Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File: 36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier: xVtvFzbWKb/CMvw+jN75qAVxQMw5eH2xxpi/Dnatn54=
Subject key identifier: 8C:AC:74:DA:86:A9:79:F1:F5:E8:3D:53:FD:AD:A3:BC:06:6A:A0:98
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 102E64E399C0F5CA414D15BDCE35C2F1CCBC9018
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time: Tue 21 Oct 2025 14:30:13 +0000
ROA not before: Tue 21 Oct 2025 14:30:13 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2e:64:e3:99:c0:f5:ca:41:4d:15:bd:ce:35:c2:f1:cc:bc:90:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:30:13 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a85c805c630bc86d4d207116f9d7778bcbd4158194ec72c65d66687490029d92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a4:60:85:08:77:c6:96:e7:09:b3:6c:fa:e3:
e5:2c:78:a9:76:61:84:a3:55:f6:8f:4e:4a:fd:8f:
3d:2d:fb:a6:e0:07:1f:6c:8f:e6:bb:58:35:e8:0c:
30:bd:e9:cd:6e:d6:2a:65:6a:2b:c3:c2:86:82:38:
87:fb:93:8e:9a:03:32:d0:84:c1:04:70:d1:10:9e:
38:75:4d:2e:4e:c1:72:f3:83:a1:da:f4:ba:53:1c:
14:4b:3c:6e:d9:44:91:89:d2:51:d2:a4:90:30:6a:
dd:7b:61:28:ff:27:48:cf:5e:59:b2:ff:c7:76:f8:
bf:2a:ee:5a:83:ba:6b:65:40:9d:15:e9:b3:19:80:
52:6e:f3:24:48:c2:ee:50:0a:3a:52:96:fa:b6:a4:
e3:30:f4:52:f2:2b:ef:94:e1:c0:2f:2a:ad:ac:7a:
bf:8f:a8:63:c8:9a:a0:82:d3:60:1b:39:06:28:8c:
fb:0b:4f:c1:1d:41:9a:56:dd:d8:6e:f8:dc:d8:dd:
d5:2d:4f:c9:42:81:ef:6b:05:bf:1c:d4:16:c5:27:
51:13:24:cc:c3:ff:19:02:75:cc:c8:cc:e7:8a:3b:
f7:1a:93:7c:a1:72:ca:70:01:79:0f:05:32:38:8c:
be:54:07:3c:0a:d6:27:ba:c7:d6:33:46:71:d1:aa:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:74:DA:86:A9:79:F1:F5:E8:3D:53:FD:AD:A3:BC:06:6A:A0:98
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a020::/48
Signature Algorithm: sha256WithRSAEncryption
85:c8:fe:4b:d1:d1:84:b2:6c:c5:ed:f8:80:e9:39:9d:8d:8a:
65:22:72:07:cb:38:5a:08:81:25:f5:0e:51:eb:96:c6:cb:88:
77:2e:77:82:18:7f:7a:42:8d:86:35:83:7f:64:7a:a6:2f:54:
5d:be:d2:fc:a6:b1:45:50:f6:b2:5d:48:3c:f1:f5:96:8e:d5:
bf:2c:eb:b7:28:05:33:9a:a3:a8:a9:aa:1a:b3:a5:19:12:50:
c9:e3:ab:cc:80:9f:0e:3e:2e:25:d1:6e:23:fb:c0:68:82:c9:
fb:a0:0f:7d:09:d4:f6:14:8a:1f:ff:34:07:67:a8:5c:3b:ac:
5d:d3:43:a8:cc:4f:d0:cc:34:7f:9e:00:36:4b:24:05:d5:99:
a3:d5:3c:7f:01:06:d7:51:e3:f4:a2:45:ce:92:b2:40:f8:f0:
d7:83:68:ea:4e:18:6a:bd:5b:0d:ed:5d:d7:76:7c:7b:c6:ee:
8b:38:61:ed:e2:64:e6:7b:aa:cf:39:bc:22:ef:11:95:66:9f:
cd:81:d6:2e:e7:74:a2:ad:8a:cf:ca:d0:2b:d6:2e:ce:59:09:
b9:09:78:f7:5f:b2:20:34:f3:26:ea:62:ce:b0:14:a5:99:dd:
26:59:aa:0a:25:c6:ed:10:91:b6:1b:3c:1f:c9:06:f1:30:f8:
56:d5:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:53 2025 by rpki-client