Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d518671d-f4fb-4214-94c2-f2f77dfa9227.roa
File: d518671d-f4fb-4214-94c2-f2f77dfa9227.roa (raw, json)
Hash identifier: DxSXm9jlKtoV6EWMoTIrgdCaotS8HztKG9ZgoBGeRbw=
Subject key identifier: DA:03:7F:7B:43:76:33:8A:AD:88:E3:60:FB:F5:9B:5C:CA:83:4C:D7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A3ABD0B7B82ED66FC5083A52843918769AEC948
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d518671d-f4fb-4214-94c2-f2f77dfa9227.roa
Signing time: Mon 06 Oct 2025 17:40:09 +0000
ROA not before: Mon 06 Oct 2025 17:40:09 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3a:bd:0b:7b:82:ed:66:fc:50:83:a5:28:43:91:87:69:ae:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:40:09 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=eea860a30fb09efe40867c163da0e646216df2751f6f385ef16ea1b4e70d8691, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:ea:4f:4f:0e:d7:f4:48:b5:fb:3b:e2:bd:
a6:dd:51:29:fe:c8:83:09:ea:64:c7:fe:6a:ea:fa:
46:68:f4:7f:2a:1b:17:66:9a:b4:58:f0:a5:41:8f:
1a:74:3f:ce:84:fd:43:06:e9:62:75:6b:9d:59:bd:
f5:92:2a:b4:70:3c:ae:ae:8e:0b:d8:89:04:18:7a:
9b:af:8f:18:05:3d:b5:09:3e:09:07:f4:7f:75:53:
f5:34:96:6c:b9:50:8c:57:72:3f:ee:85:e4:d5:88:
58:49:d8:51:97:6b:20:28:31:f9:54:e8:34:82:e7:
ff:45:3a:d7:dc:9a:39:67:e3:93:a6:30:6f:e2:7e:
07:dc:bf:30:dd:bf:07:51:78:79:51:75:60:34:c3:
d8:48:ad:70:74:ea:00:03:06:34:c2:7d:64:3a:f8:
40:49:fc:ab:21:3c:c0:0d:b7:b7:f6:9c:36:bd:f3:
b4:9d:68:12:57:fb:df:f8:20:76:8d:58:53:8c:29:
75:f5:5a:36:c1:c3:ff:fc:50:01:84:a2:66:fb:22:
b3:cc:1c:39:c7:2a:46:ff:a2:e1:08:75:11:ae:6f:
ed:19:6c:8b:b0:58:37:0d:fd:1c:db:bb:83:29:6b:
e2:b2:db:84:22:ee:0f:9a:37:a6:be:12:04:10:8a:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:7F:7B:43:76:33:8A:AD:88:E3:60:FB:F5:9B:5C:CA:83:4C:D7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d518671d-f4fb-4214-94c2-f2f77dfa9227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5040::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a4:d5:08:0e:3e:03:1a:aa:c4:bf:f1:82:e7:55:59:70:5b:
62:4f:2f:45:f1:73:f6:8c:11:f2:7f:db:31:92:09:96:df:f1:
c0:6e:39:9b:0f:9f:a1:8a:1b:be:d2:fb:9a:d9:6d:11:8e:ba:
6c:f7:49:93:1c:b8:49:9b:6a:ec:9d:19:a7:48:26:d3:3f:30:
96:af:00:e7:00:12:b4:e0:94:04:f7:19:ae:59:64:7d:c4:56:
4e:d1:d8:d2:e5:2f:74:86:a1:08:f7:6c:6f:88:86:84:d4:07:
b0:10:48:14:c3:82:0f:a3:c5:2f:2f:23:4b:8c:3d:37:00:b0:
b3:10:55:11:f2:c6:65:01:98:6f:ba:a9:26:00:5c:85:3d:eb:
e2:f1:2e:d3:cf:3a:47:97:47:24:e7:4e:eb:3d:08:65:1f:f3:
a5:83:82:9b:61:75:9d:9d:ca:5f:89:2a:9f:fb:86:71:03:9e:
8a:28:a4:6b:63:75:2a:f9:c0:e0:53:d0:35:85:13:8b:88:b4:
94:aa:0a:3d:1a:f8:06:7e:fb:ee:a4:fa:b1:5e:d1:35:d2:0a:
1e:95:66:91:f6:69:ab:88:fa:9e:47:da:46:60:53:b2:e8:d6:
33:44:bc:93:2d:e8:88:83:76:0b:69:31:f6:8b:d5:c1:b4:6d:
1f:e1:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:32 2025 by rpki-client