Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
File: 7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa (raw, json)
Hash identifier: qvcNmP8tJQRny3fXXOEo5gHazJroP50Yuw9fmm2JsZk=
Subject key identifier: 8A:3D:FD:D4:70:89:00:38:42:8E:4E:FF:AD:C0:F4:C6:06:32:6F:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29B8DD7BA28E291D76204498A9A9C5AB315061C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
Signing time: Tue 21 Oct 2025 13:10:45 +0000
ROA not before: Tue 21 Oct 2025 13:10:45 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b8:dd:7b:a2:8e:29:1d:76:20:44:98:a9:a9:c5:ab:31:50:61:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:10:45 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=0641f9aea3b5d0f07d8808b001165178558e31302fb0f21ebb9d396e8be7c37e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:1c:db:94:64:50:b2:7b:4a:5d:86:61:05:
2e:25:08:59:6e:f1:b9:99:ac:a8:45:6a:0e:f1:60:
3c:7e:c0:96:da:1d:a9:2e:a5:43:a2:6f:61:d9:fd:
7b:d2:9e:5e:c5:dc:90:0b:78:df:50:8a:6f:c3:be:
37:66:e3:0e:9a:ff:57:fb:82:9a:02:9d:02:f2:54:
92:dd:90:52:bf:c2:08:78:96:f6:4d:49:d1:5b:d9:
92:ec:6b:95:53:26:ee:e0:e2:b2:90:7d:c2:13:c5:
f5:fe:9e:9c:a7:cc:60:21:3c:5e:01:47:9c:cc:25:
2e:91:b8:b5:ed:7a:f6:c9:d6:8c:8b:a7:62:20:90:
04:86:9c:3a:93:6d:9a:52:d3:0a:a5:47:a6:5b:90:
8e:1f:c2:bd:d4:fc:80:b8:32:c2:42:d3:76:0e:a8:
9c:ac:1b:50:ed:b3:1a:d8:8a:4e:43:5c:c5:2a:56:
8d:3b:bb:a8:8b:b5:3f:c9:ad:ce:c8:6e:c9:ce:2b:
99:cb:1c:d8:ee:4b:17:38:a4:7f:3a:85:4d:86:f7:
3c:9a:22:e0:7d:56:55:cb:af:29:aa:91:40:d9:cb:
62:67:bc:ca:ed:eb:df:28:41:e4:4e:fd:f6:5d:8d:
0b:69:4b:8b:9d:1c:2e:1a:9e:05:ea:5e:ea:5f:3b:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:FD:D4:70:89:00:38:42:8E:4E:FF:AD:C0:F4:C6:06:32:6F:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
b8:60:a6:4c:f6:1f:5b:fd:cd:3e:80:70:6a:a1:7c:d8:f6:39:
8c:dd:dc:b3:0e:07:f3:b1:9d:2c:d1:cb:85:7a:30:01:b3:b2:
e7:13:4f:bf:9d:93:58:d7:ed:5b:cf:3f:23:36:83:7b:67:6c:
37:68:8f:8b:16:7a:0a:6a:24:27:89:23:c8:87:7a:75:45:df:
86:23:7f:2b:82:8e:88:64:a3:a6:f1:81:be:15:1c:f8:6f:83:
c6:9f:e8:da:15:69:fd:85:4f:b7:65:85:8c:65:75:ff:75:93:
66:db:1b:46:3a:93:69:43:0a:ce:1b:6c:35:51:c1:b4:1d:f9:
1e:6d:cf:a0:6d:6a:db:7c:03:51:7b:44:0d:0e:22:85:07:96:
85:9b:21:20:f1:c1:70:93:8f:da:c0:f5:d3:48:e2:6a:57:75:
0c:c4:c3:90:cc:72:ef:bb:5a:4d:3b:75:db:99:9a:6e:a2:a6:
ac:0d:29:a2:ce:89:a9:38:a4:94:46:51:ad:7e:e1:e3:7a:d4:
2d:38:ff:bc:a3:7c:23:de:42:8d:7c:b5:b4:d9:3d:10:61:66:
eb:f2:89:c8:45:bc:32:6c:65:9f:ec:a6:9a:67:c8:2a:69:18:
2b:4e:fe:72:49:d9:98:aa:d6:7e:90:62:af:9f:d3:4c:e6:6c:
cf:63:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:18 2025 by rpki-client