Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa
File: f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa (raw, json)
Hash identifier: N1SWGSPiZAebP/NnDLKUuzijviGEX72857AZ+cGqoW0=
Subject key identifier: D9:8A:1E:93:5C:92:E2:A5:E6:F7:00:F3:36:8A:AE:E4:6F:7B:83:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DDA879DFB761AB04340EACC4D84360DC69055A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa
Signing time: Sun 19 Oct 2025 23:50:10 +0000
ROA not before: Sun 19 Oct 2025 23:50:10 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:da:87:9d:fb:76:1a:b0:43:40:ea:cc:4d:84:36:0d:c6:90:55:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 19 23:50:10 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=a31987c15b0160d9c1e8134b1481174dd11d21c58053ab7e0cd028f2af687af2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:70:8d:65:7e:d7:6d:39:85:3a:f4:81:85:
1c:c7:13:79:6a:3d:52:bc:9d:66:f3:00:2f:39:b9:
49:56:92:f1:2d:4b:90:11:40:12:9b:b3:f0:a9:fe:
7c:c2:91:3c:a7:fd:2e:b6:f7:8d:81:8c:b4:a1:43:
23:b6:6f:44:76:e4:87:02:b8:e6:93:dd:c2:79:d6:
7b:57:92:9a:42:6e:4b:ca:7f:e3:82:48:09:bf:52:
b3:94:43:43:d3:06:4d:5b:6c:e3:de:eb:2f:2a:08:
cc:ef:3a:70:14:a6:11:74:b6:f3:52:1c:dd:dc:b5:
e9:f7:a8:e0:5b:c6:d0:a8:09:35:38:cc:3f:74:d1:
66:0e:59:47:e3:1f:7c:51:ab:87:0f:2b:cb:6e:0a:
52:40:2a:94:9c:53:2c:cc:65:dd:17:8a:4f:fe:45:
28:2b:a6:07:de:c0:c9:03:ae:ca:a3:4f:66:a5:00:
43:ea:34:95:83:20:81:80:32:74:ee:f7:67:03:16:
1c:d3:94:54:f4:0b:a4:ec:05:29:af:21:0d:6a:b7:
f7:40:37:3b:77:88:37:4f:cf:73:49:83:d5:06:ba:
49:3c:12:2c:cc:4d:77:49:fe:98:b7:a6:47:90:5e:
77:20:97:fb:34:30:65:c5:23:0d:31:7a:b6:2c:c6:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:1E:93:5C:92:E2:A5:E6:F7:00:F3:36:8A:AE:E4:6F:7B:83:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f231f7ae-7dbf-4dbb-8f7a-91b4103218aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c0:a5:36:90:63:4d:ab:ae:64:12:29:2b:53:d5:10:a1:dd:
4d:0b:c0:0b:68:8c:67:01:62:85:f0:03:c5:85:34:3a:da:ac:
f1:03:63:4e:cd:e1:f3:a2:5a:b1:1b:4b:f7:82:13:dd:b4:a8:
bf:a2:32:68:f6:49:3d:05:36:ea:72:ef:6b:f3:dc:5a:27:1d:
5b:bb:25:56:40:33:42:08:43:a4:fe:c8:92:1b:0f:8a:c9:ff:
f5:8c:d5:1b:ef:a0:a3:74:3d:4e:ae:0c:a9:8b:57:46:94:17:
2a:81:5a:2a:15:d6:70:df:27:75:88:1a:34:16:70:04:3a:98:
64:91:65:3e:6f:45:05:d9:62:c8:34:4e:e3:3c:94:3b:4d:dc:
0a:89:71:c2:c7:1d:0e:76:d4:af:c3:1c:4a:ab:de:8f:09:5d:
33:7e:89:7e:29:c8:34:70:7e:93:0b:0d:09:13:a6:8c:d8:e9:
3d:d3:fd:5d:6b:f6:56:aa:7b:bf:aa:a0:8a:b2:9e:4e:9a:51:
99:87:a2:b3:8d:2c:3f:bb:dc:b6:3d:6a:11:62:cc:1f:c8:f0:
c7:d4:9e:3c:12:4d:ea:bf:c0:fb:af:e3:41:cc:36:63:e4:5a:
e4:42:72:d7:d2:76:25:cc:74:7e:81:08:b8:f8:8a:78:f0:0d:
5e:1d:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:21 2025 by rpki-client