Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
File: da60d3f0-c039-4ca6-acc9-9f7139145100.roa (raw, json)
Hash identifier: DOlYSEL/nJ5wrqd0k1dpqFvGWDOm1V3KYkHnqRVdBRo=
Subject key identifier: 85:9C:F4:82:97:F6:25:B9:E9:7D:B1:AE:C4:D9:F9:13:C2:6A:9D:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62CA4FB6D54A62DF3B25E97D3A254C1A93BBC9F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
Signing time: Mon 29 Sep 2025 15:24:34 +0000
ROA not before: Mon 29 Sep 2025 15:24:34 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ca:4f:b6:d5:4a:62:df:3b:25:e9:7d:3a:25:4c:1a:93:bb:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:34 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=5d1d7e77984dcdcb51c146aa7f917cde567f4574228979994823c839b1d4abb3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:6c:46:09:93:b3:4d:84:53:66:52:54:0f:
d8:83:25:5e:ea:b3:8e:fd:f5:e0:78:31:c3:ed:cc:
bb:4b:7b:77:94:7c:ef:fc:a8:d4:1d:39:d9:3a:48:
e8:32:21:77:22:38:5c:4e:8f:e3:48:45:e4:6c:5d:
7b:d2:1c:2f:e0:f7:8d:10:2b:76:be:d1:b9:6d:20:
46:30:ee:89:e3:0c:57:65:5b:be:f8:38:22:40:65:
24:11:77:c5:98:a2:e7:e9:53:9e:68:7d:60:94:30:
c8:62:7e:4f:00:14:cb:52:63:f8:7c:0e:76:cf:a3:
23:26:7e:58:07:b4:88:be:22:7f:34:1b:9f:a5:d9:
a1:b5:3d:d3:d8:5d:88:5e:b9:e4:10:c8:a3:db:55:
79:ce:a0:82:f8:73:01:9e:23:0a:46:40:bc:7c:13:
e2:37:ae:93:e2:42:57:50:92:62:1e:50:e3:15:96:
14:02:c5:3b:bf:96:52:09:1a:41:57:96:db:a8:c2:
ed:56:4d:c5:cc:c7:b5:36:7a:9f:e9:67:5c:9f:a8:
c7:e6:46:11:7c:18:cc:48:2c:ca:0f:3a:8f:0c:fd:
39:11:dd:f6:a8:cf:70:7b:73:33:fd:0b:86:40:bb:
96:6d:d7:54:c9:82:09:4e:bc:45:eb:2c:db:34:01:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:F4:82:97:F6:25:B9:E9:7D:B1:AE:C4:D9:F9:13:C2:6A:9D:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8080::/46
Signature Algorithm: sha256WithRSAEncryption
55:e5:98:9b:58:ec:ed:e4:e8:2e:7c:2a:7b:4f:85:d5:af:5e:
54:e8:56:cb:3f:ab:f5:e2:4f:b3:29:b7:99:de:64:1f:d4:c5:
ec:73:8a:ed:62:ba:44:9b:f8:ce:87:ce:d4:09:51:ba:b7:87:
55:56:fb:54:8b:13:96:08:d3:41:33:6d:80:81:df:e7:a4:31:
ea:b2:45:57:07:01:3d:bb:65:5d:59:53:41:c2:0b:ed:7c:af:
ac:da:af:2c:7b:22:bd:fc:94:db:eb:3f:ad:93:53:31:95:89:
55:0f:d3:a3:0c:b1:a4:37:4e:f1:a4:b3:85:f1:39:04:12:1a:
00:6a:60:9a:10:32:e8:d2:4e:5b:25:78:c9:ab:9b:5d:aa:6c:
ef:ca:2f:05:7b:8b:d5:d7:00:a3:6b:c4:c8:0f:32:ad:3e:7d:
82:b9:91:24:a3:e3:b7:f9:97:9d:85:65:74:7b:97:03:0d:a4:
cb:c4:df:7f:3a:be:bf:51:21:76:a9:7a:d2:a9:84:33:a0:17:
af:cc:5e:14:1b:f6:c8:27:2a:45:8c:4d:f6:4b:ef:b4:fc:8b:
af:9e:5f:80:25:89:e2:1d:cd:ef:25:f3:7d:66:ed:c6:a3:db:
de:ca:1e:99:b7:aa:80:23:3c:af:d5:79:3d:39:2d:6a:fc:32:
b8:6e:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:27 2025 by rpki-client