Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
File: f76388e2-5824-485d-aa99-c7ea5a481aa2.roa (raw, json)
Hash identifier: 1T4x4ndL8KPY//Of9J73J3mefDum0X0BG51HfgrCIcU=
Subject key identifier: 6A:8B:C7:D9:C7:97:27:1B:DA:AA:D7:2E:AD:E4:A7:95:33:D5:FF:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 053FBB67E1E493D2385F33453D7E276A7981F327
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
Signing time: Tue 21 Oct 2025 14:00:59 +0000
ROA not before: Tue 21 Oct 2025 14:00:59 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3f:bb:67:e1:e4:93:d2:38:5f:33:45:3d:7e:27:6a:79:81:f3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:59 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=e4b2712895bff47d68ea796841bc9909e0a2f39e838299b3126b8b34e2e4c103, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d5:a8:32:b0:2c:7c:fb:cd:9b:70:12:24:ef:
4d:57:24:8b:93:8d:a8:7b:e8:21:b5:42:8d:ba:2b:
af:6d:23:ba:45:a0:26:88:62:9a:28:be:5c:c3:14:
5c:4c:c8:2c:c5:e9:ff:2a:51:2a:81:e8:e7:08:99:
1c:f4:8a:70:8c:d9:7f:42:57:2e:27:07:0a:0f:b3:
c0:fc:6c:c1:70:20:57:a9:ba:18:c8:f4:0b:01:59:
04:f6:dc:29:0a:a8:78:bf:0d:12:c5:ac:e9:5b:ef:
fb:78:e5:d5:53:39:67:41:2b:ae:77:a2:9b:cf:77:
70:d4:63:5c:b1:bc:62:82:a7:cb:6b:a1:bf:db:45:
5a:3e:9e:00:fc:90:57:b6:39:6d:b3:60:96:f2:e2:
eb:2a:1e:8e:cf:ba:77:17:34:15:e2:b1:2d:d9:ca:
c4:8d:2b:97:1e:03:9e:36:06:9f:47:00:c8:f3:38:
3b:67:50:19:9a:8b:3a:91:a5:e4:db:45:7d:b6:ac:
73:43:71:7d:cd:99:b5:de:cb:55:0d:c4:aa:49:2d:
bf:e4:d4:b7:81:7c:ee:b6:99:24:52:58:28:2e:3e:
16:e4:fd:67:e5:44:53:f9:91:51:d8:19:14:03:34:
a5:67:1f:a3:b4:07:3b:a9:69:50:7b:bc:41:ea:8c:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8B:C7:D9:C7:97:27:1B:DA:AA:D7:2E:AD:E4:A7:95:33:D5:FF:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
06:23:ba:9e:13:d3:81:77:4e:3b:64:7b:84:99:23:d8:93:ce:
c3:8d:24:fe:a7:15:ed:ef:bd:72:9b:4d:c3:a8:fa:f1:58:16:
a6:e3:7c:e6:c9:75:1e:00:17:64:ee:e1:13:04:b2:db:0a:51:
99:67:64:bd:0d:f2:31:9e:c7:89:50:23:89:61:56:07:4e:00:
dd:83:28:56:11:2f:62:d0:bb:39:81:cb:4d:78:17:ea:6e:f4:
f2:93:a2:d8:4a:2f:8d:b2:85:58:8e:64:e0:e6:b5:da:32:5f:
b7:a2:ea:65:87:e6:1a:6e:ec:b6:d6:8e:24:a2:d0:b7:94:fd:
49:36:4e:5a:d5:c9:de:da:3b:e3:72:f3:f1:d4:4b:d7:68:d0:
52:ad:97:2c:ef:1e:73:e6:5b:fe:51:9a:c0:79:bb:df:ea:ca:
68:06:67:41:d4:2b:7e:d1:de:48:95:4e:84:65:ec:15:8a:2e:
c8:56:07:d9:b7:f6:8d:9f:ac:1a:be:6c:91:ed:a4:67:83:14:
1c:b8:7e:da:05:04:2b:e2:91:2d:12:95:a5:3d:d9:e3:e7:56:
b3:15:df:63:58:87:c1:10:a6:bf:56:27:bf:53:d5:ab:5c:f7:
85:70:c0:38:45:c9:40:ac:44:92:43:34:8a:ac:1e:1f:81:95:
71:cc:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:34 2025 by rpki-client