Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa
File: d8bdec55-5207-4e20-a65b-ee864a734245.roa (raw, json)
Hash identifier: bq+CSjIDuD8QqJkWWNWLR62wnjLcfukHc5ZTipgMrU0=
Subject key identifier: C6:3D:3A:8B:74:F3:72:57:91:D1:FF:C1:7E:F0:83:84:80:99:58:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C4B5AD9979D86CB87F4F8A0E93814E7AD6260A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa
Signing time: Mon 29 Sep 2025 15:24:34 +0000
ROA not before: Mon 29 Sep 2025 15:24:34 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4b:5a:d9:97:9d:86:cb:87:f4:f8:a0:e9:38:14:e7:ad:62:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:34 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=4f14999518ee53e2b8e1d290707138af70d3559b692707dfadb4ae8a16ccb7f3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:fb:d5:51:61:80:2b:59:e2:71:16:b0:9d:
5f:36:89:54:18:46:0d:8a:a8:7e:eb:ad:b3:6b:1e:
10:5f:18:0c:05:ca:1e:67:d9:85:18:86:5e:a8:bc:
9c:d1:fb:51:9c:c9:66:f7:b8:c0:c7:05:d8:86:42:
5e:c1:81:8d:a9:39:02:1a:cd:d6:ca:1e:ba:20:85:
2f:34:be:7d:90:8b:54:f4:15:6b:36:b1:71:a8:70:
70:ce:20:69:bb:e4:e3:fb:a9:4d:6f:9a:b6:23:4a:
dc:da:16:72:8a:bd:2b:37:04:04:26:99:d3:48:66:
f3:74:24:5f:2f:b3:7f:aa:6f:0d:1f:47:e9:90:c7:
06:7c:93:d1:6b:b6:43:b8:15:a1:b1:99:b1:18:6c:
58:11:01:4f:eb:aa:ed:9f:f5:8c:c7:dc:9e:bc:40:
e8:0d:65:48:24:3d:b3:70:9f:5f:c0:8d:86:20:58:
7a:89:7a:5d:a1:ac:1e:eb:9c:97:6e:b7:84:ec:9f:
22:0b:5b:1b:6a:f1:1f:e6:10:b3:83:78:da:4f:5e:
f1:bc:39:84:23:c3:53:0c:11:dd:d1:4a:9b:91:34:
f7:cb:e0:ef:18:a9:6c:60:5f:3c:02:61:bb:df:25:
af:fc:33:10:04:5d:40:a7:bc:60:28:53:37:8d:45:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:3A:8B:74:F3:72:57:91:D1:FF:C1:7E:F0:83:84:80:99:58:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8bdec55-5207-4e20-a65b-ee864a734245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8080::/46
Signature Algorithm: sha256WithRSAEncryption
7a:ab:cc:9f:4a:73:d6:59:28:bd:8b:d0:15:fc:04:d7:64:be:
12:f5:c6:b7:d7:39:54:03:3c:e2:47:05:bb:a7:cb:76:b1:cb:
80:c5:ed:ec:2a:20:9b:5c:0f:81:2c:3c:26:90:e4:01:39:d9:
79:fd:06:5f:f0:27:34:5c:62:d0:51:f6:41:24:a6:3d:19:d1:
69:4a:14:ea:cd:7c:fd:ee:ef:34:bf:fd:68:e7:7f:54:26:17:
29:f2:e7:85:52:60:c8:c2:1e:6d:f8:36:fd:0a:81:62:58:4a:
13:c8:2a:f6:7d:07:be:37:93:e5:14:e3:ac:4f:b3:9d:48:0b:
3f:ad:8a:74:4f:58:f5:ea:14:91:27:e1:99:fa:14:8f:6c:d3:
32:51:8c:18:c9:6c:f8:24:76:4d:36:e0:65:b2:5c:c7:c8:ec:
c9:00:f5:66:6d:7e:53:97:d6:58:b8:e5:b0:ca:9b:bc:b0:41:
34:77:0a:98:e6:9c:28:03:6c:e8:86:f5:13:14:98:0d:94:39:
22:3f:bd:d9:e1:3b:ff:a2:08:8b:f9:3d:e5:2e:ab:8b:a0:a9:
07:01:a4:38:69:87:16:ed:d4:c7:56:0e:4e:16:32:4f:45:53:
ef:53:37:44:8e:c5:68:44:7c:6a:e7:8e:8a:f1:7f:bf:b6:40:
37:8b:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:33 2025 by rpki-client