Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
File: a7031a07-12ba-45f8-a53b-6bd5b713c999.roa (raw, json)
Hash identifier: iOKqZY8LNSTsmA+egq0o43R1ceGPq7JgeQDcgHV/9/A=
Subject key identifier: F2:9D:41:7F:C2:F7:B4:F6:D5:17:A5:B3:28:C8:01:1A:56:8F:52:22
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AB7A50F91C33865EBE1EBD0FF7517E65700E7CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
Signing time: Tue 21 Oct 2025 13:20:31 +0000
ROA not before: Tue 21 Oct 2025 13:20:31 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b7:a5:0f:91:c3:38:65:eb:e1:eb:d0:ff:75:17:e6:57:00:e7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:20:31 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=fa7d4a45776d8c3dec1bf221ebd2ce9ef339c7989fa64e9f4996f8e7656e03b4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:f3:25:99:f6:e6:9c:2e:bb:e5:b1:ad:d3:
2f:c3:97:56:9d:39:57:24:fb:21:bd:fe:21:3d:80:
f4:6e:c8:03:b4:59:2a:11:e5:ce:29:d8:1f:72:3d:
3c:3b:42:0a:39:59:69:9b:30:95:10:a1:15:03:c8:
c6:7d:fa:78:98:86:d9:3a:83:0e:89:74:16:26:80:
59:15:c9:3f:73:62:23:2d:cf:51:c8:a6:aa:10:63:
2b:ab:19:76:10:32:40:3c:98:90:85:f6:fb:63:ca:
ee:2c:7b:1b:d1:e9:55:34:65:8d:ef:55:ea:c7:d4:
b0:98:94:75:43:25:59:cb:2c:78:64:64:75:87:47:
b2:1a:d9:37:46:36:b5:17:05:44:02:11:00:22:79:
3d:66:8f:2d:8f:5b:d5:e4:42:1d:08:33:a9:9c:0c:
2d:79:89:38:be:0f:8a:78:ab:f8:9c:44:04:1c:53:
7b:26:32:8f:59:63:6a:9d:54:80:e5:31:83:f9:19:
63:9b:35:9f:37:46:51:9e:46:df:a4:1b:e2:a3:5c:
1b:fc:f8:d5:05:ec:8d:11:d4:a9:1d:f5:e2:ec:6d:
d6:62:cc:54:81:a0:48:1c:4f:75:4c:9f:cb:3f:0e:
59:c5:da:bc:3e:61:9a:e4:6c:00:b6:ed:3e:ed:09:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:41:7F:C2:F7:B4:F6:D5:17:A5:B3:28:C8:01:1A:56:8F:52:22
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:400::/38
Signature Algorithm: sha256WithRSAEncryption
1f:f0:7d:2c:62:43:25:7f:35:d3:f4:cf:d6:4c:10:f7:ca:3b:
b6:88:ba:90:20:8e:72:78:b8:37:14:d0:29:ca:b5:26:3d:da:
06:d2:45:03:44:81:d6:65:03:19:5e:ab:eb:3d:5c:97:50:6e:
bc:34:1d:b5:ac:a8:d8:77:c9:07:f8:00:23:1c:81:f6:6d:eb:
4e:01:69:83:cd:46:66:1f:4f:02:84:d5:fc:37:81:cd:0d:cb:
b2:08:9c:45:d4:02:76:f3:ad:d7:9d:30:03:73:28:92:71:1d:
e1:e5:30:a9:e7:ce:ec:29:c5:49:87:07:08:19:69:b2:a5:cc:
bb:60:64:a8:bd:77:8d:50:cd:fb:b0:96:80:bf:26:dd:59:c8:
d5:19:ce:fe:1d:de:98:37:8c:46:55:8b:75:39:98:a5:f4:6e:
8b:29:8e:71:02:ff:ab:bb:c6:06:2f:ec:9d:28:9c:4f:9a:e8:
5e:33:c5:63:df:ba:dd:56:f8:3f:90:b9:1e:13:7f:38:bd:23:
b5:7b:2f:40:bc:11:27:63:04:f3:e1:22:15:95:3f:65:68:86:
dd:0b:d4:98:10:62:df:13:cf:bf:bd:aa:ce:3b:7d:f3:7f:ab:
2d:01:bd:84:7e:15:00:2a:20:2f:ef:b4:5e:04:73:6d:d0:e8:
bc:f3:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:17 2025 by rpki-client