Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa
File: dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa (raw, json)
Hash identifier: jcUVc3flJM55agOoefYo+6lwQOoaL+AWAXfzU/WKVOA=
Subject key identifier: 85:17:F0:A4:AF:BC:D9:E3:FB:F6:40:E4:E1:3A:3D:FA:EB:6D:0F:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76F134EFE40F287C66F7F9520471B5EDC2118DA0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa
Signing time: Mon 29 Sep 2025 15:24:15 +0000
ROA not before: Mon 29 Sep 2025 15:24:15 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f1:34:ef:e4:0f:28:7c:66:f7:f9:52:04:71:b5:ed:c2:11:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:15 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=e41361741b47fa9181a423af87d350963a95d2cf6d9726af50408f42f42aef71, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:e4:e0:49:b1:18:a7:0c:7c:33:43:03:99:
c1:60:8e:fe:b4:4d:8d:32:60:3a:36:c2:89:02:96:
bb:3b:48:04:20:30:97:8f:84:b1:de:af:4a:ab:c3:
a7:01:bf:52:8a:61:38:5c:f4:fb:66:4f:26:0b:64:
10:3c:93:40:2c:17:bd:25:51:f4:c0:54:17:f0:83:
70:89:76:91:ef:61:df:a5:0f:a2:85:8a:24:43:0b:
0c:ed:bf:cb:2a:4e:94:b3:59:66:42:90:52:03:41:
01:a3:a6:79:fa:04:5c:91:48:11:ed:a4:d4:f9:95:
5c:b1:32:e9:97:10:1a:fc:ad:f3:bb:b6:2a:2e:94:
ad:5e:ad:ac:4c:21:43:02:a1:ad:11:09:16:65:f1:
a8:00:e4:c3:4c:b4:fd:da:18:11:9f:8e:79:29:ec:
ca:cf:27:22:40:ad:7e:c0:2e:46:08:c1:bc:04:69:
76:74:cb:e6:07:ad:d5:b4:51:4b:67:06:e8:22:64:
ab:67:80:f8:b3:e2:c5:0a:b9:ae:7d:4c:76:96:b0:
ea:f2:a9:08:36:3d:7c:e4:2a:f4:1a:2a:21:74:30:
70:50:f9:ad:b1:e8:be:17:70:ef:2e:9c:33:ea:04:
9b:b5:19:83:94:f8:c4:32:6d:4a:8c:a9:b3:d6:1b:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:F0:A4:AF:BC:D9:E3:FB:F6:40:E4:E1:3A:3D:FA:EB:6D:0F:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dba2c5ec-b39c-4ba8-b607-71348e3be0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6080::/46
Signature Algorithm: sha256WithRSAEncryption
4e:d5:06:0f:97:ce:45:50:a0:fe:ac:29:f4:9e:6b:0e:56:ba:
67:d6:f8:cc:f5:5d:f2:27:fa:5c:2c:dd:b4:13:f5:e5:64:f4:
c5:43:ac:ee:9d:14:09:ad:28:fc:16:24:63:7c:16:56:05:1d:
bd:3a:e3:11:e9:18:1c:d0:72:3f:81:3c:6e:9e:16:e2:1c:61:
dc:9e:dc:b9:4e:91:cb:43:f4:be:4f:27:b1:15:4d:66:4d:75:
b4:5b:5c:f0:9f:83:c7:eb:f1:73:0b:1c:04:8e:b2:19:aa:df:
24:73:23:14:40:a6:e3:99:db:20:ed:bc:be:02:74:99:56:ae:
60:53:ef:af:23:73:83:b0:20:aa:5e:0d:8c:0c:b3:e9:88:46:
d3:53:f3:b1:f1:39:9d:fa:f7:e3:4f:48:11:43:0f:4f:fa:61:
3e:46:71:00:b1:e7:a5:9a:4a:43:0a:dc:90:ea:06:d6:78:33:
67:88:0f:62:20:84:af:a5:09:0f:01:57:c6:cc:08:4c:06:ed:
48:42:8d:fd:6b:39:79:16:c1:6c:0f:29:d2:c1:29:c1:f8:1c:
c9:9f:d8:8e:9e:3f:c8:19:9a:8e:db:56:cd:9e:48:0e:d0:73:
b1:f8:d2:ac:53:46:57:27:57:84:3f:f2:ab:a0:aa:06:52:83:
90:ae:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:33 2025 by rpki-client