Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json)
Hash identifier: L/EHO/8VS5hjVw0AEOeNdSV5MDCLUAM3bJqY/C94Wg8=
Subject key identifier: 52:88:D9:8A:55:0F:B5:38:14:01:51:F6:99:78:4A:27:E5:7B:08:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 138320E75831A5308027379E5EABBB1E1F749480
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
Signing time: Fri 26 Sep 2025 19:20:13 +0000
ROA not before: Fri 26 Sep 2025 19:20:13 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:83:20:e7:58:31:a5:30:80:27:37:9e:5e:ab:bb:1e:1f:74:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:20:13 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=22f9673652431d95539592a35f8144da62c20047f6659c4de86d8c1f23916aed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:c5:98:18:27:f2:a8:67:08:d7:2a:37:b6:
af:71:77:26:8f:b3:ea:b5:17:90:2c:ec:c4:28:5a:
90:c9:12:41:1d:ec:87:af:33:6e:ca:94:76:88:bb:
78:8c:91:c9:23:3e:ba:bc:67:5a:36:03:cc:61:ae:
bc:97:69:ab:cb:e1:58:85:49:8b:6a:98:4b:d3:e4:
1e:b7:6f:9f:45:5d:d2:11:78:24:70:45:c6:ce:68:
4e:6a:66:87:cf:80:33:55:08:e7:61:aa:ee:0f:12:
e7:9d:ab:98:73:e9:5f:2a:9c:cb:24:fa:60:6f:24:
85:97:93:99:a4:83:6f:61:25:75:ff:be:a2:ac:45:
90:6b:85:20:21:e0:79:36:e0:2e:53:ec:1e:f1:fe:
ff:9b:30:67:cb:fd:eb:4d:f8:50:9d:b2:6c:6c:4a:
0b:b9:5c:87:46:c7:42:68:05:59:bf:42:d0:43:d9:
7f:9f:00:0a:f2:dc:4a:83:c0:d9:3a:5b:17:1f:59:
65:86:cb:a7:5b:08:04:78:cd:23:c5:46:a1:26:8a:
eb:37:d8:5a:5c:1d:90:4c:17:d1:54:ba:72:1d:67:
5f:61:63:a1:15:ab:5e:41:61:23:82:cb:d5:ca:53:
27:04:61:c8:31:07:16:f5:3f:e9:b2:76:41:09:de:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:D9:8A:55:0F:B5:38:14:01:51:F6:99:78:4A:27:E5:7B:08:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
42:15:c0:db:ff:4b:25:ca:77:9e:8d:c3:e0:9c:b1:0f:a5:92:
0b:54:74:50:42:8d:33:88:14:27:a2:0f:49:7a:4c:34:d4:9d:
fa:d8:af:d8:b4:c8:23:7b:51:4e:5a:7c:60:04:0a:7e:0a:dd:
6f:51:27:29:df:1b:1e:a4:f1:cc:5c:57:a8:6e:67:98:ff:5f:
68:b4:e8:b5:00:b0:23:43:c1:2f:95:eb:88:dc:a2:09:40:25:
50:ca:28:3b:2d:6d:2a:ee:f9:01:22:92:e6:cc:01:bd:e8:c6:
f2:73:3a:ba:fa:83:1b:63:f2:c0:9d:dd:60:1c:2c:b8:77:d5:
b2:c3:8a:88:ab:00:2a:24:4c:58:03:23:d0:72:47:11:25:87:
23:73:86:3b:5b:c8:26:1d:9b:90:bf:39:b5:f0:2e:2d:6f:8f:
da:76:a2:04:ea:21:d2:b6:f8:8b:17:78:92:ef:6c:eb:6e:35:
93:0c:96:36:70:3c:2d:82:f5:46:8b:c5:2d:8d:72:d8:6a:b1:
2f:07:06:6f:6f:a4:62:98:29:87:b0:a7:61:4b:d2:4e:3e:f2:
36:d3:c0:66:80:3e:33:e5:f9:1b:4b:dc:e9:60:02:1e:b0:a6:
ec:01:8f:73:bf:84:77:3f:f4:8e:22:a5:4f:e6:d4:ab:e5:d6:
40:66:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:39 2025 by rpki-client