Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/699ed05f-92ce-48c3-8186-6564a7373323.roa
File: 699ed05f-92ce-48c3-8186-6564a7373323.roa (raw, json)
Hash identifier: /ekRvsZE6zKuE0Kk7t9HEggkGLwTy5k2A5DmK/EIxB4=
Subject key identifier: 34:FD:31:6A:27:05:64:E9:05:69:DA:2F:59:11:31:F8:E5:45:FF:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52F5DDA8B53B523E5CEB1A85B0D5275D764C5A51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/699ed05f-92ce-48c3-8186-6564a7373323.roa
Signing time: Tue 21 Oct 2025 13:10:07 +0000
ROA not before: Tue 21 Oct 2025 13:10:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f5:dd:a8:b5:3b:52:3e:5c:eb:1a:85:b0:d5:27:5d:76:4c:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:10:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=bdb0427114a3f0dfae9085557c8067a76937dd8bd1b110598a823d15f40f3678, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:64:d8:e8:6b:dd:16:8d:af:3b:1c:55:1e:
db:35:86:ad:50:45:66:9d:60:bf:7b:84:68:41:b4:
46:ec:e2:dd:b8:59:f6:39:bf:75:94:84:39:a5:6d:
11:89:86:2d:01:5b:25:b2:a3:e0:96:c9:0d:eb:15:
b9:6d:30:63:ff:10:ed:c2:a2:fd:1f:07:fd:46:89:
f1:8a:02:f7:99:f5:88:24:a0:5a:e5:4d:2c:75:4f:
e6:ed:45:ed:2a:c8:e7:f6:3a:c3:11:d6:ea:b1:d3:
fb:10:d7:1f:21:f4:6f:97:39:92:bd:32:5d:85:af:
39:59:4a:a6:d0:68:ef:d2:64:24:85:92:15:ef:b0:
ba:fc:c5:70:c0:1d:9e:ad:81:a0:d9:fa:ba:dc:80:
bb:54:3c:4c:e1:99:3b:f9:72:e7:df:50:b0:96:8a:
05:1f:71:51:95:0e:93:2c:49:7e:d8:e0:2d:1b:a3:
0f:8d:c4:ac:95:83:e0:b7:b8:2d:de:ea:8c:b2:98:
93:89:ce:d7:4c:06:2c:c6:09:01:f6:56:c0:aa:50:
5e:16:fd:78:3f:a7:7d:4f:d1:e7:80:68:6f:79:68:
86:82:ea:76:d7:1a:4c:73:74:05:aa:d8:24:ec:2c:
2d:df:b3:9b:e9:f9:64:57:d3:39:25:15:db:39:80:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:31:6A:27:05:64:E9:05:69:DA:2F:59:11:31:F8:E5:45:FF:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/699ed05f-92ce-48c3-8186-6564a7373323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c040::/48
Signature Algorithm: sha256WithRSAEncryption
8c:ac:b7:57:31:40:68:d9:d9:f7:e2:4d:0e:9d:27:d9:6c:3b:
89:c8:c8:e7:7a:0c:d6:e4:10:ed:32:39:19:11:71:63:0e:83:
31:f6:16:cd:24:4a:71:3e:d1:e2:e0:9e:32:0a:22:af:90:6c:
47:89:99:89:22:64:c0:0f:84:03:ec:bb:47:b6:19:10:ee:b4:
55:0e:0e:f9:9f:83:40:b4:54:af:cf:ad:8a:e1:f9:d7:2c:f4:
9a:3f:f3:35:d5:af:55:fa:f0:8a:0f:ed:c2:d6:9c:4d:5d:26:
2a:a7:0d:77:28:4e:9a:92:24:51:90:a0:65:e6:f1:7f:b9:b3:
a4:33:05:70:a3:b4:55:ef:0a:e3:4f:5d:d2:e5:ad:72:d6:1c:
3d:16:2b:da:53:bf:ac:30:f1:4e:ce:9f:ff:f9:91:81:a7:83:
80:5d:10:d1:97:51:19:ef:be:f9:0f:7f:e8:8a:5e:fb:4c:4b:
3d:ce:5f:63:18:23:8f:d1:46:56:fe:7a:32:bc:b6:84:6f:f6:
75:7c:5b:71:92:86:73:fb:58:0f:ca:e1:e1:a3:88:a4:b9:83:
7b:13:44:4e:f3:d1:53:18:27:ec:5b:1b:63:9f:3e:1e:e3:f5:
f6:73:95:9e:e2:11:f2:90:4f:59:a4:cd:94:f9:4e:29:74:64:
1c:93:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:10 2025 by rpki-client