Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
File: da60d3f0-c039-4ca6-acc9-9f7139145100.roa (raw, json)
Hash identifier: g/XyBd2nCknvycKxcgSCfNTkSGVgaqQbbFvlwnFLSGk=
Subject key identifier: FB:F1:2C:F3:0B:7A:85:C6:F5:FD:EA:9D:CD:30:A7:6C:A9:A0:B7:A5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 160CF5913BC1A908AC62078656ADD030B3012570
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
Signing time: Fri 24 Oct 2025 00:20:09 +0000
ROA not before: Fri 24 Oct 2025 00:20:09 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0c:f5:91:3b:c1:a9:08:ac:62:07:86:56:ad:d0:30:b3:01:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 00:20:09 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=0b2d2b56f2c3774658b56dc962a70efccccbea45f39a6cd248ccfd66416d51d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:6a:77:c2:11:56:27:05:fe:5e:d1:ab:82:
2f:2e:19:ce:99:9a:f3:0c:04:55:17:e1:14:2d:f5:
21:5f:52:c4:4a:9c:ad:89:3c:97:f3:2f:1b:a4:cf:
dd:c2:ee:a1:71:d4:65:57:5a:b0:e8:cd:62:5d:ee:
f0:98:b1:75:4b:bb:bb:94:ff:2a:09:95:8b:9c:e1:
e1:e2:7c:ca:fa:53:4d:3a:44:a1:0e:8e:0f:f1:bb:
fd:42:9d:19:cb:5f:a2:41:58:4c:c2:47:40:4d:4e:
42:79:a7:a6:af:08:aa:43:cd:86:d0:2b:35:4c:d6:
f7:ef:2e:b3:10:b2:4f:d9:ce:c1:0f:f3:06:fc:a2:
94:3b:a4:05:37:74:13:5e:d7:bb:11:01:55:7d:f3:
fa:d1:32:7e:b2:2a:d4:d0:30:8b:c4:94:72:67:d0:
c7:bf:39:d9:7c:28:7b:0c:70:7e:27:c6:51:5a:56:
a3:ec:20:3f:89:f9:95:cd:0b:56:50:6a:40:58:e4:
b8:24:3a:ff:c2:0e:99:f1:85:16:a3:51:54:9a:9c:
91:9d:7c:52:36:a8:46:5e:0d:f2:05:8b:68:eb:f6:
aa:10:f7:51:7e:c7:ea:94:12:81:3b:04:cf:27:e8:
9f:63:f0:10:46:b4:4f:38:be:54:c0:6d:00:07:f4:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:2C:F3:0B:7A:85:C6:F5:FD:EA:9D:CD:30:A7:6C:A9:A0:B7:A5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da60d3f0-c039-4ca6-acc9-9f7139145100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:8080::/46
Signature Algorithm: sha256WithRSAEncryption
9f:5b:82:ff:33:63:47:b3:a8:e4:74:a6:8c:ac:9b:f4:25:e9:
e6:59:19:12:56:9b:8c:9d:61:45:73:21:f7:d5:8f:3c:73:98:
0a:82:b8:50:f0:4a:5a:2d:ad:d0:7b:31:52:2e:33:eb:38:1e:
66:88:61:bc:80:9e:26:6a:a1:0a:bb:4f:ab:bd:25:81:46:56:
5a:08:b3:26:25:3f:37:34:c5:8a:bc:b1:da:e5:4a:2e:59:89:
61:3f:2e:e2:20:79:bb:26:78:51:f2:dc:d0:11:61:ec:bc:2f:
a0:88:72:b1:1c:ed:54:88:f3:2e:b2:65:30:43:8f:ec:94:53:
87:e1:ed:52:1f:f8:32:a9:53:55:c5:d4:90:8c:96:b2:3d:de:
a1:c7:c2:83:72:a0:98:b2:cf:3a:7a:1c:8d:df:13:73:24:51:
09:fb:96:79:19:bc:5e:92:df:b8:82:06:db:e0:32:eb:01:dd:
2c:51:fd:75:0a:dd:57:6e:b6:32:bc:55:55:c3:d8:e4:01:56:
51:24:2d:89:a8:ba:40:2f:ce:59:c6:91:83:73:e4:1c:0c:64:
1c:67:82:e6:07:2a:16:e9:35:d8:bf:42:0d:d9:68:ed:6b:8c:
b6:60:25:3c:4d:3f:8a:4e:cc:58:18:0b:92:ff:2f:2d:79:8c:
01:1a:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:25 2025 by rpki-client