Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
File: 248ea861-facc-4167-976d-1e65c556b074.roa (raw, json)
Hash identifier: bIVVcxv+XfF2xIySxN/Yo9hHJdJIyjiCUwWJs5MVOXM=
Subject key identifier: 14:B8:13:C2:D2:0E:53:A3:B4:76:44:56:BE:6C:B5:31:69:F9:BE:C7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D44DE44C9B0B4003DF3CCC6FCB22947B8117E1C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
Signing time: Tue 21 Oct 2025 14:20:58 +0000
ROA not before: Tue 21 Oct 2025 14:20:58 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:44:de:44:c9:b0:b4:00:3d:f3:cc:c6:fc:b2:29:47:b8:11:7e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:20:58 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=558d9747e2228565a93eb82e5524a89c6d41b12c774eaf427cf7703403132fe9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:0d:44:e2:02:c2:23:7e:a9:33:a3:22:75:
d6:ae:34:56:91:68:c6:1e:6d:d3:c7:58:b7:1d:e9:
81:0a:80:c0:48:7b:6f:43:c7:da:b3:e9:a9:95:81:
c7:50:6c:cd:ba:cc:43:25:b3:62:1c:db:0e:81:0a:
47:58:56:d4:9b:98:9f:e6:4d:77:54:74:a9:33:88:
04:d9:44:a5:46:14:00:cc:98:1a:46:26:c3:ee:c2:
a3:0f:04:a1:10:03:ad:6b:d3:e1:c6:fb:6e:1a:1f:
d7:e2:52:84:2a:9a:d9:a4:b9:48:d2:c9:fe:ff:ce:
d7:ff:4a:ed:d3:6e:74:3a:a8:21:ba:b2:0f:a3:6b:
e0:5a:fe:34:55:ba:37:93:bd:17:59:65:81:f8:9e:
49:85:8b:5a:2b:b9:08:83:c9:22:ae:f9:91:61:c6:
19:01:1b:f6:8f:0b:a5:64:a8:89:66:35:05:7b:79:
fa:43:45:90:06:2d:c7:ea:12:a2:17:38:cc:ec:8b:
e2:7e:27:26:12:58:c9:08:e5:34:c5:91:b3:37:ef:
76:c4:d4:ad:33:0b:29:28:d1:b6:20:88:fe:a0:8b:
ed:07:b0:72:ff:22:b8:e2:1e:25:86:46:ed:82:8d:
33:4e:e3:14:00:7c:0b:9a:4d:8f:6c:f1:7b:c1:28:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:13:C2:D2:0E:53:A3:B4:76:44:56:BE:6C:B5:31:69:F9:BE:C7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/248ea861-facc-4167-976d-1e65c556b074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:1000::/40
Signature Algorithm: sha256WithRSAEncryption
41:ea:0c:2f:46:4a:29:2f:0e:0f:45:34:26:e6:6d:c0:be:c1:
c7:f7:95:12:9f:19:2f:06:30:7d:a4:e8:43:89:af:86:e2:c4:
6f:80:fd:86:6a:1a:15:f5:e7:4b:55:e4:24:3a:ec:96:3a:4f:
bb:0d:d8:dc:f7:52:9d:cd:b2:1a:a2:6e:e0:f8:c3:15:5d:4e:
6f:8d:eb:ed:72:a7:20:df:47:4b:bd:8d:01:59:27:ac:55:a2:
c8:20:a6:71:3f:41:50:36:16:09:b4:c2:df:d6:9c:0f:37:b0:
ad:d6:6e:f8:85:26:2b:b0:7f:00:e2:53:b4:02:ad:1b:2c:c2:
8b:68:94:c9:e1:06:92:74:e0:c8:29:79:c5:49:c4:88:09:04:
cb:5b:16:02:b5:cf:9a:f2:f2:e8:61:71:de:b9:4a:8b:80:7a:
83:c7:10:05:20:ff:7d:84:c0:8d:f7:db:ed:48:95:d5:14:5a:
80:41:6d:90:4d:71:11:23:51:db:85:80:dd:e8:20:34:7e:e9:
cf:c3:89:73:02:85:a7:ee:73:54:a3:9b:d2:0b:89:07:50:43:
d9:85:6f:60:0f:1c:50:f3:3d:fb:a7:e1:c9:51:57:d0:42:67:
99:ae:4d:ae:1c:d3:63:17:07:2e:0b:8a:06:20:fd:01:83:f6:
85:a8:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:29 2025 by rpki-client