Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74742853-5675-46ac-b956-8fe64ff098f9.roa
File: 74742853-5675-46ac-b956-8fe64ff098f9.roa (raw, json)
Hash identifier: Fr84nNW/NUSY98IfFiqk0xQeMA26w0G6pN17NAJFGYA=
Subject key identifier: 84:BD:6D:27:D2:9A:33:9F:87:74:7E:D1:B1:5D:08:7B:62:D8:81:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6ACD18A32409D93A5D9FF48CF6CCED7BB9F0F395
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74742853-5675-46ac-b956-8fe64ff098f9.roa
Signing time: Fri 07 Nov 2025 16:36:41 +0000
ROA not before: Fri 07 Nov 2025 16:36:41 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cd:18:a3:24:09:d9:3a:5d:9f:f4:8c:f6:cc:ed:7b:b9:f0:f3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 7 16:36:41 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=87d4c9acdf5b36ef5da09212e34dd604ee1e31a323857827d246849ba5a042f7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:6b:72:8c:09:5e:49:92:a6:ff:82:df:d3:
d2:44:9f:05:4c:31:07:d2:5c:79:a6:27:c1:24:60:
0c:4e:97:85:bf:3e:44:1e:95:d2:56:01:ad:5b:4c:
49:71:83:57:fd:36:e3:c0:a6:37:c2:45:4a:9f:e2:
52:10:30:5f:c2:27:94:53:da:eb:2a:f9:7e:e3:df:
a2:e6:49:f6:2e:e2:48:de:f1:1d:55:5a:b4:94:0e:
1a:65:36:fe:41:88:49:f9:fe:c6:1a:97:88:1d:0f:
ea:18:25:08:a8:82:5d:ad:e7:1d:fd:2b:96:39:f0:
33:f1:69:d0:cd:59:a6:4e:15:e7:d7:37:38:96:ec:
08:ac:b2:32:c1:3d:0b:54:bf:2a:b8:88:d8:aa:ac:
09:d4:46:26:a7:47:c4:d4:6f:7a:34:7d:e6:21:e9:
f4:a5:2c:96:e6:58:33:41:d6:53:4d:59:2f:8a:26:
28:7d:87:f9:67:ae:e8:97:af:6d:32:16:37:aa:4e:
93:4f:41:bf:6d:00:5e:74:a1:fc:ce:cb:71:58:25:
2e:29:13:33:ce:44:b1:0f:d1:a4:7f:e8:07:9c:07:
ce:89:f9:20:e6:ca:25:15:f4:d0:72:7b:00:ea:8d:
04:e3:2e:1a:31:14:4d:ac:d2:d5:42:2e:79:71:3b:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BD:6D:27:D2:9A:33:9F:87:74:7E:D1:B1:5D:08:7B:62:D8:81:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74742853-5675-46ac-b956-8fe64ff098f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:8000::/36
Signature Algorithm: sha256WithRSAEncryption
b3:f5:ca:b4:c9:ab:7d:95:de:5f:1a:ce:2b:38:d9:a0:61:25:
e2:64:22:41:b0:bd:d3:f1:e3:8a:a2:28:86:55:71:03:bc:c7:
6c:77:76:3b:35:f8:88:52:9a:55:af:23:8c:bd:ab:b8:6d:c5:
d2:7f:a1:41:6f:6d:57:ca:8f:37:62:07:59:d2:dc:4e:0e:e9:
78:83:6c:8b:be:63:a9:ad:2a:5f:a5:bc:96:fd:36:d1:23:f8:
ac:77:da:35:e4:d8:79:03:7e:71:5d:44:c7:a6:7c:5f:88:27:
51:b2:2f:80:a0:36:c0:7c:7a:32:24:80:b7:de:1d:a2:94:31:
f8:65:06:57:9d:81:6f:0a:88:6e:43:6e:9c:bb:44:b6:2c:37:
9c:93:66:f1:ca:9e:1a:74:31:21:89:ce:f7:95:94:af:65:00:
9e:a9:0f:90:35:97:92:c3:89:75:07:ac:78:54:d9:d2:fd:e8:
7b:f8:e8:e6:33:5d:b4:51:af:24:94:cc:61:5c:a8:53:74:c1:
a6:bf:58:52:1c:9c:b7:06:28:68:fd:f0:af:83:7f:19:b0:d6:
26:da:a4:d3:5d:1f:30:21:80:45:e2:77:0b:a9:54:cf:d5:54:
dd:c1:73:e4:59:d9:3d:65:84:44:59:31:f1:83:2f:51:8d:1f:
ed:f8:c4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:40:06 2025 by rpki-client