Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa
File: 5c829516-8640-4a9a-a2b3-cfababf09faa.roa (raw, json)
Hash identifier: MMZCUXlSwUXByWmYwCG/B/pVyftWqn4YxiqK6iSXjvo=
Subject key identifier: 90:39:8F:87:77:80:C8:D3:BA:D2:29:14:2D:DD:E3:67:C8:C5:9B:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 236C0E2F207F9064F7D3BB5FDAD8A24DEA73EAA9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa
Signing time: Tue 21 Oct 2025 14:20:44 +0000
ROA not before: Tue 21 Oct 2025 14:20:44 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6c:0e:2f:20:7f:90:64:f7:d3:bb:5f:da:d8:a2:4d:ea:73:ea:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:20:44 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=d409672f928310b3f8766d75f9f78b7b5dbbfbd4dba76a6688e1811a2b7759c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:90:c4:4e:4f:aa:d5:50:24:f6:45:a1:a6:
80:65:34:5c:28:04:42:a7:d0:8c:25:58:76:cd:27:
cb:cc:f2:ec:7c:d4:29:6a:36:ea:0c:e7:c7:66:52:
ba:e3:2c:6f:28:76:04:aa:7a:a4:66:ba:a2:d1:e5:
7d:76:66:a8:92:31:f5:da:df:62:e8:3b:2b:38:ac:
31:04:7e:08:8d:82:b0:aa:48:6b:3c:14:c6:bb:4d:
3b:3c:79:42:ef:d8:02:d1:45:80:e7:64:3f:fa:21:
42:99:78:2a:46:8f:e8:64:af:50:90:8e:8b:d9:48:
4f:f7:a5:83:99:1e:85:40:2d:58:4e:8b:7f:95:a0:
c7:1b:e5:94:cc:fb:48:83:af:d8:b9:07:f5:5a:a3:
2b:d9:d0:c3:cf:7b:b6:c7:f1:7f:99:34:9b:a2:19:
f3:6d:05:d5:69:8c:01:5b:37:7d:88:9f:52:3b:79:
29:fb:b6:19:6a:3b:e8:4b:76:6b:96:f5:83:31:e9:
dd:99:0d:7d:2c:6e:f5:4b:4d:69:52:0c:c3:67:3b:
24:88:d8:91:f4:f0:a6:89:5a:59:87:2b:7d:4a:8b:
b7:49:e5:ce:28:a5:c3:5c:11:56:73:18:2a:4d:cc:
1d:4e:23:b1:61:78:a9:4a:48:bb:75:71:45:1e:7f:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:8F:87:77:80:C8:D3:BA:D2:29:14:2D:DD:E3:67:C8:C5:9B:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5c829516-8640-4a9a-a2b3-cfababf09faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e080::/48
Signature Algorithm: sha256WithRSAEncryption
57:5b:99:07:04:48:3c:ea:e0:ae:11:e2:f9:01:f1:dc:23:28:
9b:d8:c2:74:e0:6d:5c:54:b9:0e:65:db:d2:3e:99:51:41:9b:
4a:73:b0:4b:12:e4:14:2b:73:27:75:ff:85:db:0a:51:6f:06:
59:93:d8:f4:d1:b0:80:4c:d1:d3:3a:6d:b6:13:e6:18:19:9a:
af:5c:30:db:33:f8:4f:08:9b:7c:40:03:31:12:ad:c3:8c:b3:
48:f4:02:f6:1d:16:22:21:12:4b:92:de:d7:22:22:f9:ed:8a:
04:7b:23:83:35:80:ea:64:ab:3f:2a:74:64:2e:42:8f:42:2a:
a9:65:0a:fd:4f:43:a2:c6:55:a0:3e:8f:4e:f7:98:d6:7f:5b:
3a:3e:8f:ee:58:a9:84:b7:74:47:68:3c:e6:6a:b8:66:ff:34:
b5:6c:67:ef:5f:c3:a5:47:85:84:0d:e5:51:09:3a:ad:cf:29:
46:31:04:1b:d5:0d:69:4a:98:26:b0:d5:1a:33:1b:b7:38:0e:
c6:15:76:cc:5d:bb:9a:82:f5:15:e7:8d:4e:d0:ef:c2:eb:dd:
28:a4:3c:b1:85:9c:26:61:e0:2c:0b:d8:7f:45:32:2f:1a:6a:
30:f8:b4:51:fa:2d:6d:98:96:05:0d:5e:b0:89:56:78:7c:10:
0c:ad:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:28 2025 by rpki-client