Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db8b7ed6-924d-4efb-b525-16915b0868cc.roa
File: db8b7ed6-924d-4efb-b525-16915b0868cc.roa (raw, json)
Hash identifier: u52bBRYj9ixlUfnyPA9DHVhk1Z9mJ92usCjWqt3NtYo=
Subject key identifier: C0:75:31:3A:C3:EB:49:36:57:A9:D3:F3:24:94:87:4D:DC:89:ED:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D725C1A2CDD5BF83AF77AE0DE0AB5668117F719
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db8b7ed6-924d-4efb-b525-16915b0868cc.roa
Signing time: Mon 06 Oct 2025 17:50:13 +0000
ROA not before: Mon 06 Oct 2025 17:50:13 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:72:5c:1a:2c:dd:5b:f8:3a:f7:7a:e0:de:0a:b5:66:81:17:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:13 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=fcd4775fe853313b1e432a94bf0e3be1c25e471442db38fe6b10a2ba750f890c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:35:d1:40:21:ad:91:84:d0:59:5a:80:4b:
1f:b3:c6:79:71:14:d8:8a:64:04:11:48:c1:25:ef:
a7:a0:1f:c6:64:b1:ae:00:96:e3:87:1a:a9:2f:11:
21:38:cd:0d:ff:a6:25:78:26:af:09:d0:34:33:44:
95:69:08:15:ef:0f:fa:85:17:6b:c1:cd:2d:19:15:
4d:04:2d:a0:22:71:9f:49:bf:01:7b:1e:2b:97:e3:
89:ad:40:ae:d5:ed:c9:ac:02:2d:b4:05:d5:b4:9f:
9a:31:73:1e:a4:b1:1b:88:04:8c:5c:e1:95:4a:b9:
44:d9:4d:93:19:db:c5:7c:42:3e:ff:74:4d:bd:fb:
b1:ac:5e:e7:a6:1b:84:42:ad:06:76:05:04:3a:d0:
92:23:64:58:90:48:55:d3:3e:d6:00:ce:56:88:2d:
6d:24:f7:2b:dc:bd:f2:2b:02:56:cc:91:4f:01:9c:
cf:6b:8a:17:89:af:8b:d6:f5:6e:0c:5c:0d:58:b0:
59:42:10:93:9e:b2:7a:68:f0:16:9c:21:e1:d4:65:
35:b0:63:66:87:bc:32:64:2e:29:75:15:e5:c3:42:
39:92:0b:a4:51:d0:30:43:2a:13:dc:18:17:ab:36:
79:99:99:1d:b3:0e:ac:3d:c6:73:3d:1b:fe:80:84:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:31:3A:C3:EB:49:36:57:A9:D3:F3:24:94:87:4D:DC:89:ED:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db8b7ed6-924d-4efb-b525-16915b0868cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:880::/48
Signature Algorithm: sha256WithRSAEncryption
74:3f:ce:e5:d1:27:df:9d:95:61:7d:3e:a1:3b:0a:37:bf:e0:
a4:c9:5d:35:5b:b5:da:db:63:e9:12:1b:8d:49:7c:80:1d:91:
2b:e0:d1:4f:3c:f2:5f:bf:48:9c:4c:e8:d5:20:87:d5:9b:66:
04:00:44:1d:11:cd:2d:8f:7e:c3:1c:2f:7d:92:09:c2:57:76:
b7:81:da:37:fa:f4:80:5b:3f:49:fb:97:80:93:bc:69:7f:80:
91:5b:d7:18:59:91:b0:f4:94:83:40:fa:02:ef:a1:64:b3:d8:
aa:b1:13:b0:65:20:60:57:e1:9a:93:e7:f9:fb:0c:c3:02:01:
c4:c3:32:1d:a8:11:ad:5c:68:a6:6f:37:16:fe:1b:3b:f8:09:
8f:22:2b:53:59:ea:95:3e:29:0d:30:78:5a:40:62:4d:9d:ca:
d7:57:6f:76:4b:46:e4:98:03:ed:2d:06:a3:3a:53:49:b2:ae:
61:f8:8d:15:0d:a3:72:43:91:bd:04:d2:17:97:47:1f:0c:2b:
9d:a3:eb:9c:d9:16:dc:52:eb:06:b2:62:88:aa:34:90:21:cf:
61:95:0f:e3:a4:e2:ff:dd:32:3a:d9:2c:cd:3b:b0:43:21:44:
bb:f9:3b:a8:02:49:57:0a:be:46:9e:ea:2a:d6:c0:90:99:e9:
f2:39:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:31 2025 by rpki-client