Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
File: b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa (raw, json)
Hash identifier: KlWNVR6PfEVjhDRBET07X/uXuBD9dXzYZwDF78YWAEg=
Subject key identifier: 89:78:9A:15:1A:F7:35:73:1C:E8:4E:F7:37:3B:C0:2D:47:F0:A2:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 376B9C7819CA97A9EA87E2A6C59B0D1B85C3590D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
Signing time: Tue 21 Oct 2025 14:10:07 +0000
ROA not before: Tue 21 Oct 2025 14:10:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:6b:9c:78:19:ca:97:a9:ea:87:e2:a6:c5:9b:0d:1b:85:c3:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:10:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=0101da0a2e8568f71da2137483c7d3c702804e5e0f1b2151cd6ee88cebfcd4ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:e7:80:74:a9:85:ba:11:c9:ce:5b:89:bd:
91:7c:50:a6:dc:80:21:16:73:70:f1:30:bf:b4:c4:
e9:d4:43:58:d8:68:15:34:37:88:18:61:d9:83:69:
fe:c5:51:f3:43:0e:53:8b:e3:6c:9d:99:42:7b:60:
af:f7:50:bb:02:a8:ce:b1:1a:9b:30:07:6d:d4:31:
9e:44:4b:5d:e9:d0:97:c7:51:8b:34:1f:75:98:f2:
df:32:e3:54:e1:c6:6a:64:4c:1f:93:23:29:a2:8e:
df:41:fd:f0:fa:9b:37:90:ea:5a:66:cd:93:24:c4:
11:74:be:be:a9:b1:32:03:06:04:9a:f8:b3:14:11:
86:d5:0d:5a:1b:dd:b6:b8:d7:d5:91:13:42:36:86:
d7:f7:d7:b0:d2:92:78:6c:bb:fb:f8:57:d2:a5:8e:
fd:cf:b7:45:cc:41:87:ed:06:0d:d1:57:d2:00:a6:
ba:9a:dc:c5:cc:54:57:b1:e8:3c:63:ab:10:8b:85:
fc:77:21:31:fe:37:b9:87:ca:85:b0:fc:06:09:83:
08:72:11:be:a2:d4:d9:49:11:67:a3:86:4d:ea:5d:
c1:9c:7b:34:fc:b2:fa:65:b1:00:a7:7d:cd:ca:61:
26:48:75:76:03:2e:91:ce:6e:9f:1d:90:f8:1c:bd:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:9A:15:1A:F7:35:73:1C:E8:4E:F7:37:3B:C0:2D:47:F0:A2:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c080::/48
Signature Algorithm: sha256WithRSAEncryption
71:d1:a7:c1:bb:93:eb:e8:de:14:60:66:95:94:12:b6:54:e5:
77:99:64:24:3f:6c:b2:ed:aa:51:c7:f3:cb:0d:ed:64:04:fb:
de:7a:76:3f:6d:9f:6c:a0:85:a0:d3:93:36:c5:c4:ac:22:51:
c8:73:60:e8:6b:6d:22:ba:82:b7:06:0e:18:31:47:d1:a1:71:
b7:51:a8:4d:3c:14:8d:23:f4:ae:f1:1b:f0:b9:64:d9:2b:48:
21:40:8c:cf:0c:37:cb:62:fe:a2:f9:5d:cd:75:12:78:5f:b7:
f4:e8:7a:20:5f:c8:9b:2a:ac:d0:e4:54:16:b2:5d:b2:e2:2c:
15:9a:de:44:82:bb:5c:32:48:fa:d0:c1:65:fc:3a:9c:30:2c:
72:ae:de:f6:0f:c2:34:57:d1:3f:04:59:34:2b:c3:c3:c3:e9:
c2:a9:05:b4:7b:25:37:98:b0:67:09:99:2f:46:d3:e1:12:45:
7e:48:38:da:67:51:fa:13:4d:9e:64:27:2b:df:7b:c0:c9:49:
fb:a2:bd:56:a9:5a:fd:ac:87:f3:72:da:5e:ab:1a:3e:88:d7:
15:2c:5c:80:05:7f:58:ef:bb:57:9e:5b:b2:7c:35:7f:42:51:
3a:da:e7:13:b2:f1:3a:32:26:c1:bd:19:05:90:2d:f8:ea:1f:
f8:ba:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:12:01 2025 by rpki-client