Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa
File: 92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa (raw, json)
Hash identifier: ECaljNqXwW8ZJ7I2yxsJx2P/A8fR8cMEZprl3IoOL+I=
Subject key identifier: C2:E1:59:1D:DD:01:17:2C:F0:26:78:8D:EE:4A:23:8D:D8:A5:B0:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41EABD8039296E0AEEED970530AC015007719B15
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa
Signing time: Tue 21 Oct 2025 13:40:48 +0000
ROA not before: Tue 21 Oct 2025 13:40:48 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ea:bd:80:39:29:6e:0a:ee:ed:97:05:30:ac:01:50:07:71:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:40:48 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=395d20e3402b33a664ad98da15217a5e4f4a90b0f55145440cc879d9b78795a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:d6:8e:c9:5c:65:5d:0b:22:84:34:af:48:
0d:e4:88:22:98:f0:e8:23:bd:4e:4d:4a:dd:88:48:
de:72:ee:28:6f:87:ec:70:6a:cd:77:71:20:5b:6f:
90:b4:80:7c:94:d9:fa:e9:8b:1b:73:6f:22:52:10:
db:69:c8:2a:c0:24:cf:c9:87:15:54:5b:e4:1d:2d:
a0:ec:03:03:89:d2:51:d5:50:49:57:27:1b:8b:cd:
a6:13:71:4d:4b:53:13:17:32:87:8e:c4:4e:c9:c7:
cc:ef:d4:d2:5e:4d:06:64:c5:fc:9d:ab:e1:13:36:
00:21:8e:8d:f9:96:8f:e9:24:50:55:b8:1c:0b:1d:
4c:da:11:9b:fd:88:f1:87:a2:46:87:74:be:cb:89:
cb:4b:d9:68:53:fa:cf:16:4e:a7:34:c8:0e:c4:b3:
4a:28:3a:06:fc:68:c0:d7:eb:46:e8:55:76:36:69:
1a:d8:92:dd:49:62:63:b4:93:44:b7:d7:0c:40:89:
87:bd:51:91:8b:d4:ef:b1:6e:1f:ec:2c:1e:60:39:
ee:72:5f:db:f5:da:b7:b7:40:f8:f2:6d:5d:0f:98:
86:8e:8d:de:d7:cb:7f:c5:49:ef:5c:2c:a8:75:bc:
2c:79:b9:43:6f:f0:d2:be:e1:19:eb:2d:c0:0a:16:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:59:1D:DD:01:17:2C:F0:26:78:8D:EE:4A:23:8D:D8:A5:B0:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:82:76:b7:24:33:54:c2:96:1f:e6:d2:0a:3a:72:b3:0f:c7:
46:f4:9c:02:ac:6f:b0:7d:e7:a9:0e:3a:e2:1b:1d:d6:2d:72:
03:e3:11:38:f7:8b:31:23:1f:a1:42:67:37:2c:a5:ce:5d:39:
e6:24:40:b8:30:69:de:ad:a7:5c:42:26:49:f2:30:12:2c:29:
2b:57:13:a8:11:47:4c:1a:fb:37:b5:f0:66:b3:9d:a2:d0:4f:
3b:3d:99:1a:42:b0:42:e3:5a:ce:49:94:d9:f3:70:eb:e2:93:
bd:4c:e9:35:d8:08:5e:db:b6:df:8d:cb:0c:27:90:36:c5:b3:
81:b4:3a:60:aa:ea:63:52:b2:96:b1:aa:44:81:7e:fd:af:0d:
55:0c:36:4d:08:df:65:c7:d7:16:30:a1:15:fb:5e:71:0a:63:
ee:a3:a9:a5:98:db:b4:ac:be:c5:a8:a2:ce:24:28:d4:b4:45:
3a:55:b9:d9:30:51:81:84:d4:3c:b3:15:a8:c1:ac:0c:6b:99:
86:06:6b:7b:20:23:03:71:08:0e:28:dd:5c:3c:78:80:d7:21:
20:58:2b:f1:15:a6:0d:af:5f:49:ba:49:85:dd:5a:ca:38:f6:
4f:22:ee:44:5a:fd:13:9a:0b:aa:69:2b:08:94:54:9f:9d:2a:
53:3a:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:25 2025 by rpki-client