Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
File: 3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa (raw, json)
Hash identifier: ZfkpsuotkJW3qt5YB2MFsxVsKrhcyjtF/vnhsbpzsew=
Subject key identifier: 74:C8:DD:98:44:E4:8F:A0:EA:8F:54:68:4F:FC:8F:78:FC:F1:0D:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E7B9104B07EBC805B0991ACB4DABEA453B9E7CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
Signing time: Tue 21 Oct 2025 13:51:00 +0000
ROA not before: Tue 21 Oct 2025 13:51:00 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7b:91:04:b0:7e:bc:80:5b:09:91:ac:b4:da:be:a4:53:b9:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:51:00 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a2b3029d8f43fa7cfd1416dbffa732ef5ba53e6f5453bc17581dc5cbbb18661f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:b8:8d:65:d2:93:ee:b1:07:25:97:09:d4:
a6:b4:9d:65:88:51:d6:53:89:22:9b:ff:39:1b:41:
58:5f:3c:08:ec:7f:28:24:10:53:bb:59:b8:c0:c5:
a6:5e:7d:f7:e0:47:fc:8f:4a:72:56:31:36:14:97:
06:89:67:12:f4:d2:06:f2:38:c1:3d:eb:41:e0:37:
cd:19:16:e7:99:5b:5a:d1:89:13:fe:84:d3:8b:6d:
72:96:86:c8:6f:7a:34:85:04:9b:fa:a2:cc:bd:3d:
ed:3f:3a:d2:41:9f:96:68:1e:04:77:a4:b9:55:d9:
c3:cf:c3:4f:f3:40:5b:13:4c:2f:1c:1f:e1:ea:29:
61:05:57:3c:d7:77:14:7f:08:7e:91:8c:3b:6f:fb:
af:77:7e:0f:b1:ee:db:f6:b2:4e:62:0d:c3:1d:8d:
96:9e:24:14:72:d5:2a:60:eb:0f:c4:48:52:5c:94:
96:0e:99:fb:c5:df:8b:24:4e:32:4c:c1:11:17:87:
5d:b9:d8:f5:6c:07:97:55:19:e2:71:e6:f8:25:06:
9f:dc:6b:59:26:51:82:de:a7:a5:c8:41:89:cd:0b:
75:4e:36:38:51:dc:12:cd:59:94:83:28:cc:d2:b6:
e4:df:2f:14:0b:68:49:a0:db:fe:a4:e6:95:37:3a:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:DD:98:44:E4:8F:A0:EA:8F:54:68:4F:FC:8F:78:FC:F1:0D:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6aba1f-440e-4874-9193-a3a1f6ea3eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:0e:ba:32:77:10:b3:05:3c:eb:b0:1b:54:cc:75:b4:5b:9b:
73:e1:be:88:55:c1:99:ce:d4:63:c4:44:e5:2a:eb:f8:c7:a4:
ad:5f:45:9d:aa:47:39:3b:55:57:94:7c:c5:a2:8e:3a:72:67:
97:ce:01:22:48:f1:8a:75:79:38:bc:13:e7:6f:45:68:69:0e:
34:f3:b1:35:6d:81:b2:32:7c:25:39:5b:18:00:38:fa:e6:3e:
b8:b9:5b:ae:c3:57:2c:57:c4:77:45:8f:13:9f:e4:fc:ff:bb:
77:32:9e:3c:7b:aa:7b:70:8b:8f:bd:85:32:4e:10:af:b1:69:
b3:08:0f:96:c1:96:6d:82:73:e1:2a:af:12:be:92:36:5f:4f:
26:f4:4e:5d:b5:88:86:61:cf:0b:9f:a9:8d:35:b5:d4:1d:73:
e3:b6:75:76:57:c5:7c:03:3b:78:5c:ed:99:73:4f:a1:df:d8:
5f:37:f2:7a:57:ed:4b:ea:9d:42:6c:23:5a:dd:db:6f:3e:f2:
e3:ab:f0:5f:73:f6:54:6c:66:a4:e0:3f:1e:d4:30:13:f5:08:
17:77:00:b2:a8:57:d1:87:fa:e6:db:59:79:c9:85:c8:8d:c9:
23:89:2b:88:b6:28:87:2d:b2:1f:9a:65:64:df:05:a9:d9:fc:
f4:ae:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:52 2025 by rpki-client