Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
File: e279c5e7-6144-440a-9f1d-2013fb96d06a.roa (raw, json)
Hash identifier: C87wwxR/xEZidLC/LSXN/bkiy05o3weyueaFIincyFw=
Subject key identifier: 93:B5:B1:75:B1:A6:EF:E0:71:AF:19:EA:ED:6F:83:BC:2E:20:F1:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 396EB46D1D6C27166A8384BA2C596B5BB8507713
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
Signing time: Mon 01 Sep 2025 20:41:34 +0000
ROA not before: Mon 01 Sep 2025 20:41:34 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6e:b4:6d:1d:6c:27:16:6a:83:84:ba:2c:59:6b:5b:b8:50:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:41:34 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=766217ca42017dfed7764925dba5bdba21d700e86438101e79a85c520692a2e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:dd:80:bf:56:22:56:f3:08:e0:a5:be:cc:
0b:7f:65:35:6d:c2:af:af:56:ae:c6:c3:55:79:28:
fe:71:d9:e8:19:dd:be:20:6c:74:bd:e9:d6:2b:05:
06:95:5d:1a:66:02:b5:5a:be:f5:37:f5:a6:d1:39:
48:a1:d3:13:0b:a8:53:12:48:2b:17:5f:9e:2a:1a:
dc:4d:58:a8:47:1f:76:7e:f1:89:1a:ce:70:3e:b7:
59:69:65:ad:99:23:a0:7e:bc:00:91:e4:e2:15:b1:
e7:90:dd:cc:e4:34:79:5a:c7:72:2e:b2:ef:b0:af:
f5:3d:1c:59:89:64:ed:2b:cd:4b:39:e9:92:9e:0a:
ef:67:6f:7e:71:95:08:63:7a:ee:75:61:af:47:e0:
4a:36:27:fc:fb:d3:ff:5d:9a:15:8f:22:a6:d0:a6:
38:af:6e:06:a9:60:23:39:b3:1c:bd:68:3e:e4:c2:
28:e4:ae:90:8b:8f:f6:4d:6f:e2:f9:dc:95:b4:00:
45:a4:e1:8d:b0:d7:e0:8c:28:de:12:1e:12:c1:7b:
97:20:1c:ef:d7:be:49:7d:ad:94:eb:53:6c:f9:b5:
0a:74:c6:6b:8a:10:e1:30:68:41:e7:ad:11:0d:b4:
f4:e7:a8:5d:74:56:97:f8:99:34:26:15:c0:59:0c:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:B1:75:B1:A6:EF:E0:71:AF:19:EA:ED:6F:83:BC:2E:20:F1:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:2000::/40
Signature Algorithm: sha256WithRSAEncryption
9b:66:2c:ee:21:d9:70:ac:16:af:cc:8e:04:cf:d4:41:f9:1f:
26:36:80:b1:eb:63:f4:8b:4f:78:e5:d7:c2:68:02:07:dd:eb:
d9:6c:43:72:cd:47:aa:39:ab:98:1e:1b:78:b3:39:e5:ee:ce:
09:ff:1c:2a:a8:b4:c3:ef:bf:5a:c7:fe:14:6f:48:a3:1e:15:
83:f1:01:61:87:60:00:86:c6:3d:cc:fd:98:6b:35:2c:84:4d:
47:8f:69:cb:60:d1:ec:8b:f6:c2:ae:bf:f2:8e:26:f6:f8:30:
dc:8f:cb:44:9b:68:c9:23:8c:31:7b:63:b7:67:3d:80:d8:41:
92:fc:42:aa:18:5e:7a:8e:ea:8b:ad:54:23:08:03:5d:bb:e6:
87:6a:6b:d8:b4:fd:d5:46:dd:c3:0d:e0:3b:ff:45:27:5b:15:
08:ce:bf:88:88:ca:62:ae:c6:e4:a4:52:3e:08:cc:f2:36:9a:
2b:7c:29:eb:7b:84:d4:f0:4c:2e:43:12:ca:52:67:e3:5a:0f:
0a:52:27:59:2d:52:d4:19:53:54:8b:9d:b2:9c:e5:d0:b6:7f:
c9:58:c9:6a:60:c1:e3:78:d8:07:cd:25:23:d0:8f:30:c1:0c:
84:d7:23:65:aa:8e:5d:52:80:23:c2:44:31:1e:2e:c8:03:79:
c4:4b:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:33 2025 by rpki-client