Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier: M1cEo3R9Hazh2BMQ0ji0SJDmaEgD6RVjOZ905nDKfNA=
Subject key identifier: 57:75:6E:C0:EF:05:1A:B9:17:30:2E:64:7C:3B:63:9D:3E:7E:D6:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42A3B2499E2586F6393412044E4AC309E0E41136
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time: Wed 22 Oct 2025 00:20:07 +0000
ROA not before: Wed 22 Oct 2025 00:20:07 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a3:b2:49:9e:25:86:f6:39:34:12:04:4e:4a:c3:09:e0:e4:11:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 00:20:07 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=152af7270033e9ee2a3a2c01d3225c6d67721e17e13d28328647649cff4e733b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:05:b2:78:b8:7b:a8:a2:7f:b1:41:e9:40:
f3:bf:bf:08:5f:4d:47:a0:a9:f1:f9:a0:8e:f6:97:
b3:54:91:36:a3:19:cd:06:fc:f3:48:96:85:52:0d:
53:c8:18:7e:35:85:b9:48:25:d0:70:1f:83:ce:eb:
7d:38:1d:94:25:71:c0:07:42:a4:08:53:8f:cb:ad:
23:3a:9c:e4:74:80:2c:81:7c:5b:91:37:e5:8e:68:
4d:9d:6d:d4:a1:e9:88:50:b8:97:45:e2:ad:3c:15:
d9:83:83:fa:16:4d:09:6f:c8:85:ae:8b:dd:c6:a3:
fd:2f:01:42:c8:52:27:f4:fc:a6:d6:05:ec:5c:c2:
eb:54:08:51:64:df:f0:c5:ec:ff:db:ed:b5:7f:c6:
46:ab:35:dc:3d:45:5e:9f:30:b2:d5:9f:75:59:83:
06:bd:d0:10:34:20:9b:6b:23:38:50:00:47:05:aa:
ef:a4:20:9f:64:ef:2c:73:14:9e:8e:8b:87:6d:44:
16:a7:b7:7d:0e:8d:e2:8c:de:80:d7:7d:1c:a8:8f:
43:82:92:d2:83:c1:7b:a1:ea:79:45:84:a2:3b:a1:
1d:6b:6e:f3:86:11:6c:8c:9f:54:82:c7:a8:a9:a8:
c5:1d:55:32:5d:48:cd:ec:ce:d1:24:78:66:d8:d7:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:6E:C0:EF:05:1A:B9:17:30:2E:64:7C:3B:63:9D:3E:7E:D6:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:c0:1c:d2:35:6f:5f:d7:15:bb:59:52:8a:0e:89:d3:a2:05:
7a:52:ad:61:31:06:fa:f4:de:88:34:68:d5:b0:ac:1c:87:0b:
7b:40:12:73:4c:bd:bb:e5:57:a0:f1:37:3e:88:76:26:fa:bf:
1e:fe:7d:c8:d8:98:5a:e8:d4:b8:0a:d7:37:3d:d2:3a:f6:77:
db:e4:ec:7b:3e:af:c3:be:8f:0c:29:f9:03:f3:97:7c:6e:6f:
a2:15:5f:46:b7:20:ca:55:aa:2e:37:f9:4c:eb:0e:cf:a7:35:
7f:2e:de:d8:f9:5e:08:cc:17:ae:27:2f:91:18:64:35:a3:04:
39:2c:61:02:8e:34:dc:27:59:78:2e:5f:ab:48:c6:dc:a4:f1:
73:3f:93:a4:ee:66:7a:d8:67:ad:68:02:cd:39:c2:1f:dc:2b:
2b:6c:2e:5e:e6:82:fc:38:66:e9:b3:3f:eb:9f:6c:0c:d6:fc:
38:5e:d8:9d:c9:61:b6:ba:52:37:04:09:64:8d:d1:21:32:1a:
0f:02:80:bf:f4:24:7f:f1:a9:3e:c2:74:5a:d0:71:25:76:71:
f3:b4:60:8c:08:7e:df:52:86:9b:7f:3d:50:e9:29:8f:c2:ce:
5d:e8:53:f2:b8:53:66:9d:18:ca:f1:a2:f0:92:4f:6a:64:29:
5a:2a:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:21:11 2025 by rpki-client