Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa
File: 9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa (raw, json)
Hash identifier: QWHzC4KRBgP3udGHDb+vhOmH8upRYOveC3Etn89fLpw=
Subject key identifier: 8C:37:0C:7A:0D:F2:D2:94:D1:0A:AC:64:7C:02:D6:7C:10:2C:0C:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72C7B84379BE989C4E7A88D177E237C7342A49F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa
Signing time: Mon 25 Aug 2025 16:37:10 +0000
ROA not before: Mon 25 Aug 2025 16:37:10 +0000
ROA not after: Mon 29 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c7:b8:43:79:be:98:9c:4e:7a:88:d1:77:e2:37:c7:34:2a:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 25 16:37:10 2025 GMT
Not After : Sep 29 23:59:59 2025 GMT
Subject: serialNumber=5d0f1b2601d20a13698b01c8823b24a59249996ff7a6a383e59396a17f51c4e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:34:12:c3:09:69:7d:84:0a:99:91:1f:cd:
a6:28:aa:12:c3:79:cd:88:21:b7:60:c4:51:ba:41:
6e:be:22:17:ef:ba:78:f0:b6:1e:01:1a:8f:ab:8f:
48:9f:bf:7f:a7:82:39:4e:75:4c:2c:12:fd:db:aa:
7e:41:cb:70:3c:e7:31:f6:e5:87:c5:c4:d2:e7:70:
bb:6f:c8:32:ae:bc:cc:f4:38:f7:31:b4:97:8d:ad:
bd:16:85:11:c9:ed:6a:d8:25:78:12:38:15:f5:15:
81:32:b6:cb:6d:ea:f4:e0:51:ec:e6:71:0d:4c:16:
05:72:3a:2e:59:4c:4a:c9:4d:4d:a0:0b:08:94:70:
cf:f5:4c:75:6a:48:fa:eb:3a:d7:51:cd:c3:26:7c:
4d:23:2e:94:d4:bb:95:27:50:aa:cc:37:24:80:0d:
16:b8:01:b7:62:64:a0:07:69:cd:31:7f:bc:83:3f:
a1:d7:f0:dc:b3:20:94:ec:b6:55:3c:d4:32:e5:eb:
05:cc:22:43:f0:40:6e:41:c3:be:85:3c:2d:1c:83:
64:49:22:bc:97:fd:43:3b:6e:0d:b1:ca:9a:62:35:
1a:3c:c5:43:cd:9e:51:a7:0f:ee:0a:84:d8:5c:88:
0d:c4:b0:38:df:00:fd:64:79:49:6f:84:26:24:5e:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:0C:7A:0D:F2:D2:94:D1:0A:AC:64:7C:02:D6:7C:10:2C:0C:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dfe8c65-fd5b-4597-be4a-0e094c59c40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:c000::/48
Signature Algorithm: sha256WithRSAEncryption
af:94:b5:da:b4:22:ab:58:6e:82:2c:fd:16:91:85:97:e6:1d:
32:0a:8d:ab:fe:5f:0c:56:f3:43:f2:41:38:7f:ca:70:7d:f3:
b0:54:ed:a8:20:8b:0e:6c:cc:18:d1:3c:f9:6a:38:4c:80:c0:
d2:d3:b5:4d:95:af:97:9d:83:4e:8e:f6:a3:d4:1f:9b:33:a5:
f4:0f:ab:92:88:8f:0e:88:b2:15:da:58:20:84:b7:68:b6:09:
57:1a:03:ae:b4:f0:4b:7d:31:f8:b7:02:86:37:33:72:7c:10:
71:d8:56:71:89:55:18:b2:02:b9:9b:b2:40:ee:59:37:f7:e5:
08:b7:9d:95:55:89:b8:90:9c:36:c5:cd:99:61:33:3e:55:43:
e2:5d:f4:15:b3:d3:23:b2:2c:33:7f:7b:85:8e:63:6c:fa:0e:
04:5d:6d:b9:ec:8d:34:04:6b:64:d3:5d:a1:c5:01:62:84:20:
d4:08:0c:f8:a5:d9:f2:a0:bc:3b:90:e7:ff:31:78:00:ac:61:
11:12:ee:cc:4c:c7:e0:b2:04:0c:3e:25:37:6e:20:a6:90:2b:
d2:98:2e:3a:6f:5e:ac:0f:65:11:d0:75:92:0c:f7:c3:16:29:
cd:10:d8:5b:6d:8e:d5:94:2e:a6:be:c1:0a:34:be:6c:e7:ae:
9f:86:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:22 2025 by rpki-client