Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
File: 1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json)
Hash identifier: ZO/zPF7VDaLWRWAM6JGBlxMXJ7twW7yVb683PbeNGow=
Subject key identifier: E2:29:EA:33:26:14:3D:25:CB:DF:9B:39:5C:F9:CE:53:7E:55:6C:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C8ADD7A4D38D768064B2A2DBDAADAA2B4AF1570
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
Signing time: Tue 21 Oct 2025 14:30:16 +0000
ROA not before: Tue 21 Oct 2025 14:30:16 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:dd:7a:4d:38:d7:68:06:4b:2a:2d:bd:aa:da:a2:b4:af:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:30:16 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=e37a4a25f48c55bd5001b04291918bbbd15162d6d22fe2823f0c65f1a5328abc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:20:03:15:f8:76:01:c8:0a:ec:f0:ff:6f:
5f:f6:2d:c9:8c:ff:e6:4b:26:19:52:82:1f:ea:83:
ee:57:63:e8:fe:43:74:8b:82:e0:ba:84:75:c9:12:
23:43:ad:6b:aa:52:af:cc:89:d5:75:d7:3a:99:e2:
1d:0d:20:23:ec:d9:01:a0:08:44:cc:47:45:7f:78:
60:c8:87:50:3c:e3:38:a8:f2:59:b6:44:26:39:fb:
50:f0:e9:fb:5a:82:31:51:3b:69:2d:7a:94:1e:74:
57:6a:05:1b:7e:a1:63:c4:7d:14:8f:70:a0:40:f2:
b6:37:95:6b:78:3a:42:6a:0e:8d:a1:ec:f0:a3:22:
23:ca:40:35:a0:78:5e:0f:d1:e6:a8:ba:37:d7:e2:
5f:cb:cb:84:f3:63:6f:ac:ac:22:30:ff:f7:2d:7b:
f5:ee:df:d9:1c:20:49:6a:90:6d:8d:03:b3:5c:5d:
7f:55:45:8a:a2:80:a0:36:95:e2:0c:ca:8d:06:14:
8e:4d:3c:2a:49:9a:86:0e:fb:35:a4:51:1c:48:06:
44:6a:a6:41:85:20:d0:80:46:c1:f4:7d:d9:aa:31:
df:1a:84:74:21:0e:e0:a4:10:14:76:19:bc:6c:a9:
de:4f:ff:d3:ad:05:9c:3a:9c:8b:f1:27:ed:78:05:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:EA:33:26:14:3D:25:CB:DF:9B:39:5C:F9:CE:53:7E:55:6C:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8080::/48
Signature Algorithm: sha256WithRSAEncryption
82:e8:08:17:84:af:c8:7f:8c:5e:0a:38:0e:a2:cb:ef:20:db:
6c:b2:94:40:47:36:5f:bd:91:84:21:4e:39:5b:a9:4e:64:d2:
fc:a3:e9:17:2d:a5:e2:c5:ed:7f:4c:5f:0d:ac:87:27:38:28:
80:d7:c1:e9:02:53:9e:2d:34:5b:17:7c:5f:45:f8:05:12:e1:
8b:67:29:7c:65:40:58:70:d7:ac:ac:5d:11:eb:e9:e4:e5:86:
2d:9b:d9:5b:2b:75:89:eb:bd:21:15:07:75:63:0f:3c:ae:5c:
70:d1:64:c6:62:3b:7c:68:31:0a:c6:e0:d9:68:ec:a4:24:1a:
12:ac:c8:ac:8f:e7:1d:39:3e:f7:4c:46:ca:96:b7:08:4a:e5:
c3:92:66:34:f2:ee:d9:a4:25:37:a0:27:af:d3:9e:82:14:81:
77:dc:47:67:2b:ef:37:04:54:62:c1:98:d6:45:33:23:0e:30:
5b:4a:96:b0:04:b3:9b:29:59:49:2f:06:e7:19:c7:3d:f1:06:
2f:e7:0c:f4:82:f3:db:81:4f:16:10:3a:6a:df:53:87:a9:a5:
c5:5b:be:31:fe:5b:21:39:b8:35:f0:41:18:8b:b5:02:ef:9a:
43:d0:b6:b2:4b:c1:85:31:f4:77:fb:88:c0:c2:3a:e5:c9:56:
95:d5:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:10 2025 by rpki-client