Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa
File: b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa (raw, json)
Hash identifier: jiw0UTN72Ws/eeVjrwWS+DrxIXO25BSMbfqEGln4wYA=
Subject key identifier: 1A:75:79:E0:3F:C6:C9:42:3E:B1:F7:35:19:DB:18:F0:5C:74:AC:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54CF749BB307899B75C40F8A7F7F81036B229101
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa
Signing time: Tue 21 Oct 2025 13:41:14 +0000
ROA not before: Tue 21 Oct 2025 13:41:14 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cf:74:9b:b3:07:89:9b:75:c4:0f:8a:7f:7f:81:03:6b:22:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:41:14 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=464bacbba6ef4ed52edd3defd396bb7d156e3420feec0a7211ef85b44bcccbaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:0a:fa:c0:bf:f7:4f:61:f1:2f:36:b3:24:
3e:4e:1b:e4:3d:95:a1:57:03:f7:1e:a6:6a:c9:dd:
95:1f:4f:38:7e:e3:5b:9c:c2:69:25:af:e3:b4:18:
18:e4:7a:14:1d:b2:0e:39:de:09:4b:81:06:c6:71:
fe:50:fb:fe:e1:99:e0:38:21:a8:89:ef:c4:66:2e:
92:50:0b:5f:5b:62:83:5c:d1:d1:d9:82:61:76:be:
39:71:ed:ca:2c:13:61:d3:04:71:ff:88:08:1f:44:
7b:98:75:7f:a7:05:2b:cc:b1:df:5c:05:16:b0:2a:
cd:73:21:ff:e6:9b:8b:7f:e5:9e:04:da:08:55:11:
17:91:aa:51:ff:b1:c0:3c:b2:ac:56:bb:17:3a:71:
ab:0b:de:70:a1:53:c9:d6:c6:a3:39:12:94:c0:a6:
90:a2:31:d4:8f:71:0e:9a:86:90:e8:1a:26:99:34:
61:4c:b2:f0:ee:a4:0c:b3:09:52:6f:c4:cf:27:cb:
7b:09:4d:cc:43:08:93:47:e8:73:3c:ee:f1:35:5a:
d7:9e:0f:7a:ca:e7:7b:df:7d:fb:c3:6a:3c:07:e7:
62:33:1a:89:5b:aa:74:e7:04:d7:7a:75:ba:43:00:
4f:41:88:c0:16:9e:aa:d3:e0:4a:ca:21:a7:c4:77:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:79:E0:3F:C6:C9:42:3E:B1:F7:35:19:DB:18:F0:5C:74:AC:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:400::/38
Signature Algorithm: sha256WithRSAEncryption
ac:9a:f5:50:2a:e2:a7:24:70:af:81:e4:41:90:a3:cf:1a:1f:
51:a2:e1:0e:f9:a0:fe:1d:de:77:08:37:ab:9b:bf:6f:e6:41:
9b:dd:b8:03:c9:11:19:9a:8d:f1:40:af:c9:9b:77:5e:08:aa:
c1:1a:38:d1:11:fb:66:08:9b:8a:56:77:e7:78:69:15:b0:9a:
be:c2:20:bb:3d:ab:9e:ec:29:25:f9:a3:4e:c4:47:60:a8:b6:
cd:29:d2:38:c3:ae:b0:24:e7:0b:b5:16:64:74:66:29:68:b3:
3f:26:bb:c3:d4:23:af:97:15:19:d5:59:98:b2:a0:19:71:2a:
92:89:8a:57:25:8a:72:63:5e:11:e8:4c:20:7f:7d:33:d0:c4:
ef:6b:d4:21:0f:dd:35:45:c2:72:c4:9e:de:b2:5f:8e:8d:11:
6c:1a:62:8f:1f:87:19:89:1b:e2:0b:0d:b4:47:37:95:15:84:
f3:2b:13:8c:66:8d:59:00:c6:11:55:61:5e:b2:3c:32:85:91:
7e:4a:cd:93:76:5f:e9:0f:37:20:81:5f:0d:8e:9b:fd:e1:e1:
66:05:ce:55:fd:74:72:fe:bd:e5:99:b2:41:66:83:65:02:8d:
2c:d6:20:a4:d8:61:f8:ea:38:c6:ac:27:ce:7b:e1:f9:21:80:
1f:3d:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:25 2025 by rpki-client