Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
File: 6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa (raw, json)
Hash identifier: hgiwAOH8FdLCuInFKc9X9fe3tczIyhjQUHEU+Kx+6Y4=
Subject key identifier: 2E:BD:FF:A7:93:05:0B:A8:24:AE:3C:26:7E:26:32:4E:41:1F:39:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 8E6AAFC0D1902E91AE5DAD4D546EED14B152F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
Signing time: Tue 21 Oct 2025 13:50:56 +0000
ROA not before: Tue 21 Oct 2025 13:50:56 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8e:6a:af:c0:d1:90:2e:91:ae:5d:ad:4d:54:6e:ed:14:b1:52:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:50:56 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=35b73baeb92bb5abdda21c7689bbe8d86d992b23bc025a1dbff731021c41c8da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:d6:ce:65:a3:8e:95:52:26:dd:3e:42:39:
27:ca:ee:1b:9d:05:70:5d:7d:a6:83:9e:9c:5d:ed:
d8:59:41:45:87:20:2c:79:71:6f:52:19:ea:1f:24:
b8:92:73:21:61:08:f5:8c:c1:c2:73:f3:b8:75:7f:
31:56:85:04:e6:e2:b5:79:81:0b:a0:f0:ba:42:4f:
25:98:af:65:fe:15:e6:ca:04:84:28:51:8e:b0:0d:
8d:3d:87:ea:9e:23:f4:69:0a:a7:ab:42:9d:0a:49:
9f:62:bc:ae:82:b2:f0:12:af:8e:79:cf:5f:6f:0d:
60:64:6e:67:0c:34:93:20:44:12:70:76:30:f6:6c:
7f:ce:72:0a:1a:de:32:11:0d:46:78:6b:b2:f5:01:
c6:37:d7:9b:22:62:6e:43:63:ca:68:2a:99:f3:ae:
b6:3a:c7:b4:a6:90:15:e1:79:09:2e:f8:5c:38:a7:
18:27:38:90:97:f1:50:7c:0f:44:a4:71:9d:d8:fc:
66:e9:65:47:79:95:aa:3d:c7:76:c7:34:39:cc:95:
ba:52:fb:4a:b6:de:59:76:e9:78:56:72:40:c0:50:
37:5f:43:ac:d8:4b:65:5f:69:79:59:f2:ef:7e:8a:
05:fc:32:0f:96:ad:8a:94:7c:8c:6e:6c:21:d5:1b:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:FF:A7:93:05:0B:A8:24:AE:3C:26:7E:26:32:4E:41:1F:39:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2080::/48
Signature Algorithm: sha256WithRSAEncryption
c0:a6:d4:81:62:d2:e1:0b:a0:84:69:8f:a6:8e:94:04:07:be:
d3:55:af:b2:af:90:93:4e:a6:e7:b8:66:1a:fd:8a:69:a4:ff:
90:7d:cf:e2:68:a2:72:49:c4:8b:95:a4:01:85:f8:91:98:21:
fe:f9:08:42:4e:e6:0e:d7:83:17:c6:76:9a:7a:98:bf:7b:ca:
dd:3c:d5:3d:57:58:a1:3d:8b:57:64:30:ed:d2:93:2f:1c:d6:
3e:e6:c8:25:eb:af:2e:8a:c7:fd:79:6d:15:d5:c7:90:5a:c3:
43:df:c9:15:0f:77:c0:59:d3:15:64:7d:2b:a9:45:ef:47:7b:
2c:af:e4:40:96:37:60:cf:bc:a0:96:43:a6:b5:85:a4:95:af:
13:3f:18:5e:9f:71:b0:7b:58:af:39:bf:d2:ca:0f:3d:c4:4e:
c0:2e:10:fe:ea:77:df:41:a2:e8:4a:d9:7e:c7:7e:04:a0:07:
35:dc:aa:1c:18:3d:97:02:df:90:f4:63:46:eb:3c:55:75:9d:
cf:09:90:ca:bb:cc:79:70:78:f5:6c:00:af:bd:2f:34:85:47:
ce:ed:c1:43:3b:8b:67:77:ed:44:95:e8:a3:a3:b3:68:07:42:
de:e5:ab:b8:18:ab:67:40:75:30:be:70:92:c4:2e:e6:75:1b:
4a:dd:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:21:11 2025 by rpki-client