Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
File: 5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa (raw, json)
Hash identifier: KKamo8tRSTfE+ss817htmu/uQUjIjlZeY+Sjv97EoQI=
Subject key identifier: FA:6D:53:A8:C8:C1:03:61:B8:70:98:22:78:51:26:CC:AF:B2:52:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20E4911594C80010439DF824E36A13E144A9FFD8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
Signing time: Mon 01 Sep 2025 21:21:34 +0000
ROA not before: Mon 01 Sep 2025 21:21:34 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e4:91:15:94:c8:00:10:43:9d:f8:24:e3:6a:13:e1:44:a9:ff:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:21:34 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=3f25c518c1422639be1d108cb9f62909553ec390c2a303d5a66429fed0e0607a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:1f:01:e2:d1:da:9f:ff:da:3f:02:a6:97:
79:f0:00:9e:08:0f:63:81:2a:67:85:e8:d0:6f:da:
2d:72:d5:7a:f2:cf:ce:ad:f9:7f:77:01:ac:d4:9e:
d1:0f:9a:ec:0e:c1:f4:1a:58:4e:18:16:48:06:30:
2b:e5:f0:70:d4:71:bc:ab:e1:40:62:3f:8b:20:f2:
34:6d:0e:90:89:43:0d:8c:56:42:8b:a3:f5:07:13:
61:04:63:40:ed:3f:c3:d2:ce:ff:bd:c4:91:38:67:
d9:4e:57:48:db:53:e1:e0:f6:6e:5a:4d:04:0c:3f:
46:73:9b:fe:e7:5b:b1:c2:fe:1b:dc:0d:d3:f9:e5:
30:81:53:79:3b:92:88:5d:33:96:f6:d6:ff:dd:60:
59:1b:a5:26:aa:ea:aa:2a:d7:99:93:e3:b6:9a:11:
0d:9f:84:4a:bb:d7:2d:09:69:17:8f:24:6a:a8:0d:
b7:a1:c6:a1:e7:3e:8b:88:9d:ba:c2:b7:4a:9e:f8:
e5:1a:99:ee:97:84:62:b6:03:e7:8c:ab:6e:9e:da:
9d:2f:00:ee:a5:2c:2f:b2:8f:08:b7:fd:da:c1:21:
04:b7:f5:ef:0c:cc:0c:96:a8:ac:e1:12:49:da:ea:
af:50:9c:1e:ba:ea:c9:7b:1c:8b:8a:a7:22:d4:a4:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:53:A8:C8:C1:03:61:B8:70:98:22:78:51:26:CC:AF:B2:52:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5dca02e6-03a4-4251-b6d3-5c96d22af7cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.24.0/22
Signature Algorithm: sha256WithRSAEncryption
af:95:9a:73:e3:fd:31:4c:3e:0c:f7:80:e1:02:aa:59:e6:42:
e3:24:46:9a:a5:8d:b2:2f:be:ee:35:34:8b:81:1b:c2:0d:c6:
28:1b:d4:e8:eb:85:93:af:0b:da:30:2f:32:c5:38:5d:84:85:
41:45:0d:e5:9f:7d:b0:2c:32:76:32:96:22:54:f3:bf:99:49:
57:16:ce:b3:16:93:49:8b:e1:9d:c2:88:2e:38:54:94:e7:b6:
6c:cd:3d:56:c2:3d:f3:04:db:f3:e8:07:84:03:09:02:0a:1f:
fc:67:49:81:cc:b9:6b:e2:e2:6c:98:43:2a:9f:03:c3:1a:f4:
bc:5e:00:47:ec:0f:e6:4c:f4:84:8f:06:eb:2d:3a:e3:09:70:
b0:35:02:b2:bd:64:67:5f:90:9d:b0:e2:09:fb:ac:8a:ab:09:
96:ff:85:c4:0b:e1:ef:91:4b:b5:7a:ca:90:8d:d6:a5:b1:5e:
4c:37:99:64:33:9f:ff:4f:f3:74:b3:c8:c9:dd:56:11:77:de:
06:c6:cf:88:fc:48:e5:24:16:89:29:98:67:d5:a1:3d:e5:fd:
88:d9:e9:22:1a:79:36:48:76:d8:da:26:5e:a4:79:12:67:64:
0c:a2:77:ad:99:43:a9:49:0f:87:45:88:ba:54:93:fb:ea:4f:
a8:35:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:21 2025 by rpki-client