Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File: d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier: hRZinCoNxRZrTu/lgdD/trxYHRpL63tjo6psdjX7svM=
Subject key identifier: E2:A5:66:FF:95:86:13:22:29:F9:5E:A6:CF:ED:14:CD:66:20:2A:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1ED3B100F014050EA3CB9309F23E46DE2DEFE8E1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time: Fri 26 Sep 2025 19:00:09 +0000
ROA not before: Fri 26 Sep 2025 19:00:09 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d3:b1:00:f0:14:05:0e:a3:cb:93:09:f2:3e:46:de:2d:ef:e8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:00:09 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=69abe9f1cc573e96815cc8ef15c3ac6252ba54c14cc12bc3f9cf0b7e71849127, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:07:0f:8c:6c:f2:bf:0a:8e:11:9c:0a:5b:
36:3a:1f:82:9b:fc:1b:b0:03:b2:11:cc:18:f4:61:
eb:b3:ff:14:9d:27:9a:03:19:5e:3c:6f:a0:40:e9:
26:d8:67:6d:2a:b6:e9:d9:de:d4:22:bf:85:e7:6b:
34:f2:14:ab:7d:54:a9:7d:2f:be:0e:12:fe:d8:be:
9a:60:9e:12:cc:d9:43:c7:33:d1:f8:f4:2d:35:00:
6a:3a:93:6b:a3:ba:09:be:f0:97:2c:9f:65:bd:2d:
8e:b6:65:4b:c2:b9:c8:87:10:ce:56:6f:89:cb:c2:
d8:25:3b:d1:5c:c4:77:a0:7a:d8:fe:75:92:d2:bc:
75:f9:b4:29:c8:2c:ed:a9:0b:ed:c7:10:b8:b4:ee:
94:26:1f:be:92:15:68:21:41:c4:9d:5d:1b:0e:9d:
a9:bf:da:bc:4e:3d:72:07:b4:dc:b6:8f:32:08:ae:
53:01:1e:8c:18:b3:70:21:61:32:00:93:d1:88:37:
ff:9c:3c:b5:57:d0:86:90:49:ac:db:85:fd:44:17:
e1:a4:2d:72:68:69:e4:00:f4:75:06:05:a5:0b:84:
11:b0:36:d2:a0:56:7b:f0:03:68:a0:40:54:37:51:
7b:38:59:38:d6:6b:a7:ef:cd:cd:d2:01:6a:48:02:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:66:FF:95:86:13:22:29:F9:5E:A6:CF:ED:14:CD:66:20:2A:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c080::/48
Signature Algorithm: sha256WithRSAEncryption
af:af:67:64:47:4f:0e:4e:a5:6c:25:32:86:33:e8:2a:ce:57:
86:57:05:ec:79:48:2f:29:8b:58:76:59:f0:b2:e9:ba:29:52:
a8:bd:c3:26:c2:87:64:3a:1b:f3:12:dd:84:0e:8f:65:59:7f:
3e:e6:b4:b5:3f:14:ec:8f:5e:c4:60:a9:2d:a5:f7:8f:b9:26:
0b:8b:d5:eb:44:6e:04:6b:3c:34:c4:db:5c:ad:2c:be:ad:d0:
99:a9:18:23:a2:3f:c2:d5:be:bf:12:25:5e:5d:a6:a9:5b:3a:
90:6b:e3:b7:6b:ba:41:07:b3:af:3d:00:9d:6f:dd:c8:ba:e7:
0d:de:07:29:93:59:fd:d5:4d:21:ee:5e:0b:6f:15:5f:2f:3a:
64:00:88:15:49:79:cd:8d:af:2e:2c:87:50:21:f0:1c:d8:d2:
d7:6d:d4:85:20:88:07:65:ff:41:a0:e1:e2:84:e3:57:b2:74:
22:96:21:50:2a:bf:97:52:b4:07:77:af:92:c6:55:e4:42:91:
8f:ed:b6:0a:fe:ab:52:06:b6:95:a0:4c:65:df:79:4c:ef:27:
68:fa:94:76:04:54:1c:ea:05:e5:ba:00:fa:49:eb:29:6e:d7:
06:21:f7:0d:0e:68:e8:c3:8f:c4:d6:97:ba:48:ec:05:e4:0b:
b2:74:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:48 2025 by rpki-client