Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
File: 5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa (raw, json)
Hash identifier: V91SWi0DvraB6KU+n4orzgTxzJGkX9/0L5RYEBPje0o=
Subject key identifier: 38:C6:1C:19:7A:03:5C:D8:D8:B0:5D:81:50:F7:5E:76:8E:A6:4B:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A7B8C28B944E021AAE2579E7C3BC4974F682828
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
Signing time: Fri 24 Oct 2025 00:20:12 +0000
ROA not before: Fri 24 Oct 2025 00:20:12 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7b:8c:28:b9:44:e0:21:aa:e2:57:9e:7c:3b:c4:97:4f:68:28:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 00:20:12 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=fb2c64d293a9f064ac9aaa31a136e3381b9a11c2f34f073eb37171e91853053a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:b8:c8:8a:13:6e:88:49:a1:1f:9d:c0:d5:
bf:65:bc:50:d6:2c:c8:74:ec:0f:72:7a:b3:42:df:
bb:45:0e:fe:d7:ed:f6:61:21:a9:e3:03:27:b4:88:
84:4b:47:0e:e2:c9:17:55:17:d9:e6:ea:40:ea:95:
ea:e6:69:f3:b9:73:1e:6a:f7:ce:ce:77:48:de:27:
c2:a1:df:4f:38:71:db:a9:43:8b:21:08:0b:43:50:
07:4f:49:ab:75:e9:d5:59:22:f2:92:33:84:5d:22:
24:e6:9d:b4:78:c7:33:95:a8:f0:b3:e1:f3:5c:78:
10:cb:3c:1f:0c:ce:67:2e:6e:59:a6:b9:a4:78:88:
64:9a:b3:18:61:14:70:26:91:a1:22:d2:b1:ad:fe:
e4:07:68:b8:ae:83:f4:60:e0:64:b4:5c:8f:45:ca:
69:7e:7e:2c:65:1f:e1:b6:5d:62:b9:43:46:e4:cf:
24:01:b8:63:2f:02:85:c4:b2:37:79:7d:ef:eb:e8:
7b:45:16:b9:d3:82:63:48:b5:f4:49:3f:3c:76:49:
15:06:32:76:0c:71:09:36:74:f8:af:06:65:1e:6d:
04:f1:62:10:72:b2:27:ee:ae:cd:da:3d:c1:89:09:
22:7b:f4:94:eb:d1:89:02:30:38:43:25:a8:27:e7:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C6:1C:19:7A:03:5C:D8:D8:B0:5D:81:50:F7:5E:76:8E:A6:4B:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5cca7c73-7a82-43fc-81aa-657ae0b0bc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8080::/48
Signature Algorithm: sha256WithRSAEncryption
65:8a:91:54:7c:c7:ff:37:ae:23:02:53:4f:29:ff:7d:3b:72:
01:7d:82:db:c8:cc:cb:c3:af:bf:96:a5:ef:d9:8e:c9:b7:bc:
87:84:f6:62:6a:bc:d8:02:de:98:7a:bb:fe:a2:52:15:40:83:
5b:88:03:b3:91:0c:8b:4c:48:b4:d3:af:17:2b:3c:ef:57:b8:
02:d9:13:52:ce:78:70:d3:f7:50:88:cc:a3:7f:9a:82:ba:3b:
66:79:6f:08:f7:fe:40:ab:2d:aa:c7:cd:07:6c:0b:51:03:76:
6d:38:93:3e:43:ea:bd:57:b6:80:18:3c:79:25:49:e1:d1:24:
9e:c9:40:52:1a:2d:b0:dc:f7:64:f3:37:6f:b4:1e:60:50:ce:
f9:4b:74:22:81:64:d6:19:1f:eb:17:38:bd:66:c0:ac:2c:70:
99:00:2c:0d:f1:d9:43:89:ae:91:f6:ad:5e:be:61:16:94:bb:
25:d1:93:1c:7a:1b:f8:1f:24:bf:29:be:d6:ac:26:ff:99:f9:
88:63:bf:03:26:9e:e1:6c:0e:2c:d9:8a:74:88:75:90:43:05:
3e:c0:2d:4c:81:6b:d4:2e:d9:08:42:36:fd:d3:50:2f:c2:ef:
97:b1:56:97:22:65:c5:da:e1:af:61:49:eb:2a:da:4f:f6:72:
e1:12:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:13 2025 by rpki-client