Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
File: 5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa (raw, json)
Hash identifier: xaomJDH8T2xya2nQM0v4gGdjthelmE5xJFP6boiJGNM=
Subject key identifier: A4:C9:D9:CF:64:95:A4:1D:64:45:C8:83:C3:80:A6:E8:BC:AB:18:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0651A67AF7F2F1FB714BDFF2F1F90D6C5D829EEF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
Signing time: Tue 21 Oct 2025 13:50:45 +0000
ROA not before: Tue 21 Oct 2025 13:50:45 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:51:a6:7a:f7:f2:f1:fb:71:4b:df:f2:f1:f9:0d:6c:5d:82:9e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:50:45 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=cd013b1bcae2f42fec784e6b4b8539be254f11681464f604ce1e83a17bf736e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:d0:3c:13:f6:70:c1:47:a6:86:14:db:98:
1b:eb:91:63:f0:5b:59:1e:fc:d7:9d:88:41:29:af:
f4:b9:4f:d5:cd:17:c5:6f:53:c8:48:01:6b:fc:65:
78:39:f1:7f:ac:76:42:ec:d7:18:b9:3d:e4:fc:25:
99:81:37:36:02:2e:b4:ef:1e:3d:cb:ca:79:d2:00:
ab:2b:fd:b2:a9:0b:14:99:a5:09:53:45:4c:d3:43:
57:d4:80:1c:37:0e:00:1c:74:d6:5c:7e:a9:30:f8:
5b:05:45:53:37:ea:8e:c5:c4:84:01:6e:3d:3a:5b:
5c:ae:e4:4b:d6:fa:dd:7c:e8:4f:98:97:0b:05:f1:
0d:7e:c5:52:ed:7c:a3:9c:a4:bf:d2:c1:66:81:bc:
bd:e7:89:03:ce:37:aa:da:3a:93:52:04:ea:80:4c:
15:41:57:2c:ce:57:c1:f0:7e:c3:c9:c9:10:75:e1:
68:ac:3f:ec:9b:c2:61:cb:39:89:6a:e6:ad:d0:c0:
8c:4b:e8:2b:66:0d:9c:e1:c2:d7:25:7d:fe:f1:28:
c9:fb:75:b8:4e:ae:77:27:2d:01:5b:6c:1d:5b:ef:
a5:76:92:bd:9d:94:1a:36:e2:ee:05:51:1e:99:36:
b4:32:b3:87:56:9b:89:d6:ec:8a:d8:16:c9:6a:8d:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:D9:CF:64:95:A4:1D:64:45:C8:83:C3:80:A6:E8:BC:AB:18:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:66:51:61:d0:62:64:67:24:22:1e:f9:58:52:0b:db:b5:41:
b2:b8:9c:de:fc:f1:1d:70:dc:40:ca:98:ea:c4:3e:f5:60:f2:
e4:27:f9:93:a7:0f:f1:35:46:98:66:54:27:e7:bb:7f:f0:e9:
36:f7:27:da:61:78:4e:6f:ab:6d:0f:5b:43:35:49:12:d6:bf:
4e:d8:dd:e1:bb:76:fd:69:75:01:8c:04:d6:1b:16:f1:4c:3e:
c1:5b:e5:d8:91:8a:76:25:27:c9:84:7b:ce:4b:ec:b8:8c:0a:
aa:34:b1:ba:65:08:88:3d:4c:da:34:d5:c2:11:18:00:89:cb:
82:f8:cd:37:59:49:0e:40:2f:79:2d:76:08:92:01:38:43:e6:
a1:25:78:4c:60:3b:8e:36:fb:d6:5b:a3:db:d4:c0:51:a3:f6:
c4:f0:a3:af:d2:ac:8f:a5:f9:59:a4:c1:d7:c3:bd:47:83:75:
14:72:a4:f0:cd:f5:0a:6d:68:d8:13:7d:64:ef:38:ea:54:7b:
84:52:5a:83:84:3b:06:f9:0e:8c:09:ed:e6:58:03:fb:da:a2:
09:4e:0d:d2:d4:a5:cf:a4:2f:01:e4:c8:e1:c6:16:bc:7f:9c:
82:3d:29:cd:2a:7f:1d:6c:c6:a5:d2:df:8e:87:26:80:3b:97:
93:19:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:34 2025 by rpki-client