Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
File: e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa (raw, json)
Hash identifier: JNKB6WHZsRfC/aOPVNEnfAThX466g0D+FBnql1zeqXY=
Subject key identifier: BA:CA:1E:82:61:62:67:95:21:E1:7B:BE:A2:B1:17:33:1E:0F:1B:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18C30FB937AC9C7D9E77F8249E526C973DEA0C06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
Signing time: Wed 22 Oct 2025 00:20:06 +0000
ROA not before: Wed 22 Oct 2025 00:20:06 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c3:0f:b9:37:ac:9c:7d:9e:77:f8:24:9e:52:6c:97:3d:ea:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 22 00:20:06 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=37f640009d3c00ed82eda4e8dfee33a4f12b11368afe234ae9b26b2cdba87708, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:24:a3:a1:37:42:5e:dc:18:a6:f1:80:90:
05:ea:6c:ff:1d:26:11:87:e8:35:07:11:45:d4:97:
91:d8:88:d1:fb:0c:e9:79:4c:9d:26:b7:68:77:3f:
41:40:fe:b0:51:b1:09:b7:12:86:15:0d:3d:fb:64:
d1:0b:cd:06:45:9a:f2:d6:4f:c8:40:98:b3:3c:24:
05:da:86:ea:88:13:96:a2:1e:39:8a:59:a9:d9:f6:
48:55:c5:f7:b1:43:73:f1:11:57:ff:86:28:98:d1:
39:87:e7:22:b6:6a:63:52:db:a6:13:bb:27:b4:04:
37:48:e3:35:f0:ba:6e:e8:d1:83:32:31:45:86:d4:
cc:92:07:45:f7:7e:fb:35:15:af:3a:01:6b:cc:c6:
02:85:f5:27:35:15:8f:92:11:d7:43:38:f4:4e:d2:
cc:de:fc:ef:64:8a:18:91:73:16:70:1d:45:5f:0b:
b5:c4:ba:62:98:ef:60:4a:f8:63:d0:4d:8e:19:56:
0a:04:e8:02:12:ab:7c:64:3a:d2:69:0b:3f:d3:25:
ec:4e:a4:80:0b:d4:42:a9:62:a1:a7:e4:ce:a7:8e:
88:b8:c0:fb:31:6a:ef:00:ab:28:e4:a8:cf:c9:c4:
ab:a6:aa:f9:8c:63:04:6d:82:4e:44:8b:4d:01:ed:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:1E:82:61:62:67:95:21:E1:7B:BE:A2:B1:17:33:1E:0F:1B:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
17:3b:5e:f3:57:be:80:8e:60:0e:bf:57:73:3c:7c:71:43:27:
2a:9d:18:28:c6:e0:24:bc:8b:ad:1e:c3:6f:99:43:d1:3f:82:
e7:94:fa:ec:c4:b1:40:46:d1:c5:70:54:b4:5c:27:52:09:65:
26:81:a3:42:7a:b3:9f:1d:80:71:e6:9b:2f:89:9a:27:8e:9c:
07:46:b1:bd:d3:07:b4:56:a5:89:b1:fd:8d:fe:c8:65:70:56:
af:1c:87:97:74:69:6e:b1:f4:0b:c2:15:62:d8:f4:2e:ff:57:
65:94:40:63:50:b4:e0:4c:2f:4a:23:7b:ca:f4:62:5a:81:12:
a3:4e:60:dc:23:27:58:c5:6c:d1:9e:16:1a:f1:8b:ee:62:97:
eb:b4:e1:ac:c4:56:6c:47:be:e5:9e:b2:de:97:c7:d8:fd:6b:
b9:f2:d2:67:a5:08:ca:d8:b9:a4:b2:05:24:d4:c5:f6:40:1e:
39:43:e3:23:3d:0b:6c:2a:c4:87:31:34:20:e9:36:03:13:67:
e6:cf:d0:ae:ed:33:fa:66:f3:18:b9:95:a0:69:76:f6:c8:3d:
84:47:84:d3:fb:a0:3d:2c:40:6d:d7:fc:d5:84:b7:b5:7e:06:
37:e0:42:52:10:23:16:89:33:4f:7a:a6:72:62:c8:45:4c:fb:
21:8b:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:10 2025 by rpki-client