Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa
File: 36851825-b64c-4907-b152-006b17b6b7d7.roa (raw, json)
Hash identifier: IFPrNpTqFkGVMnAAb4mlYereoAgMGtl4MzcPeL+9sd4=
Subject key identifier: CD:8C:3F:F0:87:AC:A3:27:69:C0:BA:20:0C:6E:E3:BD:86:AF:D6:81
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B6BB63BAE515BB88AD7C6B4ED7B83E2A30DAF47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa
Signing time: Tue 21 Oct 2025 14:40:02 +0000
ROA not before: Tue 21 Oct 2025 14:40:02 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:6b:b6:3b:ae:51:5b:b8:8a:d7:c6:b4:ed:7b:83:e2:a3:0d:af:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:40:02 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=edd85ac0e28f32fa4f2212cf3c2369970c72e894a94aa70c444593725aa1e1b2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:29:a1:30:97:54:4c:62:17:40:57:a1:c3:
6e:1a:db:f8:b6:a6:04:a1:50:95:9b:71:c1:79:91:
b4:16:65:c3:b5:1e:88:1c:a5:65:a9:a7:4a:56:86:
3a:31:a2:b6:57:35:fa:3d:e7:34:1e:52:c9:b7:f5:
c2:8d:0d:4a:3d:a5:5f:b6:df:01:b8:47:55:05:ff:
88:53:9d:81:a6:68:64:2a:51:7d:e8:20:6f:0e:86:
88:1c:aa:0b:2e:cc:fc:6b:79:17:ac:f8:b6:8a:ef:
8a:66:05:cf:74:4a:53:53:5c:e5:32:ec:03:5f:38:
a6:57:79:b6:c4:4a:e1:80:7a:e6:36:03:d6:08:a7:
6d:d0:c4:48:b0:c9:ad:43:04:2c:da:b3:86:cb:42:
16:b4:c7:dd:3f:20:fe:0d:43:6c:54:97:c2:5d:70:
f7:c1:96:64:96:3d:d7:e6:46:f0:6a:27:67:22:ac:
33:cf:54:f5:70:a2:3d:f4:f0:fb:8f:29:ed:7a:c4:
d3:dc:1c:8b:90:fb:32:90:6c:ac:18:e6:d2:48:ce:
72:cc:b8:f1:24:4b:99:f8:73:f1:28:af:28:59:e7:
e3:a4:76:10:88:4e:40:db:72:43:15:3a:66:93:27:
b1:34:73:fa:80:e2:3f:52:b2:7c:45:25:67:52:31:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:3F:F0:87:AC:A3:27:69:C0:BA:20:0C:6E:E3:BD:86:AF:D6:81
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36851825-b64c-4907-b152-006b17b6b7d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b000::/40
Signature Algorithm: sha256WithRSAEncryption
80:20:6e:f7:f4:04:1f:04:3c:c5:b9:92:36:4f:78:16:fd:c9:
ee:17:95:bf:e5:02:cf:8c:f8:c7:ed:a5:98:f7:b3:a7:c1:49:
69:c5:6e:2c:b2:53:c8:d0:fb:f5:db:82:33:d7:53:7a:f3:64:
1e:c2:ac:bb:e7:82:e9:aa:8b:58:4f:00:d2:d3:3d:64:ec:57:
b9:1e:69:6e:5a:f7:26:be:d3:e6:ea:2d:f6:1e:db:86:5d:cf:
cd:29:c2:ed:be:62:a3:89:22:08:c6:2f:cb:3d:9a:36:63:df:
7f:28:f6:69:93:8f:23:bd:33:1f:bb:61:32:60:6e:15:77:3b:
f0:b2:e6:c5:7d:8d:89:4d:ac:7c:4a:c0:9f:a4:28:1e:7c:a8:
ed:75:4f:b6:9e:03:03:35:8c:a3:c0:17:07:a7:75:7e:dd:dc:
ec:c5:a8:24:d1:59:ca:3b:86:58:76:13:7c:3d:c6:3d:6e:48:
65:98:1d:d4:35:b3:ac:46:0a:19:8a:49:a1:f8:a5:cb:8d:39:
6d:20:d8:34:f2:92:45:8e:50:04:11:3a:2c:ed:ed:42:10:17:
02:3e:f9:f5:15:ec:9d:ff:93:42:35:b1:82:47:88:73:8c:8d:
62:fc:b0:15:be:dd:38:e7:90:88:ee:ed:76:1a:74:b1:1f:8a:
c7:1c:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:36 2025 by rpki-client