Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: fZ3StZX7f4s02RXFWA3uybdIKspe/2Z8GJobElbGtws=
Subject key identifier: 4B:A0:A0:82:8C:1C:BE:D2:7C:B0:79:07:B8:CB:1D:6D:2C:63:B1:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B7C13D238E184C875F5356D5DB6642EB3B9C8AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Tue 21 Oct 2025 12:30:10 +0000
ROA not before: Tue 21 Oct 2025 12:30:10 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7c:13:d2:38:e1:84:c8:75:f5:35:6d:5d:b6:64:2e:b3:b9:c8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 12:30:10 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=1df65fcfb65180569707010d0a9dc0c943cfd97bcfeca37be88539c8e11a92e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:77:db:3a:61:2a:4d:e2:65:57:af:79:7a:
83:44:bc:62:3e:48:45:ec:32:d4:73:6a:54:d2:5d:
94:3a:50:a2:6e:f3:1f:16:80:c8:22:02:2e:a7:cc:
15:1b:b8:6f:58:e5:c5:cd:c0:57:7f:da:66:b4:d9:
79:39:46:93:05:6a:c4:af:d9:fd:8a:b8:5c:97:0b:
b1:f6:37:93:06:79:1e:18:3d:ed:a6:fb:4a:cd:c2:
dd:7b:6d:d3:86:c5:92:ea:5e:59:13:b2:0b:cf:90:
cc:1d:3e:67:0b:52:20:74:ba:49:2e:c0:50:dc:7e:
9f:ba:4a:01:31:83:c4:e4:ab:ef:4f:45:6b:92:27:
07:7c:f1:43:d6:52:c3:6d:ac:ec:fa:8f:d6:6a:be:
d1:47:62:dd:c2:a8:a9:a5:d1:39:62:1a:1c:38:1c:
a8:d7:9d:37:23:a1:50:12:b9:ab:18:a7:26:69:1a:
a5:97:2e:de:ed:67:75:7b:dd:a9:3f:c0:7d:70:33:
5b:c8:63:59:77:9f:3a:0b:4e:b1:be:92:e1:70:53:
92:fd:a7:86:24:0e:f2:b5:14:c4:6c:e5:95:1b:e1:
6d:d2:7a:02:56:90:e7:94:5d:24:70:31:91:ff:b2:
3e:30:7e:f7:2c:73:ac:82:30:2b:48:92:9c:0c:8d:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:A0:82:8C:1C:BE:D2:7C:B0:79:07:B8:CB:1D:6D:2C:63:B1:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:90:6a:82:02:64:5b:be:c1:65:55:da:8f:3f:92:15:27:fa:
18:0d:9d:f5:7e:43:41:37:a4:53:d8:14:c5:35:07:d1:9b:d1:
07:ed:be:ec:43:80:5b:c6:2b:65:27:81:c7:aa:56:84:a1:d3:
0f:53:a4:ac:cc:35:f9:78:98:73:ba:8b:9c:66:79:c3:86:97:
11:62:f3:26:91:f9:1b:09:c8:57:76:2f:29:f6:64:4c:0b:28:
f3:af:06:29:65:a5:ad:6d:4d:b3:f6:bf:07:ba:39:b3:7a:0a:
32:d1:a8:97:e1:fc:cd:78:60:22:3c:a9:ae:a5:d3:b1:02:9c:
7f:06:be:99:1e:1a:be:fe:4c:8c:d8:ae:46:32:28:7f:23:26:
1b:26:76:cf:dd:11:ca:dc:47:cc:f2:d8:88:65:f3:15:91:e7:
2d:96:90:73:94:a4:f1:47:bd:ba:37:fe:0a:d1:6d:da:1a:15:
65:ac:80:b8:1c:26:b8:6f:23:ff:08:47:ab:9a:c5:33:f2:4e:
01:0f:8e:f0:44:1c:e2:2f:b8:c0:02:06:00:91:2b:0b:44:03:
4a:e5:c9:d5:66:00:07:78:0e:3f:db:36:c6:60:3b:c2:7b:ac:
16:4b:e1:82:19:a9:55:11:0e:25:f0:1b:89:28:27:d4:98:b2:
a6:f2:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:08 2025 by rpki-client