Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
File: e234d9fb-5639-4264-99c1-35b39c1e56b5.roa (raw, json)
Hash identifier: x/Q+Jv8wqMQw51E5QBedN78Il6iwdaZIrVHjC2+T1HU=
Subject key identifier: 78:AA:44:E9:F8:8E:69:89:8A:0C:EB:D6:86:0C:DF:26:42:64:32:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 140A018619509478E72006364E37FDC61CDF8450
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
Signing time: Tue 21 Oct 2025 13:50:41 +0000
ROA not before: Tue 21 Oct 2025 13:50:41 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0a:01:86:19:50:94:78:e7:20:06:36:4e:37:fd:c6:1c:df:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:50:41 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=03f256e1cbefdd7a8e022c6801188ae1f8fadf1883083fece5e277b8e11b8c40, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:8b:bb:99:12:87:ef:c6:f5:31:73:ab:b6:
3b:36:5c:1a:c5:49:0e:3f:17:25:ee:a2:04:cb:fb:
2f:fa:d8:e3:14:c0:08:6f:11:0d:93:ec:c4:1f:76:
fa:fa:1b:4e:6a:e8:05:be:10:e8:2b:27:9f:69:bf:
4f:75:a8:bf:bb:1e:cc:9e:8d:5e:91:55:76:e8:03:
44:6b:14:b5:82:97:dc:9a:06:ad:c0:fa:23:8b:f6:
8f:bb:b9:90:1a:9a:31:f1:0d:75:71:64:62:dd:32:
2e:a7:0b:64:27:3c:e7:4b:7a:78:6a:d4:89:23:c4:
48:1d:d9:80:91:8d:1f:a2:08:db:95:33:98:58:8c:
ea:b6:3b:68:bf:41:c3:9d:a8:c3:83:e1:8b:95:54:
03:4d:4d:f2:22:96:9c:df:b8:38:e3:57:be:5a:16:
75:f4:28:5a:be:94:8e:4a:8d:4d:31:2c:f7:6d:c6:
87:96:38:d7:2e:ca:a7:9a:19:85:26:2f:13:0d:06:
73:fb:31:df:5a:4d:8f:33:d5:2b:f6:ca:a2:83:65:
e4:5d:a1:09:1b:da:6a:b2:3c:3d:3c:87:8e:dd:3c:
d9:33:cb:d6:8e:66:d5:16:eb:90:d8:9d:e6:f2:8b:
33:1b:c8:7e:51:81:e3:66:97:1c:fb:a9:8e:0f:21:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:44:E9:F8:8E:69:89:8A:0C:EB:D6:86:0C:DF:26:42:64:32:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
75:75:e7:1a:48:71:b0:5a:ab:a4:51:0a:72:14:72:64:0e:8b:
7b:7e:02:56:9b:bf:74:28:79:a5:91:f3:e8:1a:ac:ea:50:5e:
84:3b:39:fe:0b:2a:56:3c:47:ff:70:47:40:1d:38:17:00:54:
3f:0a:09:80:47:69:a5:38:37:ad:7b:67:11:69:c9:36:54:8f:
9d:6f:e6:46:11:ba:9d:cf:8c:ad:7b:07:a9:b5:3b:73:c1:86:
66:d5:c5:88:30:c3:8b:23:ae:fd:71:fb:b0:ba:95:56:ba:8e:
9c:b0:ee:25:76:b7:fe:0a:be:63:1e:c9:0d:1c:52:54:db:01:
01:f7:0a:a2:d4:85:95:0f:0a:94:2c:86:4b:f2:7d:c9:73:26:
6c:5d:e3:f4:78:a8:1f:2c:84:ff:51:56:27:06:6a:4f:21:d6:
fd:35:c6:6a:64:e0:d0:ca:44:33:bc:fa:1c:20:4d:68:61:f1:
d8:79:41:1a:6f:58:9e:22:90:5a:c5:c0:2f:8c:ac:4b:7c:6b:
57:d1:f5:88:50:4a:b7:0a:02:83:72:18:8f:84:23:36:c4:ee:
24:19:64:ec:ef:9a:bb:da:79:4c:35:e8:94:d8:44:70:82:af:
f2:ea:b5:63:3d:f3:b9:f0:0c:f4:45:28:c4:a4:91:25:9e:b4:
92:03:b5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:17 2025 by rpki-client