Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcc3cfe9-f8c1-4dcb-aabe-e428218ce509.roa
File: dcc3cfe9-f8c1-4dcb-aabe-e428218ce509.roa (raw, json)
Hash identifier: JAJ0RXyDhZZDZZNU8yT6Z5DGEjqp7AX7KKEWNvzBGVQ=
Subject key identifier: B8:E8:2A:C7:BE:93:38:15:A8:1B:D2:BA:99:C2:EF:B7:A0:C3:FA:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2234981669133418DFC02E70FF4CE8B05833C49D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcc3cfe9-f8c1-4dcb-aabe-e428218ce509.roa
Signing time: Mon 06 Oct 2025 17:51:01 +0000
ROA not before: Mon 06 Oct 2025 17:51:01 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:34:98:16:69:13:34:18:df:c0:2e:70:ff:4c:e8:b0:58:33:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:51:01 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=fdf883c76561624692cbc119cd49b1702fe540e1b1d0708f0c1ed27ee3f02aaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:33:49:85:33:0b:c9:6b:f8:66:56:e5:e6:
b7:51:26:f7:ee:a7:96:67:24:03:f0:47:10:71:7d:
5e:99:0b:e5:04:3a:df:ba:3b:3c:8f:5a:ef:86:81:
f3:2d:2e:06:e5:b7:d3:0f:bb:71:4d:42:88:0b:30:
29:e4:ac:08:ee:8f:f9:7f:f3:db:e6:26:f0:8d:33:
a3:1d:65:0d:d8:51:b6:00:64:6b:78:2f:b1:3a:97:
d2:ff:bb:38:91:9b:b8:17:f8:d3:bf:dd:aa:8d:a7:
8f:e0:9c:77:2b:92:30:56:27:16:4d:47:7f:ac:f9:
48:a6:75:c8:62:93:45:1a:2a:42:97:5c:df:a0:54:
6b:4c:26:13:e2:ad:d3:ff:3a:57:49:83:1a:f6:42:
59:6d:bf:91:d2:f3:cc:c8:30:e4:28:37:ed:07:f7:
1c:3e:bc:0f:89:3a:bb:38:34:61:c4:28:08:95:d3:
e7:8f:fe:a6:d0:83:d5:04:1d:d8:3a:3b:6b:a9:ef:
67:cc:a8:7d:0a:44:12:35:0f:08:05:84:94:16:c7:
9f:9d:5e:3b:21:ba:f6:e0:1c:b3:87:de:9a:f9:68:
5b:56:b2:66:a1:19:9b:a9:f9:3e:ca:67:a3:06:5f:
a8:33:d5:df:4b:ba:32:59:78:98:c0:1c:3f:33:17:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:2A:C7:BE:93:38:15:A8:1B:D2:BA:99:C2:EF:B7:A0:C3:FA:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dcc3cfe9-f8c1-4dcb-aabe-e428218ce509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
96:15:c8:37:09:2c:2f:ed:5a:78:89:cc:6f:09:22:73:a9:18:
d7:83:de:13:3b:9b:bb:f1:6f:a9:4c:11:d2:01:b1:5a:f1:f7:
27:55:21:49:68:3c:91:6f:b5:3d:cf:97:4d:c9:37:9a:be:a5:
34:e3:4a:d7:1d:47:ec:85:be:c5:dd:63:65:95:79:c0:bc:44:
0a:ab:d3:7e:45:6c:c3:99:20:0b:19:72:ab:73:18:ee:39:58:
11:da:8a:0f:82:c4:40:9e:32:65:78:31:c7:dc:e7:40:f8:2e:
9e:5e:08:e8:16:03:73:98:b9:30:50:30:78:30:7d:49:69:a3:
16:5d:03:0a:61:d7:7f:ea:8e:09:1d:9f:97:ff:cb:21:b5:f7:
0d:75:29:ff:2f:5d:71:af:00:df:dc:c6:c3:c1:f9:30:c8:9b:
e3:15:cf:e8:82:2e:a8:b9:04:a2:9a:bb:c2:ce:af:59:d1:a4:
82:0b:07:7e:a5:de:cd:fe:23:70:f4:fa:79:75:6e:fc:00:13:
0c:06:fb:a9:78:b0:6c:59:cf:f2:1a:ff:e5:37:50:16:28:f5:
b3:bf:79:44:8a:ec:86:6a:2b:49:61:96:2a:92:af:84:86:bf:
23:3c:fc:72:43:f4:31:bc:98:79:5e:5a:e9:bf:3a:81:d7:f5:
f3:6c:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:30 2025 by rpki-client