Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
File: 2ab74891-6199-47fc-bcde-b8022379067c.roa (raw, json)
Hash identifier: d0yLFLTX4dqgAN7wey8CEeE86LC4DCvmX8IjFbGiTls=
Subject key identifier: F6:1C:FB:1C:A3:D9:3B:3E:52:6A:F1:9A:8C:B7:47:F7:CB:10:2B:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 324ED9879E38A4011F9EF1407AD627FFA2576CA2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
Signing time: Tue 21 Oct 2025 14:10:07 +0000
ROA not before: Tue 21 Oct 2025 14:10:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4e:d9:87:9e:38:a4:01:1f:9e:f1:40:7a:d6:27:ff:a2:57:6c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:10:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c135844dde0bd841d82c3c6cf39b0215e729051ca000fd8ea71fb41e10073cf0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:c7:4c:80:ac:2d:f6:1d:7f:79:0b:a4:50:
30:fb:21:f1:52:d6:23:63:d7:0a:8e:a0:3f:5b:26:
3b:fb:17:f3:23:ef:fa:60:3d:61:2e:52:7a:5c:80:
e0:06:94:32:69:eb:cb:2e:ea:1c:61:7f:ad:9e:5e:
97:38:6b:17:79:c8:57:47:33:5c:64:bc:9f:18:4c:
c8:77:7a:51:b2:9c:4d:4d:ce:06:cb:df:59:a2:50:
6d:7e:24:44:88:92:28:17:48:d2:67:15:e3:95:f3:
7a:2f:6d:c4:54:ae:9e:8d:3e:b1:b6:24:e4:0c:ab:
4f:29:b8:6f:20:29:67:d8:86:7e:45:91:fd:ed:5f:
0b:6f:20:5d:2e:47:02:6e:db:ff:c2:b5:f1:2b:61:
c0:a0:87:db:e1:79:1b:c5:31:9d:fc:8c:0d:ca:a3:
f0:8d:46:3f:f7:01:33:02:1f:05:1e:99:3b:51:4a:
e1:29:cf:61:00:ab:e2:ae:21:13:93:64:2c:13:03:
0d:2e:c0:2c:4c:b3:e8:57:b7:bb:c3:6f:20:f5:2d:
65:49:75:1f:f5:1b:96:91:55:d1:c1:6a:04:dc:34:
d8:06:72:38:8b:85:a5:d7:5e:02:f4:fc:80:ae:4a:
c2:ae:bd:49:df:54:3d:34:2d:d9:a2:3d:a7:02:ee:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:FB:1C:A3:D9:3B:3E:52:6A:F1:9A:8C:B7:47:F7:CB:10:2B:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:4000::/40
Signature Algorithm: sha256WithRSAEncryption
1f:b0:b0:0a:0a:42:a7:30:19:a0:26:3a:7b:bf:a8:06:10:24:
5d:64:e9:1f:02:90:53:eb:6a:e2:63:8a:c3:c2:c8:b4:05:0d:
c0:48:b0:fc:0a:2f:16:f5:06:ad:6e:52:1c:11:af:08:3e:46:
dc:6b:1e:7c:28:6f:ee:b4:a3:cd:ac:5d:43:e7:f2:9d:44:9e:
cd:e3:4f:fa:f3:5d:78:81:fb:41:13:71:b5:b5:f5:d5:b6:bf:
c4:1a:fb:12:73:2f:76:4d:8c:90:f7:dd:60:bd:2c:66:28:46:
4d:7d:41:4c:aa:ce:c5:95:68:d2:0a:fd:ee:f8:38:d6:5a:ea:
c8:b7:71:52:bd:c8:13:9d:6c:e6:88:3e:de:3c:45:16:51:16:
6b:99:52:35:bd:3d:09:f1:f9:c8:60:dd:e5:9b:d7:cb:0e:aa:
1a:92:e0:e0:9c:11:f7:45:62:67:83:69:76:4f:2f:26:37:b0:
80:54:ea:bc:5b:b4:91:4b:92:d0:59:f7:5b:4b:c7:02:c0:46:
9b:62:d9:29:d0:de:a0:ba:ad:88:e6:90:ac:85:c3:69:1e:2c:
be:eb:95:f8:07:62:10:44:39:29:a8:4d:20:0c:ad:12:0a:68:
3e:5f:ab:47:8d:1d:94:d8:84:0f:2d:c4:77:7b:84:55:20:9f:
75:89:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:08 2025 by rpki-client