Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa
File: 9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa (raw, json)
Hash identifier: zTkgofn/iFO8mSbinSXp1ISjehTNds7Gsos73g4z5bE=
Subject key identifier: 73:7B:1F:F5:B5:73:4A:10:C7:B5:FA:5C:8F:5A:67:73:FF:DF:AD:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50DD0DEEDC4BE09E68CD682B06439A098FB6A4EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa
Signing time: Tue 21 Oct 2025 13:20:51 +0000
ROA not before: Tue 21 Oct 2025 13:20:51 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:dd:0d:ee:dc:4b:e0:9e:68:cd:68:2b:06:43:9a:09:8f:b6:a4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:20:51 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=fd5509b471b6b20cbe2beb70bb4967c1a3ef80d8d4394f448559fec94662f188, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:66:33:4b:dd:3f:2a:4d:78:b1:2f:d5:7d:
37:30:a0:df:f3:a9:00:73:a3:e3:d9:26:56:54:c9:
21:1f:7e:cb:d4:01:f0:ba:5c:51:3d:b2:99:64:e0:
10:20:c0:94:4f:24:be:2c:48:7e:2a:4a:8f:01:26:
a2:6c:0e:50:c9:dd:b3:53:2b:de:8c:26:12:90:59:
46:0f:b2:d3:1a:90:a4:24:19:46:d3:c8:28:99:b5:
04:d4:42:d5:ea:ab:6d:a8:d0:3a:ff:bf:7e:f5:c4:
de:a1:f8:07:2d:95:b9:9f:97:b1:18:52:34:11:25:
5b:b8:41:e1:e4:fb:5e:46:05:e2:1d:87:70:fa:30:
d8:db:78:17:74:8a:1f:d4:b4:4a:e6:40:b2:0a:9c:
5a:35:c6:24:3b:d6:38:54:2e:e9:6b:55:ef:f6:1a:
7b:45:f1:fb:a6:bd:46:f7:9c:c8:22:4e:7d:2f:68:
2d:2d:85:ff:23:6c:f4:39:61:2b:0e:ae:0c:ef:00:
09:ca:57:3e:65:4e:b5:07:5c:d9:78:e1:d6:ed:11:
89:34:34:ae:37:f4:03:80:f0:87:21:be:f7:8a:94:
fc:83:c4:da:06:0b:13:ae:4f:e9:c5:b5:78:76:9f:
44:3e:85:aa:cc:93:c5:ba:d6:b7:c8:fe:df:8e:c2:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7B:1F:F5:B5:73:4A:10:C7:B5:FA:5C:8F:5A:67:73:FF:DF:AD:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dcc70de-62b0-410a-8c40-d5102c9ccf7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:6000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:cd:3f:35:63:28:dc:a4:a0:f8:7d:08:1b:b5:80:05:33:2f:
0d:2d:ca:33:8f:ad:cf:b1:43:e1:ad:07:4f:db:03:ae:2d:00:
22:ee:6d:dd:4b:6f:f4:12:1f:3b:74:69:95:e1:ef:4b:a1:6f:
cd:87:78:72:fd:a6:34:d1:ff:f6:02:27:c1:92:49:2b:d9:d7:
0e:66:79:39:d7:84:84:40:ac:d4:e5:4b:30:69:a3:cf:73:34:
ce:52:94:6a:eb:4d:d7:49:f4:62:cc:a4:5b:42:02:39:0d:0c:
11:23:46:c6:5a:48:86:95:82:48:80:d7:45:f9:24:54:da:0f:
f5:89:98:6b:3d:65:58:3e:c5:e7:39:28:74:36:85:74:26:19:
be:c2:2d:3e:ea:37:16:f6:37:76:c1:d1:71:7c:09:ce:18:4b:
3c:a8:e2:c4:37:6d:8d:b0:b6:44:1e:92:10:b7:be:6a:3f:71:
e4:42:c7:c0:72:0b:dd:49:12:01:56:95:e2:da:2d:c6:13:75:
4f:8a:51:d1:90:95:02:10:ef:b8:77:48:d0:8b:6e:25:13:99:
da:fc:67:c1:b1:59:8d:b1:b7:07:79:45:b7:f7:07:b4:a0:9a:
bb:2c:18:fd:63:b2:7d:ab:16:db:50:56:ce:ec:f7:84:dc:96:
81:16:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:09 2025 by rpki-client