Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: l4C9yZciSMrRSs/l/1PMJCb3J6s2w9EmBlUL/vyHn9c=
Subject key identifier: CB:BE:37:82:7D:9E:EE:39:62:44:C2:A7:BE:90:31:01:78:62:BA:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1981B0F041632BBC13EA6164A923C89E89FF96CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Mon 01 Sep 2025 19:40:30 +0000
ROA not before: Mon 01 Sep 2025 19:40:30 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:81:b0:f0:41:63:2b:bc:13:ea:61:64:a9:23:c8:9e:89:ff:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:30 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=10c2520f17a1dc87949e67f2a73f1897c6f97b79f097b067b1ec24e72711c3a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:29:9e:3c:07:e1:03:89:68:5f:c7:80:27:
db:e8:22:3d:23:a4:fb:01:ce:bf:aa:c7:08:34:e4:
2c:a0:04:a2:9c:3d:cd:aa:6f:53:19:06:32:ac:8d:
3e:ef:1e:2d:82:58:6b:0c:8b:b2:7d:d1:b2:9a:7a:
ca:29:d8:d0:7e:d8:e3:9f:98:e8:d8:bc:1f:41:56:
20:cc:58:4b:38:a9:84:c4:e5:c2:65:ec:4b:f0:ed:
85:cc:33:e2:54:98:a0:5b:4d:a1:25:69:be:c9:1a:
6b:5b:0a:a5:ea:27:7c:22:7a:64:5c:d5:64:47:79:
ba:01:99:34:e4:3c:1b:a7:62:2d:eb:c9:79:06:85:
2c:18:9b:16:ff:88:79:17:6a:a3:03:8b:82:8f:73:
9c:db:2b:bc:30:05:3d:da:89:80:c6:92:94:1f:3e:
15:6a:da:44:60:0a:78:ba:47:8a:c5:03:68:2d:4a:
ff:3b:06:d0:c0:a1:70:68:63:84:fb:ac:70:f5:ee:
c3:f6:2d:f0:7c:21:80:48:f5:5a:c1:49:16:35:f3:
17:71:07:65:a0:61:7b:71:47:c5:82:ab:41:ba:72:
fd:e0:5d:e4:eb:89:ee:aa:24:87:7d:ab:fa:0c:3e:
b1:ca:60:fe:c2:20:e3:fc:48:87:3f:b9:d2:3e:11:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:37:82:7D:9E:EE:39:62:44:C2:A7:BE:90:31:01:78:62:BA:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:f2:31:8a:f2:5e:22:ca:90:65:de:7d:b0:84:2f:96:4c:61:
c8:b3:ca:12:ae:6c:f0:80:cf:78:f8:ac:b0:ac:77:61:07:28:
ca:19:01:68:93:83:4e:cd:bb:68:bf:52:76:19:49:41:04:bf:
19:25:0c:af:c2:9c:9f:01:c1:b4:7d:8c:4a:d4:8b:ba:20:57:
03:4f:71:90:35:4f:5a:d8:2d:f6:f7:22:17:2c:ee:5a:b3:14:
95:4a:9b:64:03:49:98:fd:86:c3:a8:db:fb:a2:ab:0e:d5:be:
9f:44:79:74:ba:71:38:5b:34:7e:d4:34:33:f2:e5:01:60:a8:
02:76:a5:95:8a:b4:7b:da:b9:a5:2a:88:06:d0:11:cf:4c:39:
b4:72:46:a0:80:11:eb:18:26:2a:2c:bb:2e:8b:36:bb:95:84:
8f:0a:d2:b4:b5:58:2f:c1:ff:b3:0e:89:f2:37:bc:3a:e2:13:
bb:21:fc:12:ef:24:3a:46:6d:08:49:34:c4:4e:f3:76:bf:53:
1e:70:dd:b9:ae:83:a3:ec:71:12:78:4a:a8:35:5c:54:99:2b:
ca:57:fa:ba:96:90:5d:d9:34:4a:c6:5e:0c:94:3f:07:81:8e:
4f:3e:5a:81:52:cd:6c:4f:ae:e1:bf:ca:26:05:51:08:51:cb:
14:29:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:05 2025 by rpki-client