Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File: 9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier: NF1F21J2qn/Gwbd3YUYBTjvo5hl8TASS8RifcT+fMeM=
Subject key identifier: 49:12:CD:C4:40:6B:87:CE:BE:0D:01:A4:94:6A:B9:C0:BE:60:94:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AD61D96E2719A9F7DA341721FA9473408FB1C5C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time: Tue 21 Oct 2025 14:00:35 +0000
ROA not before: Tue 21 Oct 2025 14:00:35 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d6:1d:96:e2:71:9a:9f:7d:a3:41:72:1f:a9:47:34:08:fb:1c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:35 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=849fe4444edfed1803036b3ba9f8150c26ef79f3bd33846d6ffa2f692c9c29de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:87:5d:5c:73:54:71:92:2f:dc:33:d9:6c:
1c:ef:05:e9:ad:ff:cd:50:a5:cd:c6:e4:db:bf:c4:
87:83:d1:cb:9b:ba:49:48:d1:80:dd:58:3a:f8:57:
de:b9:02:79:a1:00:10:28:4d:ec:5d:d2:50:4c:14:
4b:4f:1c:1a:bf:9e:b7:29:4e:fd:fc:c8:8d:51:10:
15:8a:ac:65:e3:64:97:74:85:80:88:06:6f:aa:21:
29:10:b2:37:13:3d:6b:a3:2c:f1:02:8d:d8:9c:a3:
e9:2b:9b:69:52:dd:f5:e1:8d:76:df:42:16:7a:1f:
b6:0b:b9:c1:40:0b:da:62:18:e4:f4:b6:59:a2:f9:
19:99:c6:1b:81:d1:fe:97:c0:77:1e:de:43:9c:43:
68:cb:8e:86:a0:0d:0a:a2:5b:b1:19:be:2e:29:dd:
ee:e3:e9:46:05:06:06:0d:ec:c8:16:46:25:ec:4a:
b0:14:df:aa:0d:b4:29:64:6a:51:d4:6a:6f:01:ab:
b1:38:62:82:b4:e5:23:97:16:6a:f7:59:1c:62:47:
3a:dd:56:c9:3f:64:99:4b:be:fe:48:cb:f6:08:9f:
fd:00:58:e2:df:01:d1:43:4c:cb:ba:96:5b:23:64:
cc:db:37:89:79:33:75:ff:af:b6:e3:7f:9a:db:8c:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:CD:C4:40:6B:87:CE:BE:0D:01:A4:94:6A:B9:C0:BE:60:94:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/38
Signature Algorithm: sha256WithRSAEncryption
8b:3b:08:27:3a:0c:b0:fb:c0:4f:a1:7c:c1:09:ba:23:1e:3d:
9b:d3:b8:95:9f:69:50:db:af:f5:c9:7c:f7:19:a7:35:9f:f7:
9a:73:76:c1:21:d0:d2:8d:bd:90:d8:16:10:e3:6f:61:1a:e5:
ca:31:3e:88:c0:37:00:11:f8:1b:d6:0e:1f:10:ab:d6:95:d9:
16:32:7f:88:92:73:76:8a:2e:36:aa:d8:a9:73:19:bd:95:17:
36:71:60:f2:b7:3b:c0:a7:3a:86:bd:30:af:69:1f:90:91:0b:
3e:17:f9:a2:1c:26:b2:93:36:d1:5d:2b:86:0e:d2:c8:e7:49:
85:3f:29:c5:a4:57:50:2a:61:f4:c2:31:8b:32:5b:b5:24:d6:
2c:8d:71:8b:70:20:d9:1a:e9:b5:c7:2b:93:f0:50:2e:2a:c3:
e6:4e:1b:ef:02:d4:66:3c:10:99:1c:3e:f8:4e:4a:0c:81:bc:
09:91:40:4c:54:1e:c7:d9:02:1d:7e:c0:a1:dd:41:d9:32:a5:
87:f7:d2:81:85:45:62:fd:01:53:31:67:72:41:92:94:79:35:
0a:c2:1c:f8:cc:64:a3:cb:b5:89:4f:bf:49:44:2e:36:91:f3:
12:a4:b8:c6:c6:c3:1f:1d:b6:0b:af:47:c2:31:76:2a:4f:4d:
85:82:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:21 2025 by rpki-client