Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
File: 15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa (raw, json)
Hash identifier: hV5ESmO4C9mBlxoeTtPcKsKO0ipNPCeBWkSNVy7w31I=
Subject key identifier: C8:63:39:FF:B1:8D:1D:0A:7F:CB:E9:6A:0E:15:BC:1C:BD:6F:91:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C5E639DF8F98A5D8A760C1C97E59A48C5410B9F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
Signing time: Tue 21 Oct 2025 13:51:03 +0000
ROA not before: Tue 21 Oct 2025 13:51:03 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5e:63:9d:f8:f9:8a:5d:8a:76:0c:1c:97:e5:9a:48:c5:41:0b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:51:03 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=070ff3e1b76e3a56ec439feafd0f799eeb25ae74bc576976aff43552be265ced, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:33:9a:5a:4a:7c:6d:ae:db:7f:e1:a5:2c:
04:b1:13:99:01:f6:45:44:7d:42:fd:b3:eb:a3:0f:
d5:bc:ca:c6:74:3c:62:00:4d:9b:c4:f3:13:98:1d:
f9:d7:54:f6:fc:4d:e5:b4:e0:ee:b8:68:3b:a2:5a:
90:00:c3:72:02:dc:d4:4a:ed:0f:4d:20:66:8a:d8:
25:56:a0:a4:21:34:c2:32:a6:7a:d0:46:ea:99:c2:
8c:d6:27:1e:14:53:4a:ae:b0:63:32:57:c8:35:4b:
46:dd:38:cb:1e:dd:1f:c3:54:4f:00:00:98:79:80:
29:7d:b4:43:b4:1d:6e:12:d9:43:69:af:92:c8:4a:
4b:d0:d9:71:01:4e:98:b8:eb:fb:dd:0c:aa:9f:01:
46:59:d7:aa:3b:db:72:ce:28:8d:b1:a3:17:51:62:
09:b8:99:1a:f7:89:cf:6a:c8:d2:5a:a9:16:bc:24:
cb:88:a7:cb:2c:01:df:01:32:27:34:71:a7:9e:31:
65:7e:f9:a1:72:1a:16:1c:71:98:3c:06:f0:ad:54:
61:f7:a8:d5:24:c8:51:86:8e:b6:3a:05:39:84:17:
ec:6e:2c:60:a9:97:e0:b1:be:9d:91:06:43:e1:99:
03:b7:13:7c:6b:f2:ef:f1:5e:83:b5:ef:bc:fa:4b:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:39:FF:B1:8D:1D:0A:7F:CB:E9:6A:0E:15:BC:1C:BD:6F:91:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15de004b-cd0f-44a1-99b1-4e2e71ff07d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
63:1f:18:19:98:1c:84:46:8d:3f:72:a7:a3:a7:ee:e5:7b:1c:
5b:60:6b:74:30:91:3f:a2:25:59:f0:87:61:58:27:38:c8:bd:
f7:ee:01:bd:2c:74:47:47:d0:f0:fa:bb:9f:00:a7:72:92:27:
28:c8:5b:0f:47:30:63:45:24:54:27:30:ad:68:34:de:12:f4:
36:7b:19:3e:3d:93:4b:88:c2:bc:56:27:76:61:8a:d8:21:97:
95:a1:5f:3c:3d:5c:f8:e5:c7:b3:8a:c2:7e:3f:22:9e:ad:ff:
d2:1d:97:01:35:c1:3c:7b:ca:c4:7a:c2:47:be:45:97:dd:0c:
6f:c6:c1:53:46:fb:ef:d8:0f:65:15:9d:65:21:20:0f:58:cc:
d3:a2:32:1a:19:18:92:c6:ea:b5:76:97:dc:1f:3d:a2:55:98:
d9:a6:1a:69:79:85:6f:8c:cf:3a:ab:f0:f5:8e:24:b9:85:17:
81:56:e3:7c:df:50:0b:03:27:51:a6:de:e1:29:43:60:5a:53:
44:c3:ef:ab:b2:df:07:cb:a1:6e:dd:16:10:14:38:30:a3:7e:
51:a3:5c:0d:79:eb:6e:1e:c6:73:e8:15:4a:bd:46:d9:fe:36:
7c:99:8a:69:ba:6d:ca:be:60:11:64:d9:d6:41:3c:c8:46:c1:
ce:a9:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:57 2025 by rpki-client