Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
File: 4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa (raw, json)
Hash identifier: ATfkxj1ASfXSwv5bXgFRTistGFQf/OfGlfdmr2WHQu8=
Subject key identifier: AB:A2:04:BB:A7:F0:09:B0:B3:9E:91:9A:91:2F:8E:17:F0:DE:C2:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29CA2B5DC8D81986483F5BAF216597DE2E0ED650
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
Signing time: Tue 21 Oct 2025 13:30:41 +0000
ROA not before: Tue 21 Oct 2025 13:30:41 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ca:2b:5d:c8:d8:19:86:48:3f:5b:af:21:65:97:de:2e:0e:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:30:41 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=ab95a3c66ad52dcdb482a8a00f9d4197fa83d26bbe48e612cad2e100c453829f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:4e:98:8f:ba:b0:25:e8:20:ff:92:88:76:
ca:71:67:2b:e1:3e:45:fb:c0:8a:11:ab:e5:9a:7c:
4a:34:0f:fa:71:89:b9:1d:cc:d7:04:b7:c3:50:12:
05:d8:1b:d7:81:2a:a9:82:2b:32:0c:29:b7:17:c9:
62:46:97:1e:b1:a0:4e:b7:d8:09:99:b9:ed:6d:19:
ef:46:48:61:23:67:2d:cf:d8:73:32:b6:0b:ff:de:
c0:49:cd:72:4b:ad:4a:08:ba:fe:55:00:dd:81:b9:
4b:01:83:2f:07:28:29:ff:0e:14:e2:4b:0c:0c:b8:
31:10:d0:da:3b:c0:a8:3d:6e:80:c8:c6:76:6b:ef:
46:2a:9d:7d:15:d4:ea:cd:10:d3:4e:f9:f7:58:07:
02:f3:21:a8:45:dc:45:7b:1e:f1:1b:fd:de:a8:7f:
51:9a:75:2b:35:7a:d7:98:fa:82:07:24:6f:46:eb:
b7:c1:b7:33:01:f0:2d:07:68:3f:22:36:91:9e:44:
ba:44:21:b9:3b:76:be:01:12:12:76:89:44:73:5b:
94:14:83:bd:61:0f:1b:1f:1d:8f:9c:34:9c:4e:69:
f2:ea:c2:e3:ed:c0:91:61:84:a6:86:11:aa:91:da:
3e:ff:94:32:42:33:7c:2c:5c:45:40:2c:bc:a6:85:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A2:04:BB:A7:F0:09:B0:B3:9E:91:9A:91:2F:8E:17:F0:DE:C2:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
04:be:2c:37:4c:81:0b:63:b6:a8:02:87:a8:07:f2:cf:bb:fd:
d4:18:cc:c6:49:9f:2a:10:2f:0d:56:ef:1b:77:ef:a8:04:bc:
8a:c7:91:13:22:e8:af:30:4b:74:c8:a6:f5:a9:14:bc:c7:43:
84:be:72:d3:3f:9f:4b:22:17:e6:2c:2f:c3:2d:e4:44:9f:bc:
f1:25:3c:e5:c0:d7:cd:86:16:69:54:4c:ca:47:4b:6a:cc:3d:
6f:81:fa:c5:22:7f:6f:e6:5a:75:4f:66:ca:9d:4f:0e:80:df:
a3:df:1f:66:bb:b3:20:6a:14:a5:c9:50:49:c9:0a:38:fc:c6:
23:f3:f9:75:c8:ba:b7:e6:3c:8c:d4:a6:64:79:69:aa:86:c3:
a3:fb:1b:60:98:cd:8a:48:2a:e9:e6:ba:6f:72:38:00:df:4e:
54:51:2c:b4:d3:ba:ac:65:0b:f9:97:a8:d0:d0:95:8e:35:12:
d2:8d:bf:c7:3e:56:d3:1b:d5:b4:84:e2:78:04:4c:f2:56:d4:
b9:94:f5:74:cd:93:93:fb:2e:32:cc:34:e1:69:75:32:fb:83:
c6:f4:e9:03:0c:eb:75:47:60:61:01:3c:02:77:2b:58:6c:cc:
1a:85:ef:bd:61:74:69:00:74:59:a0:88:2f:28:ab:6f:e7:97:
f2:45:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:21 2025 by rpki-client