Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
File: 5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa (raw, json)
Hash identifier: RaYKn4YxkuuvDvuUylka68GQhJTtXAXg6ij//5MT9c8=
Subject key identifier: 9C:30:54:E0:F7:81:87:BE:30:93:EA:15:BB:49:2E:66:A6:8D:E9:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 233244ADD2F541AD623676660C65D9C58CE29FD2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
Signing time: Tue 21 Oct 2025 13:41:19 +0000
ROA not before: Tue 21 Oct 2025 13:41:19 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:32:44:ad:d2:f5:41:ad:62:36:76:66:0c:65:d9:c5:8c:e2:9f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:41:19 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=225d919fd616cba3551c2162eefaef01e37219cd9b65a62fe4fa2d3d503e571a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:8c:96:94:b0:74:07:22:da:34:45:23:c0:
cf:bf:77:f1:64:d6:5a:6f:40:f8:b5:74:3b:61:09:
be:9e:1f:8b:70:f5:35:ad:76:c2:ac:ce:a1:cc:6b:
79:3f:a1:6f:f4:42:56:ee:5f:98:62:11:3e:29:d9:
98:0a:85:c2:1e:1e:17:2c:a1:90:e2:e5:ae:19:33:
7c:f0:c2:0c:a0:91:7b:d6:22:86:c6:88:fa:be:74:
00:e0:72:d6:90:2b:ef:b4:87:4a:4c:1e:d1:ae:7b:
e0:58:e4:44:12:50:10:42:51:e3:29:91:e8:e2:49:
5a:21:00:27:1b:c0:90:1f:42:07:85:9d:f1:0c:d6:
60:b5:9d:2a:1d:4b:0e:59:4f:51:ca:68:34:50:85:
e9:df:fa:80:7b:75:9c:d9:a1:c4:31:a7:40:f6:07:
99:51:85:28:a8:99:89:55:5c:6f:41:2f:53:20:9a:
9b:e9:20:7f:c0:96:f9:a3:11:08:fe:d3:0d:33:53:
79:5b:d7:3d:95:1e:56:2b:c7:79:6d:18:fb:6d:2e:
6a:b9:34:bb:d8:86:ca:d2:a4:c3:5a:4a:20:77:2c:
92:ac:c6:dd:43:a0:8f:00:1d:a4:8e:53:1f:3e:17:
ef:43:52:df:27:89:58:10:04:ea:f9:72:04:42:88:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:54:E0:F7:81:87:BE:30:93:EA:15:BB:49:2E:66:A6:8D:E9:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d1fff98-4415-4cd0-b2cc-26f61a8cae7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
63:90:03:64:1c:d2:14:2a:db:72:38:a7:fc:ce:5d:73:6c:04:
d3:ac:50:17:7c:ea:6d:06:8b:88:e6:87:14:66:e0:e9:56:71:
d9:b2:fa:af:41:f0:a2:b9:22:c1:ec:46:74:57:f3:3c:a2:67:
f1:81:19:0a:d2:6b:1b:05:d4:ca:6e:3e:65:30:eb:cf:c3:e7:
16:ce:70:2a:42:2b:d5:f1:8b:79:f3:c8:2b:96:dc:5c:c3:fe:
6a:50:ae:36:79:4d:50:df:bd:a4:d2:40:5b:5a:ef:42:f0:8d:
95:eb:bd:c1:8d:6e:f1:fe:46:c6:d5:f8:ba:ad:6c:cb:eb:a6:
f6:a3:f2:6c:b7:72:ba:95:5a:4d:ca:60:6f:66:a9:00:b4:8e:
c9:2d:37:9f:32:49:fd:4d:53:78:a3:81:0d:8d:04:d6:db:6e:
a6:27:47:d6:b5:1b:bf:b4:df:86:7a:ac:d1:79:83:17:f6:38:
e9:24:2a:9d:bf:54:86:07:7c:a1:cb:50:41:e8:a3:e1:cd:3f:
fa:7d:ad:cc:84:69:8f:08:8b:62:c5:15:6c:56:f6:5d:3a:24:
0b:41:4f:5a:9c:95:29:0e:96:11:6d:f4:8d:4c:53:b3:1e:32:
56:5e:f7:2c:d3:50:90:cd:72:04:bb:cb:2b:e1:8e:8b:34:3d:
ad:27:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:26 2025 by rpki-client