Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
File: e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa (raw, json)
Hash identifier: irCPjTHvYKnHlXeajeo+8tzt7A1RuAmXSXhPc0fFPvE=
Subject key identifier: 5E:3C:D0:63:97:23:5B:57:26:F9:FE:A6:1F:8C:EC:55:CF:ED:79:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 673123A4E340C8ADA5FB9327EC73A6A29F2510DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
Signing time: Mon 13 Oct 2025 17:55:52 +0000
ROA not before: Mon 13 Oct 2025 17:55:52 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:31:23:a4:e3:40:c8:ad:a5:fb:93:27:ec:73:a6:a2:9f:25:10:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 17:55:52 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=d21f55c86b57bbf7fc9f3f373f3a53d1a87e079f01a55c5d162c7cbb5e5cc3d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:e2:b4:5c:7c:8c:b3:3b:02:df:c9:51:bc:
04:e8:53:2a:6d:80:d8:39:33:07:9a:fa:2b:35:80:
86:4a:b9:0b:ce:5d:18:11:68:41:9e:09:e8:28:4c:
05:dd:24:3e:73:2d:ac:de:77:ac:23:c9:6b:42:88:
63:7e:3e:f3:92:16:44:88:b8:98:fa:d8:0d:af:27:
30:ff:b3:e9:5c:ce:6d:df:4d:5a:83:e0:9d:85:cc:
a7:ed:a5:75:ad:54:cd:55:e8:cd:7a:01:c1:cc:38:
7d:53:25:c4:31:f5:33:e9:98:26:91:68:f5:02:96:
34:49:be:0a:ed:18:19:7a:ca:47:ac:b0:ca:19:14:
3a:22:e8:da:ff:8c:23:7d:a6:13:f6:98:d1:fa:4a:
ee:87:ab:1b:5e:ba:b6:fe:06:10:3a:3b:b3:95:bb:
b1:4c:34:94:96:06:56:f0:2f:de:67:d4:99:2c:d0:
e8:8f:37:03:f5:58:a7:01:a3:2c:3a:70:45:72:e4:
bf:63:a4:5d:5d:38:1c:e6:90:12:f5:64:79:56:09:
e8:e9:89:28:42:0b:1b:30:30:6a:43:4e:e1:96:c3:
60:b5:73:38:86:05:6e:25:70:40:58:92:04:d0:d6:
92:f1:fd:9e:7a:85:a8:05:71:c6:5f:29:2c:ed:71:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:D0:63:97:23:5B:57:26:F9:FE:A6:1F:8C:EC:55:CF:ED:79:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9b24ad1-069b-4916-9d33-31ad6937fb2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:6000::/48
Signature Algorithm: sha256WithRSAEncryption
4c:6d:d8:ea:dd:ca:33:f0:3d:40:4d:b5:d7:91:45:e8:85:3c:
a6:03:67:cd:cf:d5:56:21:74:39:88:fe:ca:bb:a1:00:65:b8:
26:db:bf:22:53:6f:8e:f0:dd:76:5a:2d:b0:92:7a:96:ac:41:
df:67:e1:ae:0a:e3:bb:97:98:1f:77:9e:61:82:ba:bc:37:78:
aa:b1:99:d7:f2:df:12:51:6d:19:5d:4f:f6:62:d0:18:cf:18:
e8:ee:f1:dc:ae:90:c2:e2:7c:d8:89:ea:7e:3a:1c:bd:4b:b2:
27:80:bb:0c:0a:0e:c4:93:23:d1:ae:00:77:5b:d3:b3:68:4f:
80:af:d1:41:20:95:03:75:81:35:37:30:7a:29:a4:f8:42:b3:
58:4b:fe:ec:e4:8f:4e:eb:18:38:ec:b6:1f:4e:c4:87:9c:41:
7e:56:b9:f6:3c:41:4b:57:55:bc:7d:24:cf:14:de:2c:9d:95:
17:62:dd:7a:b6:8b:27:e1:b6:40:69:b3:86:10:54:70:1f:28:
05:50:aa:08:36:9c:31:f5:29:c5:88:85:e6:99:8a:56:6d:07:
65:16:20:ab:d1:b8:71:4b:93:14:a9:59:38:d8:d7:04:0b:11:
6b:cc:71:77:6f:b5:9e:9b:7e:eb:50:bd:c3:f6:7e:58:73:4d:
06:94:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:42 2025 by rpki-client