Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: +PkdBNDJp0IAIkUJBGIdI64Timl3HUYC24xJkjL1poA=
Subject key identifier: 32:77:FC:75:44:84:FF:6D:7F:95:F7:4A:43:CE:BB:BC:0F:94:FE:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79C09F8F32B6878E2B9EECAF0215DD904BD9C87D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Tue 21 Oct 2025 14:20:12 +0000
ROA not before: Tue 21 Oct 2025 14:20:12 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c0:9f:8f:32:b6:87:8e:2b:9e:ec:af:02:15:dd:90:4b:d9:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:20:12 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=3ec2d1f24145424feb21971ac5c75554a051fa6e8eac968119d142a8e19d3bb7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:95:5d:5d:98:18:d9:28:81:bd:c7:50:ab:
77:09:c0:ad:bf:5f:e4:e5:5d:0d:8b:5e:00:5e:7d:
67:2c:1a:c1:7f:9b:65:c5:25:02:ee:40:3a:56:99:
89:5a:5d:65:da:00:db:d9:8e:1d:dd:42:b4:52:d5:
7f:58:dc:7d:dc:17:ef:33:4a:36:b7:be:49:41:03:
c6:be:b8:07:22:54:84:66:14:6b:5b:74:0c:39:5a:
7c:7a:d9:d4:12:f6:73:38:77:8a:b8:95:0d:9b:fe:
be:e2:dd:d0:9c:0f:26:ec:77:44:73:b9:f1:cd:20:
73:9b:73:71:ea:da:da:27:b5:d4:69:16:75:b8:1e:
68:17:34:68:a7:bb:73:28:08:2d:6d:33:83:ec:50:
e8:6c:e3:39:4e:0a:1f:a0:6e:75:b9:c0:7a:7b:ce:
35:c6:cd:e2:f6:ae:06:b6:f9:ae:ad:e6:91:5e:c3:
00:14:ec:58:0b:0b:5c:11:a4:78:39:a0:a2:d7:de:
c7:87:ae:6a:5e:48:21:53:96:d9:6f:85:1d:ed:5a:
7b:b5:d4:27:a4:32:2c:a6:53:ca:42:77:21:6d:10:
32:e3:44:d2:12:72:5b:ac:35:9e:cf:f9:2a:7c:4a:
7a:9f:8d:7c:89:c7:19:44:e6:36:32:bf:be:6c:dd:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:FC:75:44:84:FF:6D:7F:95:F7:4A:43:CE:BB:BC:0F:94:FE:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:52:93:96:2a:9d:93:1b:92:60:08:03:93:63:10:4f:ad:e7:
ab:74:fe:8e:ea:cf:31:18:0a:57:b2:cc:94:64:30:fd:05:32:
82:f8:31:c6:c4:7a:ab:3f:ad:db:e1:33:ef:5c:82:6d:60:a8:
09:5b:0b:de:bb:37:11:eb:6c:22:39:16:cc:c2:03:45:c1:c7:
e1:e3:76:b0:e1:7b:1f:f8:be:be:f0:d5:7c:ab:e8:18:79:83:
09:28:90:e6:d3:3f:df:54:96:69:0b:77:25:79:b4:d0:3a:81:
50:34:ec:e2:e9:5f:ba:70:9c:ba:1a:22:42:eb:86:64:3e:db:
a2:f3:0c:99:4a:bc:27:af:d3:e3:29:68:86:bb:01:1c:3c:6e:
b6:10:27:3e:5b:92:89:e8:b3:a3:a4:7a:91:38:f8:0f:b9:aa:
73:f2:e8:76:4c:c7:29:db:b2:33:ee:07:00:fc:a6:0b:9b:23:
88:9a:b8:61:3d:ff:a2:dd:5c:ce:24:de:0f:96:d1:81:b1:17:
b9:46:43:e1:e5:e9:84:09:f1:6c:24:c4:f2:e6:ed:bf:4f:91:
4a:f2:d3:d8:fb:f1:e2:f9:36:f6:01:96:8f:ac:7d:81:cd:54:
38:cc:e4:4b:4e:3e:c5:16:9d:3f:43:67:cc:8e:7b:f6:b6:c8:
13:cd:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:34 2025 by rpki-client