Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
File: 3af05485-fd97-4026-a50e-0227f46bd107.roa (raw, json)
Hash identifier: Nky9gQZBn6+ZpMXXu4WPvuLfE5QoWFJ7NCHPkmdNLlI=
Subject key identifier: 03:69:62:4A:63:CC:43:9C:C9:34:3F:15:5E:A9:42:E5:07:36:36:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D24978968E9EE6488EC641A3ED4E3F48E1D1272
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
Signing time: Tue 21 Oct 2025 13:20:37 +0000
ROA not before: Tue 21 Oct 2025 13:20:37 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:24:97:89:68:e9:ee:64:88:ec:64:1a:3e:d4:e3:f4:8e:1d:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:20:37 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a09c2e28f40ae0d6b19d51d8cc9950f865a3aa8fc2fcbf0ca04fd4ed60256a09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:1a:ab:d9:13:6e:8b:35:1b:4c:c2:ea:60:
1f:1f:aa:26:d1:a8:22:e9:34:75:5d:88:8a:bc:17:
b6:5a:33:df:62:5f:6f:48:df:49:b4:7c:92:4b:1d:
e5:e9:35:9f:65:3a:9e:0c:5d:a9:34:6f:84:42:33:
bf:b7:75:cc:f2:0f:5a:3e:1d:3c:de:cb:3f:1b:b6:
50:a4:20:8c:62:8a:49:1d:5f:60:f6:f9:2c:74:1f:
92:9b:39:b1:05:81:c4:92:c6:38:21:79:83:22:e8:
df:27:43:2c:18:32:14:74:a7:e1:a1:95:d9:8b:8f:
47:c7:d0:a6:e2:98:0b:47:d1:a8:e8:86:3a:66:2d:
d0:34:fe:4d:b5:d0:d8:54:63:f5:6c:19:c5:79:57:
10:36:2a:4d:63:1f:5d:96:25:6f:c4:60:62:85:30:
90:04:30:ba:d0:63:7b:a2:0a:98:15:9a:ab:c5:61:
fe:cd:25:1d:3c:6b:f9:57:b2:02:d1:c6:45:08:fc:
a8:0e:57:44:f6:e1:8d:cd:f1:89:26:1f:6a:04:e1:
a4:b5:50:0a:92:42:2a:76:29:9a:da:7b:70:5d:a5:
10:d6:d4:ca:8e:a3:16:b1:3f:01:5e:92:62:b9:07:
8b:fc:8f:7e:e9:e4:19:e7:64:84:f8:b4:6b:2b:aa:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:62:4A:63:CC:43:9C:C9:34:3F:15:5E:A9:42:E5:07:36:36:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3af05485-fd97-4026-a50e-0227f46bd107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:f2:94:3e:ec:9d:ad:9b:27:28:d2:1f:28:45:95:20:40:74:
e6:1b:5a:38:19:0a:3a:91:22:0d:a5:de:48:a0:55:8c:13:b2:
d1:d9:9e:a0:81:43:9d:14:78:54:a4:f6:ff:92:b0:c8:de:3a:
04:75:2b:89:b9:ec:50:40:60:3a:9a:82:3b:d9:5f:3b:41:bb:
65:f0:39:1b:8b:25:56:4e:f1:4a:16:61:e7:24:01:30:06:ec:
03:94:0a:2a:3e:2a:a9:76:f8:75:25:8d:6b:a1:cd:da:3e:f7:
d7:a2:a0:ed:c5:14:23:41:f7:d5:8d:5b:91:c5:9c:d7:09:b4:
42:a9:5b:18:92:00:ef:44:8f:08:7c:8e:02:02:69:6e:79:44:
76:3c:a6:04:4a:d9:c4:23:88:58:6b:4a:80:5f:af:85:b2:1f:
43:4d:5d:dd:38:d9:59:6a:e8:72:1c:b9:95:8a:4c:9a:81:8a:
1a:50:19:1f:0d:89:fd:8c:10:99:11:79:9f:90:c0:f1:7e:de:
e2:92:62:b4:2c:d0:79:90:d6:da:55:76:18:49:78:66:c6:17:
0e:fb:8d:12:73:5a:93:7c:65:e1:7f:b4:ae:ea:61:23:d9:9f:
e7:bb:88:5e:4e:b4:93:56:99:2d:da:e2:06:4c:2d:12:eb:14:
7d:b6:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:33 2025 by rpki-client