Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: nf8dYFzqIoE6Dr7R9AVw2TjMBbF5HJ47baPrbneRMWs=
Subject key identifier: 4A:7F:9A:56:D7:FB:E0:5B:0B:90:C7:D1:13:81:05:1F:B7:21:EA:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7507A14ADE847148D8C7F1E1B090C43482279EA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Mon 01 Sep 2025 20:31:08 +0000
ROA not before: Mon 01 Sep 2025 20:31:08 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:07:a1:4a:de:84:71:48:d8:c7:f1:e1:b0:90:c4:34:82:27:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:31:08 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=8630b78a5e0ef4f51fe67b2a326a72806a69a035daecb96c12bba36f7156a50d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:64:50:07:97:72:d0:7e:2a:1a:a3:e5:da:
0f:3c:73:87:c7:92:8f:fc:da:1b:f9:c0:25:e2:04:
2d:42:7f:99:7a:c8:58:f9:de:9d:07:da:7d:58:e7:
83:63:0f:d7:69:95:23:88:c2:70:89:1f:1a:74:e1:
d9:60:38:3a:e6:92:2b:6d:bc:a0:57:f4:07:10:db:
d3:ef:e6:a4:38:63:51:43:24:76:a8:a5:0d:8c:43:
7b:c3:b0:b8:a2:8b:9b:34:85:b1:fa:3b:71:d2:78:
8e:db:c7:4d:29:53:18:13:70:84:75:7f:3c:7b:fc:
16:5f:dd:40:7a:3b:19:4a:33:50:96:53:4f:ab:b0:
6a:d7:31:94:60:ed:0f:9c:21:81:52:47:18:a2:52:
d8:00:40:0e:6c:55:c5:4a:c3:b8:2a:d8:e6:93:01:
01:b7:41:cf:92:e3:06:90:25:40:ae:eb:0f:30:60:
57:43:3d:e3:0b:ef:69:58:35:8c:74:88:de:5b:4d:
08:c2:9c:67:5d:e2:9b:4d:6d:4d:b1:61:24:a8:64:
4e:e8:c9:d6:e1:50:a9:6f:63:b6:ec:b2:fc:38:41:
f1:33:33:8c:28:15:f3:d5:49:31:72:6d:83:ab:36:
31:1a:2f:ab:00:53:11:01:22:4d:8e:d4:2e:70:e4:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:9A:56:D7:FB:E0:5B:0B:90:C7:D1:13:81:05:1F:B7:21:EA:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:ea:61:56:48:ea:1f:44:3e:43:35:30:8b:f5:9a:5f:c5:0b:
13:f0:39:87:1b:94:cc:1b:d0:1a:81:80:4a:c6:e0:21:e8:05:
c2:31:a9:eb:91:d4:a9:67:59:bd:de:7d:84:6b:89:37:66:9e:
48:dc:11:64:99:68:15:e6:f1:96:b9:f4:ff:f8:b4:90:82:c7:
95:20:19:5b:e7:3b:b7:46:15:28:21:49:f3:11:52:3a:72:aa:
d9:08:23:5c:f6:89:3d:96:87:63:b4:0c:26:0f:d6:ca:ee:09:
00:e0:5d:b0:f8:5c:49:ee:5e:3c:fa:bb:b4:48:62:eb:d0:aa:
a9:8a:d4:9f:a3:a2:c7:eb:33:03:01:fc:2f:fa:f8:5d:9f:ed:
7d:23:e1:41:ff:77:a3:be:73:2f:cf:17:83:28:5f:5e:2f:08:
25:e3:63:cb:89:b1:dd:65:4a:a2:46:4c:69:df:1b:8c:aa:4a:
26:77:3f:f5:85:f2:84:2e:ed:a6:0f:c3:43:f9:36:47:5e:85:
cf:da:ae:71:33:2b:5e:b4:1a:b8:49:76:fa:29:f0:5a:4f:f9:
20:c3:51:bc:80:1a:55:41:d8:8b:bc:00:96:ff:60:02:d8:6c:
05:af:1a:da:6a:e4:38:e7:b3:fa:7f:3d:e2:bd:12:ff:b6:e8:
c1:f0:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:19:10 2025 by rpki-client