Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f97778b4-85b1-4580-ac38-a4872d19261b.roa
File: f97778b4-85b1-4580-ac38-a4872d19261b.roa (raw, json)
Hash identifier: pYXHWB7DjxgSN+a9MdB3HyQG60kiOF3cSaMvAkoVCog=
Subject key identifier: 8C:7F:98:7C:8E:8A:3D:56:7B:6C:E6:74:D6:1C:A8:93:DE:29:82:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07EE2DF40182C16B04B759C5CEF14A416A58CF96
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f97778b4-85b1-4580-ac38-a4872d19261b.roa
Signing time: Fri 26 Sep 2025 19:51:06 +0000
ROA not before: Fri 26 Sep 2025 19:51:06 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ee:2d:f4:01:82:c1:6b:04:b7:59:c5:ce:f1:4a:41:6a:58:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:51:06 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=592a053a65dd793a60b1f732133243696da51bff85f479b5031841467bc10a10, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:3c:91:ff:9a:88:7f:ab:c5:24:e9:b0:29:
29:44:bc:28:ed:d0:0e:ed:33:28:be:f9:33:cb:db:
64:a9:2f:de:7d:71:b0:20:f2:cf:e1:2a:7a:b0:40:
cc:6e:42:a6:a8:94:e7:02:1c:69:5b:75:a7:25:44:
97:df:af:46:d0:87:94:90:c5:56:70:0d:ce:85:a8:
64:eb:e8:dd:06:f0:a9:2d:1e:2f:26:d2:31:c0:ff:
78:73:a1:58:80:9e:1d:b0:e2:bb:2c:e8:17:f4:c8:
33:09:92:6d:06:cb:0e:0b:35:9a:86:b8:b1:5d:1f:
b5:b0:80:f4:a2:e5:39:29:98:ab:5a:2b:55:54:ab:
0d:c4:d6:6f:4d:d3:15:ee:a0:30:70:46:b6:39:4b:
10:1b:70:e1:59:7e:21:e4:dc:28:e4:fa:4f:1c:ad:
d3:1e:05:6c:91:93:77:e4:9e:c9:da:a9:31:85:97:
b6:66:a7:c3:eb:93:62:f3:3b:47:c9:02:e1:5e:2b:
62:86:90:79:10:36:e0:bf:fe:57:f4:df:d3:e0:85:
cf:2e:4c:37:94:ef:62:7a:06:94:17:02:aa:7a:48:
f9:ac:44:87:ac:8e:94:4e:d5:36:7c:33:ba:2d:7a:
86:4e:e1:d2:b2:62:eb:07:f9:b1:84:12:88:fc:89:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7F:98:7C:8E:8A:3D:56:7B:6C:E6:74:D6:1C:A8:93:DE:29:82:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f97778b4-85b1-4580-ac38-a4872d19261b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:e7:f7:42:6a:ce:ee:78:36:51:b3:57:4e:88:a9:36:65:cd:
f1:69:27:ef:dd:24:e6:09:bd:1b:2b:1d:86:fb:31:53:f2:1b:
19:94:03:32:ad:94:67:7d:54:c4:ee:ab:41:3f:19:d4:0b:57:
cd:7b:82:d7:a9:ad:19:9b:07:bd:52:89:57:38:02:5b:cd:b6:
ab:86:ac:ec:ed:be:c8:63:77:b0:7c:b1:2f:3e:b2:da:b0:d3:
26:82:36:7d:1c:32:25:23:79:69:ab:cd:dd:ce:b3:b4:6f:4b:
bf:2c:48:aa:b1:66:1f:85:5c:29:7c:39:81:23:dc:70:d2:83:
59:8c:f5:5f:26:20:75:87:9a:68:11:19:cf:ad:da:ee:3c:fd:
67:c2:7f:0d:6d:8f:5a:12:17:86:8b:97:14:b0:f2:44:26:36:
22:37:83:36:5e:a8:a1:2a:77:95:ae:37:f2:e2:d6:eb:1a:19:
4c:bb:31:de:32:ed:21:c4:02:e4:56:d9:f1:73:76:b5:be:80:
72:52:72:f5:6f:4f:47:19:f4:cf:f5:a6:5a:4a:f9:2a:aa:83:
dd:54:82:e6:15:5d:a7:3c:cb:93:b9:62:ea:c0:ca:88:54:08:
50:2c:b5:85:6c:c1:1a:82:1c:40:c9:54:f2:3a:92:ca:aa:1b:
e7:ee:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 00:59:18 2025 by rpki-client