Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
File: acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa (raw, json)
Hash identifier: f80RKfJ3bFE2oNi0wQrJKFXp/RQ6LBejSunreEy/b3E=
Subject key identifier: 16:7F:C3:89:61:27:D1:50:61:B2:9E:E1:6B:40:24:AE:57:C4:46:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 239857D215B06DBB14720241575458F2ACEF1D33
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
Signing time: Tue 21 Oct 2025 14:00:11 +0000
ROA not before: Tue 21 Oct 2025 14:00:11 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:98:57:d2:15:b0:6d:bb:14:72:02:41:57:54:58:f2:ac:ef:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:11 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=2821d9e5a582ca63a8df6c7cbc3c3bce7d6a8e245db9d963acfef37704b4f43e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:b5:83:11:53:9e:cd:c6:fa:8d:c2:c7:20:
54:12:a3:c7:06:2c:79:ab:22:18:ac:b5:43:bb:b0:
14:8a:f3:2e:90:8f:70:64:e3:15:fa:5c:5d:97:7b:
23:f8:d1:b8:18:06:16:9d:60:e0:f7:0d:9e:85:30:
57:91:33:f6:27:8b:2b:03:5b:bd:48:b9:3a:af:1d:
4d:51:65:5a:94:e9:6d:ac:e3:92:84:5f:11:78:ea:
b1:d3:ee:56:0d:34:79:26:80:cf:ad:31:ed:bf:0a:
3d:83:d7:78:e2:0c:21:9d:1d:d1:44:f6:64:87:e6:
62:45:30:e5:46:24:0d:f8:40:bd:bd:00:cd:8e:3d:
b9:b8:13:74:71:a2:cc:43:71:40:ba:bf:7f:84:31:
a2:85:da:a6:c1:9b:6c:07:bd:f2:d0:81:ea:93:64:
89:24:37:a8:d1:a8:a5:b4:9f:39:5b:a0:0f:15:11:
b5:02:8e:b7:3c:86:61:8e:88:b2:a2:a1:99:9f:1f:
7c:39:fc:88:2e:54:cd:cd:85:ec:52:3f:20:41:47:
35:84:bf:79:e0:b6:a5:7d:84:8d:0f:52:cb:8a:80:
2c:53:dd:25:03:98:21:50:a3:dc:ec:cb:9a:a9:1a:
72:66:21:55:c3:f2:f9:39:12:f8:91:9c:3e:84:99:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:C3:89:61:27:D1:50:61:B2:9E:E1:6B:40:24:AE:57:C4:46:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/acfdcdb7-5b43-4d3e-81fe-f8cd78411d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:6040::/48
Signature Algorithm: sha256WithRSAEncryption
4e:55:02:e8:54:22:bf:33:30:72:66:e4:9e:ac:02:89:ad:61:
ee:5c:e8:ec:bb:0f:65:0b:47:67:f9:89:c5:2a:2c:1a:85:d1:
77:5e:b7:7e:82:cb:97:49:ec:1c:3e:25:49:16:b2:34:b3:23:
bd:72:23:ed:21:0a:f6:0f:ac:4a:57:f5:04:50:35:2b:91:82:
f6:f3:17:12:7e:a3:79:93:40:a4:28:09:ee:42:87:d2:7d:b0:
ef:d7:b1:2d:00:c9:16:94:ce:5d:7a:c7:db:3e:d7:26:ac:4a:
85:f8:9d:99:7e:a8:69:7f:e8:58:1f:aa:a5:8f:1b:4b:09:9f:
ea:99:05:7e:3f:e1:d7:eb:05:c7:3e:d1:35:3d:4d:ba:55:48:
e4:2d:f6:f6:06:27:ba:a2:06:b0:eb:45:8c:05:66:eb:3a:6e:
cd:da:35:22:90:28:0b:74:c1:e6:14:a6:6e:d5:41:d5:a8:16:
28:a6:44:6e:38:29:58:c8:bd:4d:2d:a3:cb:75:ce:19:b0:37:
09:77:45:ee:d4:b4:b8:7e:2d:a5:8d:52:c5:8a:6d:53:07:a9:
0e:0d:95:d8:37:1b:c0:64:75:be:25:2e:b1:4e:56:2c:d3:72:
e1:a6:ec:7f:de:24:91:e4:32:17:51:22:31:ff:38:00:00:7d:
84:0c:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:12:03 2025 by rpki-client