Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
File: 98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa (raw, json)
Hash identifier: 0EyNFVfe9R1Omouwjqna6IZNiQ6SMisqlRUc0U5OUYY=
Subject key identifier: C2:86:1C:BC:9E:F1:93:3C:F7:9D:02:08:B8:AB:07:07:AA:50:27:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AC917C8627747BD11018E5D0E805FF5577D460D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
Signing time: Tue 21 Oct 2025 14:00:34 +0000
ROA not before: Tue 21 Oct 2025 14:00:34 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c9:17:c8:62:77:47:bd:11:01:8e:5d:0e:80:5f:f5:57:7d:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:34 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=02e547a0a482c717224b227d908460c49af341ea1103c4b4493ff416770e39f9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:63:ac:bb:39:67:23:85:6f:52:2d:6e:f4:
b5:20:25:d8:f6:9f:eb:12:6d:91:10:a6:a6:d3:75:
b1:ea:b7:3d:2b:32:f1:84:93:ff:e4:f3:6c:1c:31:
e4:03:b6:47:48:29:c7:56:41:bc:f1:f4:f8:ce:32:
05:e9:08:77:4d:01:bf:0a:ef:c8:9e:5c:ce:f4:64:
67:ac:b6:d5:76:31:d8:58:40:f4:0b:c3:59:36:c6:
a2:7f:e0:f9:92:01:27:33:2a:1e:f8:b3:91:3a:b8:
f6:82:89:34:bf:3d:9a:b9:8a:c0:6b:de:4d:ae:70:
57:e6:7b:dd:85:55:3e:57:ba:f0:fc:7c:f2:43:f8:
7b:b9:14:b7:e0:a0:f3:2e:45:a9:5e:86:14:0b:95:
a3:51:f3:65:82:10:80:36:10:e1:bb:62:29:9d:27:
7c:e9:86:d6:be:72:2e:41:c8:ad:c0:1c:60:b5:cd:
f3:e1:59:e3:a8:58:0b:d4:35:1a:37:fb:60:ae:e3:
56:27:ff:6b:70:4f:c0:bd:c5:ca:a6:32:28:4f:f2:
1e:c4:ce:87:90:51:9b:ac:b3:7b:86:b9:a7:2e:2f:
02:2e:6e:64:e1:25:92:7d:91:78:44:07:6f:c0:e2:
f4:d1:01:88:e5:1e:68:1b:98:51:47:e9:b9:50:76:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:1C:BC:9E:F1:93:3C:F7:9D:02:08:B8:AB:07:07:AA:50:27:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/36
Signature Algorithm: sha256WithRSAEncryption
be:e5:6a:0f:57:05:3b:42:92:e3:96:87:b0:94:99:1e:b4:06:
28:ae:b5:7a:60:8a:d5:e5:df:eb:54:b9:e8:fc:f4:0a:ec:63:
b9:e3:84:c1:00:84:64:a8:d2:10:4c:2f:f0:b8:fd:f2:5c:4b:
55:01:ac:4f:b5:8f:5e:15:b7:73:28:ba:a6:1e:9a:a0:a7:f3:
14:b3:1c:59:7e:41:02:45:34:df:9b:dc:05:59:33:14:da:fa:
67:81:f4:a9:04:28:00:99:29:74:eb:5e:7f:59:86:7b:bb:89:
02:8f:5b:ec:1a:84:2d:46:85:d7:5f:49:b2:1b:ee:69:76:8c:
66:41:ec:60:85:e7:72:b4:46:96:87:91:be:17:27:8c:14:c5:
87:78:74:a4:b7:7e:a1:cf:27:c2:5f:e8:4d:27:a4:8f:f5:1f:
5a:18:6e:e6:38:af:2a:ef:c1:fd:f5:d0:28:ee:94:2d:05:cd:
ff:90:b3:2f:6f:f4:2b:cb:0f:cf:64:ac:e8:f3:5c:df:04:13:
e0:71:7c:2d:88:ae:4a:85:17:36:85:a4:35:4e:4b:af:44:5e:
28:47:8d:a8:95:76:06:8e:8c:c3:ff:05:19:d2:b9:cc:fd:42:
bf:7c:bb:51:74:f2:de:f1:c2:22:db:db:b2:0c:34:ac:b1:19:
8a:fc:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:15 2025 by rpki-client