Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: 1Rq9NGOmPBjff1cgNglVMALEjaICzwfufwqRugl9d6E=
Subject key identifier: B3:41:E0:38:6D:86:CF:CD:6D:C4:29:D8:31:17:E9:79:A1:77:69:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27D9A6643048831BFB6710A3073AC6832EA3E213
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Mon 01 Sep 2025 20:11:14 +0000
ROA not before: Mon 01 Sep 2025 20:11:14 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d9:a6:64:30:48:83:1b:fb:67:10:a3:07:3a:c6:83:2e:a3:e2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:11:14 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=c1d6dcb9b4646fe9c22687c2f267a99e7be3319d1483605358211ed1636ff13e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:14:0f:95:e7:c3:6b:af:27:2e:c5:33:50:
c7:91:97:d3:d9:0d:a9:86:f2:bc:ec:3d:e9:f5:55:
33:d4:24:ce:2b:3b:f8:1c:eb:71:2f:69:5e:aa:26:
f5:ca:e3:fc:62:8f:30:ad:08:3c:31:42:7a:50:3d:
57:b6:91:f2:eb:12:61:dc:bf:c8:09:31:3d:53:b9:
4d:3d:45:ca:ca:d5:2b:50:d5:6d:e9:fc:3c:95:cf:
50:3b:f1:3e:da:76:05:2f:79:94:76:24:59:a7:9c:
fe:75:3f:7e:0f:96:e7:19:3e:47:02:ce:f8:26:c4:
16:ca:7b:35:f3:59:38:7e:32:70:82:3f:fd:27:38:
1c:ae:54:dc:a2:08:3a:44:c6:7f:de:1d:21:64:0e:
55:7a:14:38:60:06:cd:02:70:12:a3:4b:d9:47:0d:
4f:f7:eb:f9:71:82:b0:9c:9d:30:b5:15:43:4b:df:
84:33:50:b0:a9:90:83:04:00:4c:6a:39:ef:31:2c:
56:c4:b9:5c:21:b1:dd:f5:7e:d9:ae:c5:5d:b1:7a:
7d:58:6b:f2:b3:4a:01:10:ea:a8:fc:ac:4b:20:d6:
c7:81:92:63:1c:22:bb:25:c4:f8:98:94:8d:f3:0e:
e4:54:91:88:29:e6:b7:3e:a7:7f:7e:83:f2:9a:7f:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:E0:38:6D:86:CF:CD:6D:C4:29:D8:31:17:E9:79:A1:77:69:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
6f:20:80:5e:01:5c:de:c7:f0:6e:d1:f1:ff:a2:7b:9d:cc:85:
22:e4:15:d2:17:60:f3:8d:d9:ad:d8:11:7f:d3:57:11:91:46:
62:ac:a1:9f:49:74:55:b7:4a:3e:e2:9c:af:4a:ea:a3:fb:60:
76:b1:6b:95:40:51:02:5f:d3:93:8a:a4:2e:cb:cb:42:d2:aa:
72:d2:6c:0d:da:e9:17:ee:19:c3:0f:dd:0b:4a:f9:0c:cd:70:
17:c2:41:10:5d:10:a4:ab:94:4f:ee:2b:07:2f:24:20:9b:8b:
98:7c:88:d2:d1:9e:b8:fa:f9:55:b2:ce:ea:00:9b:1b:51:a1:
1e:35:55:85:bc:35:e0:35:28:cb:a3:1a:44:0a:e6:5e:2b:c9:
f3:bc:7e:67:8a:c1:df:04:34:30:8d:de:1f:6e:63:ba:c2:bf:
87:d5:0b:99:9d:c7:ee:6d:70:cf:c0:41:d1:57:f5:1b:52:8f:
a9:d4:01:e7:47:c3:a9:21:75:04:7f:b5:50:a7:b5:33:b9:0e:
e1:5d:95:e3:02:33:d7:a7:29:19:ae:52:0f:5c:86:15:a4:3d:
cc:12:62:78:e1:a2:19:9f:c6:ed:cb:3d:cd:d9:f9:83:c2:cf:
77:49:f9:90:d8:41:32:00:d3:00:48:29:c2:d5:1d:fa:17:4d:
dd:5e:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:09 2025 by rpki-client