:43:91:c4:8d:5d:0b:dd:f3:97:82:
d6:a5:7a:92:d7:d4:de:be:27:f9:74:d6:74:07:d9:4d:6f:fe:
cc:8e:33:8a:90:ba:30:d8:65:f6:d6:db:27:37:08:ce:6b:86:
f6:fc:b2:ac:d8:4a:83:5e:10:24:06:6f:2f:60:4f:e8:b6:ee:
75:0a:53:65:59:e9:10:72:be:57:98:b4:94:3b:cb:47:9b:3e:
0b:2e:50:58:4a:c9:77:33:d0:40:9b:68:9a:55:84:09:66:9b:
68:4f:4b:d2:3c:9b:c5:7c:58:89:c8:f8:bf:c3:78:d2:0f:81:
c0:51:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:10 2025 by rpki-client