Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: F6y0swlN9zE2w5MbEfDPjB66KUkwvXXjs2/6zBa0Mgo=
Subject key identifier: F1:41:1C:44:D6:EE:FA:3B:DD:F9:39:8D:29:9D:D4:43:52:E9:6B:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19667183ED1DF2A39CA3AB56CB85C8F7FB811100
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Tue 21 Oct 2025 13:20:34 +0000
ROA not before: Tue 21 Oct 2025 13:20:34 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:66:71:83:ed:1d:f2:a3:9c:a3:ab:56:cb:85:c8:f7:fb:81:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:20:34 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=7ece986a91f318a0c3c7dd0d37f541a49e48ba16dbfbcdc3c5b6b174ade35133, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:b3:d0:76:81:6b:69:4b:a6:c4:62:1d:91:
f0:72:eb:8c:ed:92:43:d0:d8:66:ae:03:1e:0e:2c:
ed:5a:b7:0d:e0:53:dc:63:6c:02:77:0b:d3:f9:b1:
fc:af:27:b8:eb:d3:ef:90:2c:a5:9a:8f:68:6e:12:
68:10:ac:82:84:cc:35:d2:97:6b:3f:e9:88:b0:86:
75:56:f7:7b:6b:4b:57:91:12:20:e4:19:ae:ef:81:
d6:36:b1:a1:e0:39:f7:1f:70:b2:2f:ad:71:0a:00:
d7:84:16:78:4e:5c:64:f8:94:90:54:8f:27:48:1d:
4f:9e:51:16:66:bd:85:01:02:a0:af:e1:31:02:07:
bc:20:93:d8:89:4d:61:bd:ef:f4:34:17:72:64:78:
d6:a1:59:44:a6:e1:11:2d:08:46:86:95:80:3e:40:
19:23:b9:65:49:1a:e3:77:38:28:45:4d:20:7f:80:
7e:49:84:e1:00:bb:c8:e1:08:da:c1:83:ca:e3:e8:
f0:41:64:06:40:9e:d3:ba:e2:c8:24:ba:d9:2c:d4:
b0:5a:7b:74:4e:6e:40:3a:d4:47:33:7f:aa:0e:12:
65:3f:a7:da:5a:40:36:dd:0f:c8:e6:cf:2b:df:51:
cc:9c:04:e3:2b:2d:66:66:44:af:21:7f:17:9c:fd:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:1C:44:D6:EE:FA:3B:DD:F9:39:8D:29:9D:D4:43:52:E9:6B:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:b1:29:82:49:82:09:c3:30:a2:d8:14:e7:25:43:b2:40:4c:
17:46:26:76:e2:0f:9f:5e:c2:c7:e1:f1:53:29:e8:9e:3c:33:
69:af:37:a4:ca:70:07:41:20:e9:31:f2:88:f3:34:6b:49:ae:
33:92:90:f3:13:6e:24:1c:45:ef:95:85:e3:8e:6f:a5:a7:b8:
55:33:1d:90:d2:3c:1b:d9:85:0a:b3:a7:2d:3b:b5:05:09:c6:
eb:32:7f:a3:5f:ed:9a:ee:f6:05:67:9e:b7:8b:59:11:80:6b:
ab:96:7d:2a:58:49:e4:20:d6:f6:3c:51:12:81:db:5f:23:ce:
e8:e8:21:7f:d4:1a:b5:ec:8e:aa:64:e9:12:3e:37:96:1f:86:
f9:32:ac:d4:3e:e5:79:28:71:0c:e7:17:61:0e:e0:04:9a:cf:
40:a2:1b:14:43:bf:6f:54:fa:84:9e:64:83:aa:bd:ba:2a:9c:
bd:67:62:31:80:24:10:b9:a9:fc:57:78:80:b5:49:ab:7e:d7:
82:3a:84:c9:c5:40:47:9e:d2:f0:14:e6:2f:ad:43:55:6d:eb:
fc:b8:f8:33:b5:fd:4d:97:de:29:30:ba:cb:42:a0:a6:1c:40:
8f:41:e9:45:dd:95:0a:10:4d:f4:a5:9e:d2:18:d0:e4:64:71:
be:06:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:23 2025 by rpki-client