Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: OdHSM3vRX1qNWWDUTeTFhkE040cVZB7KINxD/tTs71A=
Subject key identifier: DA:28:C6:A7:AA:81:A4:5C:C7:CD:09:65:F5:73:09:B5:D0:4A:93:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 460F125409FCACBA5918974BB47F9B8128D7D511
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Mon 01 Sep 2025 21:21:35 +0000
ROA not before: Mon 01 Sep 2025 21:21:35 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0f:12:54:09:fc:ac:ba:59:18:97:4b:b4:7f:9b:81:28:d7:d5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:21:35 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=01d7688aa8d62a7efe23ffa7649e2aa770e2e89990ed56a55f2f248bdc5f042e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:61:bd:6c:18:8c:cc:f8:9f:7d:2e:02:5a:
28:91:fe:b4:28:73:0d:9c:e4:c6:c4:40:34:c9:6a:
34:3d:5b:1f:ea:6c:4f:37:44:9e:29:a6:b3:8f:bf:
78:9c:26:2c:83:f6:94:56:29:12:08:74:d6:5b:fb:
ff:fb:76:1b:d8:0f:5b:ae:88:a5:ee:fd:4b:ab:bf:
35:f5:28:56:6b:24:de:1c:cd:7b:de:bb:de:50:04:
8e:c5:72:18:69:22:e7:02:3b:5c:ff:08:23:ad:34:
86:56:65:4e:45:fa:f2:e9:b8:23:b6:0d:79:cb:6a:
79:2b:de:7c:cc:5a:4d:07:5d:e3:61:4b:48:e1:bb:
18:78:81:da:8c:2c:9e:cc:68:b2:11:af:e4:b9:68:
15:02:70:82:93:73:03:bd:95:a8:ca:72:d6:fe:bb:
4e:66:67:3f:8c:7a:18:f4:9a:1d:4a:f6:b5:3d:1e:
75:9b:b3:7a:68:57:16:39:1f:fb:6e:62:ec:e5:13:
34:e6:f3:ef:79:67:6c:e9:e7:aa:d8:af:71:c7:b3:
dc:1f:f5:eb:67:a7:ef:6f:f1:e8:00:1f:6a:3f:d9:
b4:c4:5e:e6:9c:2c:27:a4:aa:91:93:d0:6a:82:35:
91:bf:b0:cd:1e:23:d7:91:63:30:62:c6:dc:21:a5:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:C6:A7:AA:81:A4:5C:C7:CD:09:65:F5:73:09:B5:D0:4A:93:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:10:18:66:f3:bc:58:13:d5:9d:30:e0:85:d1:e1:39:2f:8b:
17:fc:d5:34:38:47:4c:11:13:18:93:e3:e3:fc:7d:0e:dd:9a:
9f:52:0e:00:4f:c1:5a:c1:d7:3b:69:62:d8:8b:0a:c1:68:86:
5d:6b:ab:1c:e9:c1:40:db:e1:77:b1:44:bb:18:9a:1a:89:ef:
62:ea:07:0a:dd:e7:f0:6d:92:07:07:bc:7d:66:d6:7d:2b:c3:
e4:7e:d0:64:28:3e:1d:b5:cd:96:21:1c:b2:24:ab:a4:e4:7b:
fb:f5:eb:92:f1:f0:d1:c4:45:88:ac:d0:b8:cb:f9:73:53:45:
e4:de:7f:e5:dc:eb:96:7d:e1:d6:81:5d:cf:26:12:52:5b:4a:
d1:a6:16:c1:72:55:f4:bf:e9:af:af:a1:13:0c:11:98:1b:93:
f5:3c:6b:32:30:90:53:53:1b:5b:f6:de:2a:fe:e3:c5:fd:c7:
3f:36:e1:1b:d2:b9:48:b0:df:a8:06:7d:6f:d0:2b:da:98:19:
b7:a1:f6:c2:94:73:56:5f:57:9c:f9:f8:be:9c:65:d3:59:e3:
c0:c6:96:2f:31:3d:00:fe:96:ef:e9:fa:3c:95:ac:1e:9b:d6:
7d:cc:43:77:55:9c:c5:8c:a4:b4:b9:da:08:6e:ac:c2:bc:5d:
dc:da:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:21 2025 by rpki-client