Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
File: e279c5e7-6144-440a-9f1d-2013fb96d06a.roa (raw, json)
Hash identifier: EH1fLdPo7oTU7e+hSmSMQ3RXlc+HG/UIKI/5SOV1FBc=
Subject key identifier: BC:18:C1:A9:52:EC:EB:17:82:88:5E:C4:90:22:CD:2D:A9:4F:1B:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C3A44C8BB8024219B7729D1736E273E46764C4E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
Signing time: Tue 21 Oct 2025 13:40:49 +0000
ROA not before: Tue 21 Oct 2025 13:40:49 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3a:44:c8:bb:80:24:21:9b:77:29:d1:73:6e:27:3e:46:76:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:40:49 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=7d776bf7a77ce8f5762ea2f34a6d43516e9e2639057f99205d0c24c5d6a9c870, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f7:76:4c:5f:3a:d4:c8:c3:d4:6d:08:a3:a2:
5c:d4:bb:53:d5:18:ba:dc:a0:78:ab:42:d1:29:41:
78:39:de:5a:59:ed:cd:a5:d0:31:eb:fc:d8:c5:f4:
24:82:8e:3d:cb:26:51:db:6b:08:e6:f0:56:5b:c6:
8b:e0:70:ac:49:27:bd:1a:9a:a7:e2:18:e3:27:1d:
08:d8:70:5b:be:02:4f:12:f5:44:b0:ef:42:f0:ac:
5d:d1:29:6b:f3:b2:63:50:b5:93:1f:c4:82:c7:f1:
dc:2c:1c:10:23:02:68:de:56:c4:69:29:d4:69:84:
52:08:be:45:d5:9b:aa:f3:70:41:0c:87:2e:03:13:
2a:66:1b:e5:a8:86:b6:8f:33:c6:94:1f:d2:ab:c0:
4d:cc:1b:a6:00:0d:6b:31:af:f2:a4:88:ae:59:ba:
ad:91:54:3b:86:49:62:22:0c:5d:19:14:c7:54:c4:
f7:e3:ad:55:2a:b8:53:1a:ee:39:f3:60:1f:14:f4:
06:3d:be:b9:ba:ae:1e:9f:81:80:ea:2c:db:ba:5e:
fd:8f:a8:b9:54:64:3c:81:1f:14:0c:fc:bd:df:fc:
35:29:1f:7c:71:57:c2:29:ad:ef:e1:b8:52:e7:2b:
51:5e:aa:f4:bd:bf:3f:79:bf:62:3e:b7:91:25:65:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:C1:A9:52:EC:EB:17:82:88:5E:C4:90:22:CD:2D:A9:4F:1B:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:2000::/40
Signature Algorithm: sha256WithRSAEncryption
44:ac:dd:bd:8e:f4:1f:86:ea:fc:fd:a4:d4:af:39:bf:ec:40:
65:bd:b4:83:04:79:d7:21:fa:33:00:ee:36:92:13:5e:55:0c:
6d:1c:dc:8f:83:0a:3e:bc:57:6e:bd:03:3b:b9:53:33:3d:45:
c7:fe:06:16:cf:6d:bd:0e:1e:da:5e:db:88:75:9e:7b:fc:86:
df:6c:3c:04:e1:5d:2d:9f:7f:04:6e:d6:c9:92:dc:16:c4:d3:
24:4f:be:fe:a9:cc:f5:90:e8:83:79:3f:42:98:f5:ce:19:f4:
80:73:30:91:7f:02:5a:0c:5c:57:65:42:af:54:6a:61:82:0c:
64:81:87:35:73:42:0b:6a:49:77:48:67:9d:0d:cc:00:be:b0:
9d:0f:51:0b:d1:78:a7:67:35:99:5a:71:ef:81:c7:9f:14:56:
3b:97:e6:c3:d6:79:0d:6e:24:cc:45:f0:d4:65:1d:7e:54:2a:
e6:a1:13:e6:87:96:45:9d:77:f3:c0:43:b9:c9:b6:eb:91:6f:
83:14:27:9b:f9:a3:f7:bb:a3:53:03:f8:8d:01:03:7c:46:f4:
e0:a9:e1:13:54:5a:ef:4c:ed:d9:29:b4:ef:fe:b4:61:05:2e:
c8:fe:fc:a6:1f:6b:9c:ad:72:03:b9:ed:61:2f:2c:eb:4a:68:
e9:f0:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:19 2025 by rpki-client