Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
File: 0b197d7f-771e-4490-ae9e-d500d4007e6d.roa (raw, json)
Hash identifier: J9VptyeRy95mME6ip5WWcwxKzeSAf18PPGJiyzsArgQ=
Subject key identifier: 4C:3A:7A:D8:15:6B:DA:3A:EE:7B:F0:CE:DE:26:82:7A:B8:87:64:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CE3CE80C6AC577C9C97624C8F09BFB865E7FE5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
Signing time: Mon 25 Aug 2025 16:37:01 +0000
ROA not before: Mon 25 Aug 2025 16:37:01 +0000
ROA not after: Mon 29 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e3:ce:80:c6:ac:57:7c:9c:97:62:4c:8f:09:bf:b8:65:e7:fe:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 25 16:37:01 2025 GMT
Not After : Sep 29 23:59:59 2025 GMT
Subject: serialNumber=4e8d74ff5d4df4afe0bdcb05b62714a1673abea6c92386cd170f6184674a682b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:8c:17:2d:50:e7:40:09:a4:c0:8d:a5:c4:
cc:8b:b2:42:26:39:55:1f:80:1d:21:07:77:ea:b1:
46:58:35:33:08:0f:85:03:0c:0c:75:f3:88:c6:b7:
74:12:f4:5c:b4:05:6c:98:61:15:18:0d:c0:a7:43:
54:d4:e1:a5:e9:0b:b5:a5:c1:37:78:ab:1f:da:ff:
b9:d3:a1:71:59:37:62:c5:2f:8d:99:0a:95:f5:92:
f7:32:97:c0:42:9c:e7:73:6e:98:4d:33:44:b5:e0:
d6:da:56:af:37:f1:81:76:08:d6:4a:f5:fe:4b:61:
5b:78:f8:c0:7f:85:1a:9c:20:33:52:5c:4b:fa:00:
3b:39:56:45:28:75:15:28:30:12:e3:b7:d5:b8:17:
43:c6:79:70:82:88:1b:54:4a:c7:f6:25:5f:f0:d5:
a5:7e:de:82:d0:cd:47:b8:62:de:e0:e6:23:35:01:
2e:6c:9c:80:22:7b:6a:e4:70:df:35:e9:e5:95:83:
cd:69:6b:6b:e8:64:df:7b:10:d2:41:57:11:8f:0e:
2b:9f:1b:9a:8a:44:ae:f8:f4:bf:f1:71:3b:c8:1e:
04:ac:55:76:ee:2f:d6:58:8a:9d:4f:1b:3c:28:47:
1d:f0:d6:c6:a5:28:23:7a:d5:02:2f:47:45:6a:d9:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:7A:D8:15:6B:DA:3A:EE:7B:F0:CE:DE:26:82:7A:B8:87:64:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b197d7f-771e-4490-ae9e-d500d4007e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b0:25:93:81:7f:e0:61:0c:70:64:e1:97:ab:7f:9f:d7:98:
bf:45:06:d0:50:a9:6d:11:03:34:68:6c:b7:0e:4c:b4:10:99:
95:23:9a:82:dc:ed:1d:17:86:0b:8d:71:91:03:98:38:69:31:
1f:70:f7:d6:8f:92:1d:3f:f1:c9:5d:b0:f4:90:50:45:b5:d5:
3d:89:a1:70:92:87:3c:ae:6c:37:78:49:a8:3f:43:48:26:58:
4a:a6:b2:c4:eb:1e:1e:8e:1c:fd:42:76:ab:5d:fb:f1:fc:ed:
82:f0:f7:c9:92:42:95:3b:17:c0:21:82:6b:58:5f:b8:ab:d6:
16:42:20:ec:50:de:d3:3c:1c:2f:ee:e3:55:3d:39:33:5c:c1:
02:18:3a:39:32:3a:b5:c3:97:25:e6:9f:5b:68:6c:9b:25:57:
30:cc:2c:e7:2b:9e:76:70:41:d8:19:6a:93:96:23:b1:94:91:
46:77:ec:42:ca:ed:f8:08:2d:4a:7c:fc:97:c9:72:fe:9c:42:
fd:6a:38:22:34:2c:4c:32:e5:20:90:54:ea:8b:b8:6a:0e:cc:
64:16:5b:2c:d0:ee:29:1d:60:09:a6:33:cd:7a:8f:ec:70:22:
13:8c:b8:42:bc:8d:40:21:97:7d:ef:6c:3b:ab:41:3d:e5:f4:
0d:f7:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:16:58 2025 by rpki-client