Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
File: 669652b6-0b22-49a0-b29f-dfb51835c988.roa (raw, json)
Hash identifier: V8d0ie8VEqJr9ZF7vfuCraj+YWo6dNBoemyLAc+HQtI=
Subject key identifier: A0:B1:12:7E:89:23:8C:CD:D3:BF:7B:50:ED:0C:83:F8:EC:69:2D:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 331005A01457FFA2FF6BFA0705C05B61AEDF3F2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
Signing time: Tue 21 Oct 2025 14:31:12 +0000
ROA not before: Tue 21 Oct 2025 14:31:12 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:10:05:a0:14:57:ff:a2:ff:6b:fa:07:05:c0:5b:61:ae:df:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:31:12 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=fc5d8194f98fda83b67833b99496d7f21bc80770c86f63f0c811da216279978d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:1b:29:8a:a1:08:41:09:f9:76:5e:96:5f:
25:97:a7:94:d5:60:db:bc:45:1d:62:91:ff:52:7e:
c5:aa:03:23:33:ee:55:07:03:cd:51:45:9d:29:0b:
f0:ce:3c:03:c0:63:86:b1:f6:cd:5c:7d:00:bc:59:
98:90:0f:f7:44:9d:8b:1c:7d:33:4d:ff:ae:a2:bb:
d3:2c:8e:ff:8f:26:b5:b8:3e:2e:5e:aa:54:76:a7:
5e:72:5f:f0:c4:26:4c:88:99:5c:ac:52:23:ef:4b:
58:e0:d3:b4:5f:7f:9a:90:a6:a8:67:2b:aa:2d:ec:
db:11:62:65:19:5d:2a:8f:9a:9f:c2:4d:7b:ed:44:
60:3c:e9:6b:ba:48:8d:f8:38:74:2f:b8:8e:92:29:
c7:88:c1:10:3a:5f:16:fd:8c:5e:19:e4:c6:44:97:
56:b4:ca:18:1c:39:d7:be:af:71:61:37:8f:5a:4e:
6f:8a:7e:92:6f:08:cb:99:f6:bb:0c:55:45:44:bc:
a5:67:c0:92:59:ab:6f:04:f5:5a:cc:89:a3:6a:1b:
83:e9:d5:c5:a4:5b:da:25:99:59:d2:7d:af:67:f1:
d7:1b:d8:0d:4b:d3:63:1d:e4:af:5b:fa:0d:dd:47:
db:d4:fa:0d:86:66:b7:3c:04:98:b3:9e:ad:63:d8:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:12:7E:89:23:8C:CD:D3:BF:7B:50:ED:0C:83:F8:EC:69:2D:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/669652b6-0b22-49a0-b29f-dfb51835c988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/38
Signature Algorithm: sha256WithRSAEncryption
89:de:f4:49:00:a3:9e:ca:42:b4:73:ef:4d:4a:b7:29:cc:83:
a7:ea:27:99:0b:97:86:aa:6c:1c:fd:6a:9f:19:47:3d:aa:6b:
97:e6:0d:7e:ba:31:55:df:f6:1e:6a:16:e3:c4:59:66:30:d2:
98:d9:2b:4c:71:47:a3:9e:5e:e0:6e:18:c1:13:1c:e7:2a:17:
ec:da:35:36:26:a6:cf:56:ec:e5:c4:5b:f0:d1:a2:02:d9:39:
cd:7f:a8:65:33:e0:04:8a:33:dd:57:6c:57:a0:e1:7e:b8:48:
9c:73:c0:88:63:44:1c:6a:bf:50:c9:39:d2:2a:d4:c5:ab:18:
bc:cd:24:91:37:62:0d:06:8f:59:c4:84:9a:be:9c:f1:03:ef:
b4:2f:d8:bc:f1:d2:ca:c2:42:3c:2e:19:33:86:84:f2:fa:24:
af:b5:aa:06:b3:56:e2:01:32:9e:17:da:46:6e:18:5a:ca:6a:
ab:74:01:c7:cb:a7:be:cd:ce:36:c1:60:4d:eb:a8:b2:50:18:
79:b4:42:04:ec:00:cd:8d:a0:1b:bd:a9:66:87:f3:19:cd:8d:
00:f8:42:1c:a4:05:ea:f7:f8:82:ba:5f:d5:66:56:93:98:8b:
75:39:b2:f7:1b:70:a3:ae:a8:76:c7:4b:cf:a8:8b:aa:5c:53:
cb:8a:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:33 2025 by rpki-client