Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json)
Hash identifier: hT4XMQSPX3rEmm12ALPLcRHmgt1EnNtzXXQRv1CAOBI=
Subject key identifier: F8:77:E5:47:42:48:A8:DA:0E:94:4C:12:E8:9C:5F:68:A6:6C:36:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C469C133D0A2F599A01961CC7E845C4C9EDAA61
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
Signing time: Mon 01 Sep 2025 19:40:11 +0000
ROA not before: Mon 01 Sep 2025 19:40:11 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:46:9c:13:3d:0a:2f:59:9a:01:96:1c:c7:e8:45:c4:c9:ed:aa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:11 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=2d3711d4118374a3bf7d10d794fba018339124150c6fd835a68cff5b50282c23, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:5d:a9:b0:15:66:21:54:5f:89:b2:96:e5:
86:44:8b:a4:4a:09:7d:7b:0f:2c:23:e5:9f:b0:b7:
d4:ed:44:fd:3e:83:72:2f:88:d3:7e:1f:fb:df:18:
6e:43:38:74:33:9e:56:33:be:2b:bf:e7:26:7c:67:
58:53:be:9a:c9:ff:5b:1f:57:d6:0a:73:d9:bd:d1:
cf:51:2f:72:96:e7:40:13:01:a2:a5:a2:c5:c3:f3:
67:5c:b5:b7:4e:ed:a5:e3:d2:7d:c4:f4:80:1a:d7:
dc:e6:a5:81:d6:37:40:cb:dc:d5:e7:bf:0d:e6:e8:
13:2d:10:29:f4:4a:da:ff:67:47:a8:a4:db:e2:73:
50:ba:01:69:b4:71:27:3f:de:e5:03:c4:e9:c4:92:
30:0f:2d:2d:81:37:d2:fd:e2:b6:83:38:2e:39:bb:
ad:52:69:4a:68:7d:08:2e:e6:0f:36:00:c4:26:12:
dd:d5:86:9d:db:92:41:56:fb:35:0d:ff:4e:2b:92:
d9:06:3c:ef:56:13:7d:4c:3e:31:3c:a7:a2:6e:e3:
18:f8:aa:29:d4:df:d0:72:e8:ed:d4:f6:b2:35:63:
9d:72:2c:cb:98:c2:81:e3:b1:27:a3:ce:94:89:c1:
a8:c2:ee:84:cf:2c:fa:c5:4f:9d:8a:c8:56:c4:2e:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:E5:47:42:48:A8:DA:0E:94:4C:12:E8:9C:5F:68:A6:6C:36:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8030::/48
Signature Algorithm: sha256WithRSAEncryption
64:7b:0b:e0:f1:b3:c8:21:9b:c2:f9:98:41:d8:65:a1:11:0e:
de:5f:17:89:08:8f:5d:ef:05:4c:f1:89:cf:03:15:ae:c8:86:
49:8c:8c:39:b5:71:ab:11:a4:c0:43:b5:1c:fd:07:c8:ad:77:
4c:0d:b5:df:ec:d7:36:9a:5b:0b:dc:d7:47:bc:63:c8:01:2b:
f3:19:d9:13:6c:ea:0d:19:e2:b2:0e:5a:19:35:8e:e5:af:cd:
49:03:97:01:48:47:10:54:cf:30:ad:37:f3:d9:7b:db:c2:c2:
6f:1d:b0:95:0f:ad:fc:76:8a:64:60:c8:2d:ca:55:ce:7e:a6:
95:4d:fa:ff:98:0f:24:02:42:81:d9:97:e4:9a:10:d9:eb:d9:
80:b4:38:2a:91:dc:30:cd:e6:a2:b4:a5:8e:57:cb:dd:f8:38:
72:f2:c4:05:c5:34:92:a0:a2:b3:5d:68:71:fa:7f:9d:8e:4d:
db:d3:ba:f1:96:9b:08:60:2a:e8:a8:57:48:f2:6c:c0:d5:08:
d6:91:d9:9e:63:0d:9d:06:b8:43:4a:81:b9:8e:57:96:50:a6:
12:2b:5d:79:13:a2:aa:35:fd:6a:93:e7:7c:90:88:79:4e:c9:
52:6f:33:cc:8a:60:0f:ca:86:1f:ce:5e:aa:95:c6:49:e2:7d:
15:50:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:43 2025 by rpki-client