Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
File: 357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa (raw, json)
Hash identifier: q9MwWltD5hboX1Tplma68V6G3Xcc+Uqd9Hh6BC1AO/o=
Subject key identifier: 68:10:0B:3A:67:A9:92:5B:FA:17:3E:09:04:7A:74:79:74:92:77:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62C60A6BEE22B6BA45595F26DD8EB51B6CDDE9FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
Signing time: Tue 21 Oct 2025 14:20:09 +0000
ROA not before: Tue 21 Oct 2025 14:20:09 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c6:0a:6b:ee:22:b6:ba:45:59:5f:26:dd:8e:b5:1b:6c:dd:e9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:20:09 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c49103145881d2fc3747619847a2df736e9b08b388cae5c408d38326a79879e2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:49:bc:d7:0a:7d:a6:2a:9f:58:8a:9a:2d:
13:76:82:df:89:6e:f3:29:67:8e:49:ba:15:00:8b:
f8:2d:96:d0:0b:ea:0b:32:04:79:a5:f9:b6:a5:02:
35:8d:e7:06:7f:2c:45:f6:87:33:c7:1f:1c:6a:bd:
9f:83:ea:79:97:ba:55:e5:b7:36:61:1e:10:e7:f1:
1e:72:da:48:75:2c:b4:fa:fc:a8:bd:c2:7c:d3:9f:
be:79:91:72:5d:25:8c:97:86:ff:87:5e:e8:87:1c:
c5:05:d9:58:63:2a:fc:4f:d4:c4:9c:5a:54:52:f4:
ba:c5:30:90:14:3b:f3:a1:55:1c:70:77:af:2d:92:
3c:c1:a2:12:23:4a:a1:af:17:a9:97:6b:82:92:23:
01:61:4b:1c:1a:b1:db:72:66:3e:6a:be:e9:e4:f0:
58:8d:3c:9a:f1:9b:68:bd:32:dc:8a:02:2f:c9:b1:
47:a6:5c:b1:de:bb:37:82:3f:bb:5e:25:d2:7b:66:
3b:fe:03:7f:b7:d0:18:58:c1:54:aa:81:ae:8b:92:
5e:36:db:0e:b5:89:42:ab:3b:d6:be:e2:fe:b7:e0:
ae:2c:a8:a5:6e:97:5a:3c:3b:02:72:f6:dc:43:28:
03:93:5c:9d:24:ef:9e:4b:86:b6:d9:59:9b:c8:86:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:0B:3A:67:A9:92:5B:FA:17:3E:09:04:7A:74:79:74:92:77:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/357c6622-9161-44d7-ab13-6ea6e0bed2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1000::/40
Signature Algorithm: sha256WithRSAEncryption
be:ee:a6:96:9a:35:a4:ca:fb:f2:64:f7:3c:f6:76:94:f6:3f:
b6:ec:03:98:3c:95:1a:0d:3d:e2:8c:03:74:d7:20:f2:9b:1c:
5a:d0:0c:a3:05:c9:78:3f:c0:17:7f:3e:2f:ea:9f:76:9d:70:
6e:6f:06:c0:0d:e8:2f:c8:bf:2e:ff:38:9a:a8:1d:7c:da:16:
ff:17:20:49:5a:e5:db:45:5e:19:40:ff:09:e7:03:d1:e3:20:
e2:f6:ff:99:7c:a1:38:8e:fe:cf:13:bb:0e:a9:2b:6f:59:12:
5c:dc:fa:95:89:91:5a:ac:9e:87:e5:dc:a2:92:cc:f7:71:33:
90:4a:a1:c7:84:a2:db:b7:66:21:18:2c:e1:58:ca:a9:61:ba:
88:b5:22:3c:bb:f0:b5:74:21:df:6f:65:17:d8:12:9a:83:63:
00:5c:59:2a:8c:6b:20:4f:9f:a6:53:b7:6a:ff:c4:4d:7c:52:
f1:e9:f7:00:93:2d:78:bf:b2:1d:e5:11:c0:c3:0f:e1:bb:80:
6f:88:ac:f0:cc:ef:7d:fb:1c:9e:cf:b1:50:ea:6b:0e:d9:a2:
67:ed:97:72:58:bf:40:5c:56:2e:aa:36:d0:9a:aa:bc:a2:db:
57:ae:2a:b1:61:a6:e7:08:78:d1:f2:f7:f0:aa:75:0b:9d:b2:
8e:ae:24:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:12 2025 by rpki-client