Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
File: 0b50b516-b90a-4f69-ace2-8e904f240f1d.roa (raw, json)
Hash identifier: cAzto1MHcMX9VwXYk9PEy5VxXmMfhop92uIBaThvJmk=
Subject key identifier: 88:81:5E:38:EF:43:03:7D:B2:BF:FF:96:D9:93:EF:1D:3E:89:0C:DD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28C4BFCF78047771E0868E87C82E4F02CD7069DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
Signing time: Tue 21 Oct 2025 13:20:07 +0000
ROA not before: Tue 21 Oct 2025 13:20:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c4:bf:cf:78:04:77:71:e0:86:8e:87:c8:2e:4f:02:cd:70:69:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:20:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=4211bd43a15a0bb54e3b878953cc7aff1c9e29db608e9fb4e40071c52855cd51, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:e0:87:f7:73:cf:90:8b:3f:60:8a:7e:1b:
67:44:09:1a:f8:9a:1d:a4:12:d5:ff:f2:0e:30:55:
4d:9c:1b:e5:04:ac:1d:df:cd:89:84:87:95:41:fd:
55:98:88:ff:02:6a:96:46:2d:af:a0:79:46:f2:5f:
8f:ed:9a:df:7b:28:80:93:4b:50:c6:13:5c:aa:80:
02:f4:20:cc:e6:51:2c:d2:af:c8:26:d3:a1:7c:44:
86:ca:07:a7:7a:41:f1:0f:a5:1a:70:6a:5e:0d:9e:
26:4e:e3:e2:6d:1e:7d:40:09:65:11:4e:f5:70:84:
8f:6b:d7:60:60:29:4a:c7:c5:a1:b7:23:f4:e5:95:
0a:e8:f1:71:d2:f3:66:0d:c6:79:dd:c0:7d:ca:27:
67:f4:38:6a:9b:a5:94:52:4a:d9:fc:fd:5f:91:72:
98:d4:1e:c4:09:34:e3:bf:51:20:72:99:f5:68:fb:
13:8f:3b:c5:6c:66:90:1a:10:35:af:3b:c2:90:5b:
3a:4c:c9:a8:b6:84:92:3c:4c:82:b1:3e:62:de:3d:
6d:d6:d2:f5:01:88:ca:c5:60:31:4d:71:22:42:39:
1e:60:15:42:82:be:7b:b5:b3:04:65:11:8c:97:33:
90:f0:ec:3b:9a:59:48:e9:f2:fd:92:f6:33:70:6c:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:5E:38:EF:43:03:7D:B2:BF:FF:96:D9:93:EF:1D:3E:89:0C:DD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:c00::/38
Signature Algorithm: sha256WithRSAEncryption
72:b4:cd:9d:ba:1b:73:eb:a5:f6:2f:12:b6:47:92:fa:73:e6:
a4:59:aa:2c:98:f9:03:82:15:ec:59:eb:2d:1d:67:eb:99:2b:
a2:a4:e9:e4:12:aa:b1:0f:32:97:e4:ee:bf:9f:fb:94:3c:dc:
b1:be:43:c6:54:96:12:d7:c9:76:ca:55:28:17:5d:ec:f4:02:
6a:d8:cf:73:18:49:82:80:ea:ea:4f:89:85:b7:d5:5b:f1:7b:
12:0a:b2:d7:f8:20:9a:40:46:96:90:7d:d4:1f:61:fc:dc:67:
1e:4e:bd:f0:85:8a:ae:70:c4:44:64:e8:2d:a6:47:62:50:26:
da:72:30:9e:d7:cf:10:64:9d:b2:62:83:1c:ac:23:f7:cd:40:
95:0f:f6:68:a9:47:43:82:3b:8d:ee:a4:51:71:bf:fe:4a:bf:
49:a9:87:5f:79:a1:65:e4:9a:2b:92:d0:ba:f3:76:e0:f8:24:
a5:50:e0:7f:ab:ac:c7:c9:77:63:27:76:0d:91:86:30:4c:d1:
c0:01:65:06:83:c4:e1:65:1a:d6:15:24:6c:e1:09:bf:f6:6c:
4e:ef:67:ef:9d:ef:af:39:e8:87:cc:79:00:79:36:08:b2:6d:
a8:e0:48:f4:78:6f:11:55:24:cb:b8:29:23:68:03:cb:2d:16:
7d:dc:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:58 2025 by rpki-client