Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
File: ad363c67-ff83-46aa-9474-de02e382946b.roa (raw, json)
Hash identifier: OIvwGat3RGikJ1FGupW1C1MFAA7abTGHM+/xvUuV5L0=
Subject key identifier: 93:68:78:15:88:6F:82:44:A2:14:97:5E:78:60:09:B8:28:FE:02:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70B948BC0A3DE7EFBD5C40BA5FA26A39D26B6E8F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
Signing time: Tue 21 Oct 2025 13:40:33 +0000
ROA not before: Tue 21 Oct 2025 13:40:33 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b9:48:bc:0a:3d:e7:ef:bd:5c:40:ba:5f:a2:6a:39:d2:6b:6e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:40:33 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=d9e4c211ac333fcd9d0aef98f2f5488e80c37ec24dd4822668a0c10e5165e2ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:65:b3:05:86:37:62:30:ea:58:f6:ae:78:
79:37:23:f8:1d:73:97:84:1b:fd:a3:3c:3e:d8:53:
70:ff:08:5d:ee:89:e3:1c:c1:6c:d2:dc:01:a4:0d:
ea:b3:69:26:78:c9:b6:91:68:6f:cc:64:c9:36:a8:
32:cc:6b:38:ea:31:93:74:f9:01:2e:43:46:d1:38:
d4:28:7c:4a:9b:31:c3:87:bd:69:63:4d:12:83:70:
30:ff:85:61:73:6d:23:04:49:ad:27:ed:76:8d:12:
4a:67:bb:6f:59:4f:84:c9:75:9c:42:a6:76:0c:07:
c2:09:8a:77:24:6a:3c:54:65:ae:c8:69:92:7a:e9:
10:42:e4:d6:f5:a7:86:10:61:e4:f9:f7:2e:4f:53:
db:03:b6:10:5c:39:fb:de:5a:f9:ca:8f:8b:2c:ce:
67:1e:7d:54:ee:78:f3:92:20:a1:ce:1d:95:f3:dc:
6d:16:8e:e1:50:3f:01:80:73:ad:5b:c8:7c:ab:38:
38:c9:42:7a:13:06:2b:92:4b:32:f4:61:fe:d0:8e:
a3:6d:41:88:a0:2c:e9:0c:e1:43:be:db:bb:8a:b5:
6c:76:96:8a:95:69:ab:da:84:f3:bc:ff:89:10:58:
1c:be:f8:36:89:68:42:6b:ec:65:94:4a:38:8a:da:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:68:78:15:88:6F:82:44:A2:14:97:5E:78:60:09:B8:28:FE:02:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad363c67-ff83-46aa-9474-de02e382946b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:b000::/40
Signature Algorithm: sha256WithRSAEncryption
82:98:85:80:ca:81:60:4c:da:03:50:b1:06:b5:b1:c0:ad:3d:
7f:d2:28:58:fd:19:57:13:54:d2:ae:bc:8e:b0:4e:d3:98:ff:
f7:19:dd:a1:b1:b8:2a:d4:c3:48:d7:3e:e0:a3:48:38:5e:66:
8c:4c:a5:dc:5a:b3:3c:5f:eb:d6:88:d2:c4:10:8b:49:20:b4:
54:59:d9:fb:05:bd:f4:18:e1:d7:1c:e4:d6:10:98:f3:1b:a1:
13:80:1c:f5:3c:84:76:f2:60:ca:fc:1a:6a:c4:35:2a:4e:6a:
79:39:ba:07:ca:ed:f2:04:c2:0e:ef:9b:83:4c:f9:42:b3:b7:
19:d4:dd:76:0f:d3:3f:d6:99:aa:f2:87:67:9b:67:08:cc:5f:
b8:6a:9f:ad:8b:dc:b8:f2:b8:2b:cf:9f:45:87:45:f7:b7:3e:
e4:42:64:59:f5:a1:68:93:97:8c:f5:8e:04:f2:30:13:c8:e5:
e8:6c:04:c6:41:5a:a1:c0:ae:c4:d8:ef:4e:6d:02:c1:ea:d1:
bd:10:ee:41:3e:c7:cc:01:61:8b:1d:ac:cd:7e:8e:4f:6f:96:
6d:7e:b1:78:71:ea:68:27:5b:74:05:70:57:cb:09:5c:22:d0:
2c:cb:f9:82:f3:d8:d4:84:f1:c9:aa:87:a3:d7:75:10:f2:83:
d7:e2:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:28 2025 by rpki-client