Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: KHJWVdW2GId77xcHCBywudXJzSUXpMVybyc1Qilqijg=
Subject key identifier: 9F:23:91:AC:FD:E8:75:69:37:BC:95:A6:33:85:1F:0C:8B:BA:7A:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44BF8C390FF61DB70B9B23BE5B2F32344E07815D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Tue 21 Oct 2025 13:50:57 +0000
ROA not before: Tue 21 Oct 2025 13:50:57 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bf:8c:39:0f:f6:1d:b7:0b:9b:23:be:5b:2f:32:34:4e:07:81:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:50:57 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=4304364c69e646d78eb7e46b52a9bd1d8a11b33fbfc8b596df8167a45f5063da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:74:99:69:8d:b2:ed:d2:ce:1d:32:9c:dc:
af:dd:79:2c:d1:e4:26:e4:13:d0:21:c3:e0:b3:72:
87:db:c5:31:19:f5:17:bf:f4:2b:83:5f:ce:bc:a3:
2d:88:8f:fe:e9:f7:f5:1c:b8:be:85:5f:16:1e:f0:
08:3b:a5:be:6c:1a:45:10:02:a0:33:92:f5:ad:68:
eb:02:7e:2e:c3:fb:cc:85:d0:af:6d:2e:c7:4b:d4:
ad:58:d9:a0:cf:13:fc:ac:78:08:d7:44:d4:22:b3:
1c:a7:cb:f3:fc:e4:79:1f:43:9c:d1:96:8c:ab:2a:
ba:a3:d3:78:fa:25:e4:35:1b:7c:6c:2a:c6:2d:8f:
02:e9:15:62:1d:6e:04:0e:f9:aa:f8:a1:67:61:37:
48:b1:c3:2a:00:0a:f6:9b:d8:8c:df:ec:4e:6c:04:
2b:23:4d:76:5e:3b:0f:9f:84:fd:5a:6c:1f:e8:43:
42:2a:e9:dd:57:2c:1f:75:5c:37:7e:1d:23:0a:04:
85:de:e2:bd:a6:74:47:f4:03:d5:66:47:0a:ba:99:
76:78:3f:33:64:ab:8e:80:59:28:dd:93:1b:24:12:
e7:e9:16:ac:0e:ab:2e:29:81:51:77:49:5e:90:63:
5e:07:02:5e:dd:b9:59:a6:41:f1:46:fa:89:99:bb:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:91:AC:FD:E8:75:69:37:BC:95:A6:33:85:1F:0C:8B:BA:7A:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
50:74:ce:f6:2d:3b:ad:22:a5:53:64:ac:55:c2:96:ba:f0:94:
39:93:c4:17:32:e9:5a:42:78:9d:e8:28:5b:1e:59:43:59:ae:
03:d3:df:c4:4d:73:46:3d:d5:1c:12:18:59:39:12:9c:1e:cd:
51:ff:ca:e4:31:37:db:fb:95:fe:e3:da:99:68:1f:e9:a2:2b:
94:6a:b0:a1:90:d7:42:a7:be:c6:21:4d:0c:5b:15:a4:51:6d:
df:a6:7b:7a:21:34:ab:e0:6b:b0:83:2f:28:5a:05:4c:9d:64:
60:04:03:00:8f:f0:29:61:95:ba:0b:16:6e:20:14:69:60:36:
f8:e6:fd:54:7f:ee:1c:f6:3b:b1:00:37:f6:d4:bb:0e:95:a7:
2c:b6:af:09:78:a9:8d:d8:d5:c0:8c:78:2c:03:26:2f:dd:fb:
f8:0a:70:8f:7a:58:82:b5:37:96:a7:de:ad:2d:00:b4:19:fa:
59:f9:8b:7d:a5:50:9d:e8:35:8d:fd:4f:71:65:6e:58:54:f8:
0b:2a:73:4f:9f:d9:4d:42:b2:fd:fe:fc:b9:e9:e8:f7:a5:f0:
49:47:83:3a:c4:4e:31:7b:46:15:91:21:8e:97:43:77:d3:56:
80:ab:85:49:2b:87:b7:d4:b7:ea:6d:18:2a:ba:dd:99:99:9e:
30:36:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:39 2025 by rpki-client