Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
File: dd7649a8-cae4-4d67-90f1-f01144285a2f.roa (raw, json)
Hash identifier: hS9Xny70aGYzl7FbnetcbQaXOJyOOQz41Mhg0jFZE48=
Subject key identifier: 61:4F:05:16:F7:C5:32:BB:AE:0F:CF:91:EB:E3:CF:25:54:0D:65:66
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A29473F5F5F7C627BADB2BDFF55939507010990
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
Signing time: Tue 21 Oct 2025 13:31:06 +0000
ROA not before: Tue 21 Oct 2025 13:31:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:29:47:3f:5f:5f:7c:62:7b:ad:b2:bd:ff:55:93:95:07:01:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:31:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=5c20a5f9602e8a77b07feec32552e9510f6c2c585783b3c532981615ceb91c08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:73:87:00:b9:fa:d4:fe:6f:1a:b8:1d:d6:
00:92:d3:ac:f1:35:60:5c:22:7b:06:e9:97:f3:4f:
2d:52:33:66:a8:f3:6b:fc:cf:78:cc:72:10:77:85:
be:82:26:a9:83:83:9b:8b:1f:34:3e:48:cb:ff:30:
f7:7e:b6:7f:b1:00:11:fc:36:ce:fb:73:fd:3d:6e:
f2:2d:60:4e:ad:87:5d:f8:97:12:d1:09:15:bc:5b:
d1:95:a1:c6:8e:a3:49:12:7b:24:35:c6:7e:ba:9d:
0e:b5:83:96:a6:3e:33:13:ef:4a:88:78:14:f6:6e:
b0:92:0b:4a:14:ee:77:99:56:84:72:17:73:23:61:
6c:b1:24:7a:e2:02:13:f1:81:c3:62:da:63:e7:1f:
55:82:05:01:5f:e2:46:39:e7:80:1d:66:33:c3:11:
96:a6:55:c8:dc:35:e5:a8:e0:44:22:0c:e4:0e:37:
d9:e1:5f:a9:dd:20:88:37:bc:84:35:6a:73:af:5c:
9b:af:8b:6d:2c:07:5e:ea:73:62:ca:f7:91:45:9c:
06:bf:c3:e6:3b:1c:13:b3:6c:54:6a:70:db:23:50:
99:c4:9e:a0:8b:bf:ee:77:86:b6:cb:9f:0d:1c:e6:
f2:ab:18:81:a8:83:0c:1b:68:5d:c9:5b:b1:2a:c1:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4F:05:16:F7:C5:32:BB:AE:0F:CF:91:EB:E3:CF:25:54:0D:65:66
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4040::/48
Signature Algorithm: sha256WithRSAEncryption
10:29:6e:83:e6:2f:2a:1b:82:a2:f8:c6:24:80:9c:d2:83:4b:
7a:ff:9d:e7:ef:ed:45:a7:5f:8a:d4:48:52:95:da:64:af:13:
88:8b:ad:94:9b:46:b9:18:6a:79:a4:54:ac:b2:92:23:e5:74:
01:d1:24:1d:34:38:6f:bb:b5:e6:69:6c:94:35:4a:f8:2b:39:
dc:6a:0e:4f:e1:5f:4e:b4:13:c3:90:7d:99:6f:fa:f9:d8:3b:
d9:4e:b4:ff:74:fa:0e:78:15:da:3d:aa:9a:cf:31:72:90:92:
f7:dd:7d:3f:77:3e:2f:ca:be:8d:c2:20:be:fd:f7:ab:b3:6a:
dc:66:58:5d:59:30:fd:42:e0:3f:0b:ec:41:41:ac:b6:2e:76:
71:95:ad:af:18:55:0c:cf:29:fa:d9:be:90:42:73:0b:57:01:
bb:5d:c0:fc:c7:4e:c3:cf:b0:75:ae:cd:21:fd:4f:9a:77:57:
08:f0:8c:2b:f1:5e:13:60:5f:76:b5:e6:bd:b6:f4:08:69:a2:
a7:28:79:9d:a7:78:6f:7a:d6:52:5f:47:1f:bd:78:1f:fe:b0:
44:17:d5:d0:f9:52:22:00:e9:10:a8:a2:4c:22:e0:84:93:db:
57:61:1e:81:f9:6c:10:4d:d6:99:b6:c2:31:83:e4:26:c5:de:
c3:75:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:11 2025 by rpki-client