Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa
File: 9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa (raw, json)
Hash identifier: GGv6pa/GCXcuRDhEjtRe/oVC+oKN219w+PmXwX5vf8I=
Subject key identifier: 78:6E:4A:CC:BD:0B:EC:A2:E8:AE:FA:16:8F:DE:E8:11:95:C8:4D:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E71811DB1E83767D8BB38A99FFD4FD491CD1F42
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa
Signing time: Mon 01 Sep 2025 19:30:18 +0000
ROA not before: Mon 01 Sep 2025 19:30:18 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:71:81:1d:b1:e8:37:67:d8:bb:38:a9:9f:fd:4f:d4:91:cd:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:30:18 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=5fae3efe5dab154daf8c58c423d5acbab406326dee5f9791119d3afd25e822bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:88:3a:e1:46:4f:ad:00:4a:5c:05:e1:e8:
8d:35:57:1a:3c:d6:b9:99:bc:ce:6e:f0:8d:53:44:
23:8c:1b:7c:a3:7b:dd:b6:20:82:ad:cf:b8:23:22:
d8:c1:df:90:fc:14:85:8a:56:21:15:b9:1a:e0:28:
2c:6e:02:5d:03:bb:c2:c6:5a:6d:28:67:d3:38:8c:
ca:0e:92:c4:c4:1b:35:ed:47:c4:23:d5:54:02:c8:
e5:94:b4:ee:40:e6:46:ae:10:d5:87:f5:50:78:d6:
73:25:bb:d2:1d:e8:d4:20:89:43:fa:8e:b8:37:12:
85:ed:11:75:f4:6a:b5:d4:da:a3:0a:11:e2:75:d3:
0f:35:bc:90:d9:2c:17:88:b4:f2:30:2a:3c:0e:05:
47:6b:0f:f8:31:8b:f9:64:66:54:a7:fe:13:c6:4f:
22:0b:78:b0:ad:f0:de:31:b2:f5:90:db:62:17:71:
45:67:5a:1a:5c:01:23:94:1c:3e:95:65:09:7b:25:
ad:c5:f8:0d:7f:26:3e:87:59:fa:f4:b9:43:a5:8b:
cc:84:51:30:a5:99:20:b7:20:0d:c8:37:1b:15:da:
3c:8c:1a:2e:5f:fa:20:a3:58:14:22:47:3e:e8:76:
ce:64:6f:9b:e9:ee:e2:35:fd:27:07:ef:6a:b6:8a:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:4A:CC:BD:0B:EC:A2:E8:AE:FA:16:8F:DE:E8:11:95:C8:4D:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9926a15e-d7fd-4d7b-ad1e-d0df98f546cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9080::/48
Signature Algorithm: sha256WithRSAEncryption
01:b3:eb:60:82:7a:3a:69:0c:1d:18:22:43:02:a0:8c:90:e7:
48:8c:d2:a2:2c:ad:3b:87:c7:6a:bf:07:93:25:67:58:0c:4e:
e9:34:31:7f:bb:4a:59:ae:70:8d:d0:c8:64:29:8b:51:de:b1:
99:cb:dd:63:36:6f:c0:b5:d2:81:dd:3a:19:f2:86:a7:cc:b6:
f7:72:01:d8:4e:67:20:52:a3:62:d5:bf:14:78:6b:0b:d4:4d:
f5:3e:d2:43:fb:c7:23:a9:4d:5a:84:35:c5:9d:39:b9:66:26:
f3:c6:dd:fe:df:c7:fc:ec:61:dd:17:75:fa:d1:79:cc:db:99:
ca:eb:c9:1f:00:e0:fd:78:09:3c:8f:c0:f0:e6:6d:64:d1:b2:
69:44:73:73:3d:31:45:fd:0b:97:2b:40:2d:ca:0b:ba:c1:b1:
eb:19:1b:f1:a3:23:15:d2:27:d9:88:fa:d2:86:a2:b7:8f:12:
e0:d5:d1:86:4c:16:e6:6a:26:e4:6f:49:0f:eb:5e:5f:69:13:
c1:4d:66:d6:74:0f:e7:95:00:d7:08:e5:ad:8d:ef:f5:13:ee:
93:c7:5f:ca:77:a5:2c:26:a9:e6:7f:65:4f:5f:47:4c:e6:91:
44:38:90:37:69:63:0c:17:a3:8e:62:48:9b:3e:1d:20:a1:d7:
a0:9d:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:04 2025 by rpki-client