Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json)
Hash identifier: BD4nxJMv/yp+y80enXu8986SYow5ZD29koX4D+yDaJA=
Subject key identifier: 38:61:B3:FE:B4:85:E0:C2:63:69:38:7B:50:21:46:85:57:1B:A1:4E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 411261BF6D6A256897191561B351D5B54484024F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
Signing time: Tue 21 Oct 2025 12:30:16 +0000
ROA not before: Tue 21 Oct 2025 12:30:16 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:12:61:bf:6d:6a:25:68:97:19:15:61:b3:51:d5:b5:44:84:02:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 12:30:16 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=d2051926e52263218844589e0d4d13407f9dfe04c3b6379eef8dde212f4e5f7e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:44:bf:e7:07:ae:14:b4:42:57:d7:95:86:
56:9b:59:bc:af:c0:78:99:d5:ad:3f:8c:22:df:48:
e0:d9:a5:f9:66:8f:48:eb:58:a5:4d:c8:7e:14:0d:
30:f8:18:c5:7d:d3:3e:15:01:37:0c:98:c8:9d:84:
ea:ac:1c:6e:6b:cb:c7:81:fa:72:75:60:82:f8:a2:
c2:3f:30:11:12:32:17:72:7a:de:13:a0:c5:98:8c:
c0:34:74:3a:8a:05:c0:04:1f:32:95:dc:4f:f7:f0:
fa:88:37:b1:be:26:08:93:db:e8:b1:46:31:f0:0c:
69:1e:a0:18:a6:63:eb:b0:e8:a5:d5:2a:c7:d9:f8:
6e:80:2d:22:52:27:a8:3c:48:a0:a0:fc:c3:d9:60:
4a:dc:e5:de:1f:d0:12:6c:e6:0c:6a:41:69:96:b8:
4b:f2:cd:c7:c6:62:39:13:d1:0b:92:2f:6b:2d:ea:
ed:b1:d8:6c:48:de:04:df:1b:37:6b:b9:07:cc:47:
a1:00:00:3f:0f:42:72:d3:e9:92:f8:4b:d4:f1:ef:
6b:ed:3c:1d:71:d6:b8:62:5f:b3:db:f3:7e:2e:e4:
d3:4e:97:76:f2:4c:8c:4c:b2:14:68:03:a0:a5:94:
0d:ba:06:cf:73:f6:59:af:f7:d4:bc:b2:b5:ad:42:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:B3:FE:B4:85:E0:C2:63:69:38:7B:50:21:46:85:57:1B:A1:4E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
37:d6:a7:07:63:fe:81:58:9c:99:ee:f5:6a:10:d2:be:32:c5:
60:8e:9e:d2:5b:83:61:68:79:7f:d0:79:c3:4d:09:80:33:89:
b3:09:89:8c:58:b8:24:17:ee:2b:84:03:08:e6:23:99:25:b4:
da:fb:62:3b:f2:38:08:77:1c:53:55:6b:17:20:bf:d3:04:52:
b7:35:2b:78:56:40:7a:eb:9b:f3:64:0a:e9:aa:08:1d:d3:09:
a6:18:76:fd:44:cb:94:2d:07:bc:03:54:ed:1f:0f:51:d4:27:
7a:0f:d4:97:16:5b:c1:88:3f:a0:84:ec:37:8c:2d:22:4c:49:
23:95:b8:aa:45:04:8e:82:75:5a:3b:fb:5a:c1:ef:81:43:91:
5f:46:2b:66:2f:b8:bd:ec:7f:fb:75:5e:27:dd:c5:1f:89:a4:
db:c4:8b:3e:f3:52:99:5e:c7:25:aa:e3:24:38:cd:95:86:52:
9b:5e:7e:47:98:9b:cd:89:04:49:99:62:af:a0:64:5e:09:57:
d3:bf:8f:4e:1c:8d:25:94:a8:4e:a3:f6:26:d1:34:bf:05:0a:
11:34:38:40:ab:b9:7d:c0:eb:9f:5b:62:3d:cf:6e:ec:11:d9:
d9:2d:e2:22:54:f2:2f:50:0f:9a:02:e7:37:90:d3:81:ab:9c:
11:18:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:57 2025 by rpki-client