Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
File: fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa (raw, json)
Hash identifier: FiyHRoEBiqk15Y9d9LW983sOQOASGjxPbQjbgYF8VUg=
Subject key identifier: A9:FC:08:15:78:23:82:9F:FF:8A:56:5B:1D:73:3A:E7:FC:EC:B4:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D053F0DB9F9050F983555A2DBF560E0D6A27005
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
Signing time: Mon 01 Sep 2025 20:00:13 +0000
ROA not before: Mon 01 Sep 2025 20:00:13 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:05:3f:0d:b9:f9:05:0f:98:35:55:a2:db:f5:60:e0:d6:a2:70:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:00:13 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=88765709aa7141a50c1525995549e400d6c6662c888b0eccbd49257dc78888a4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:96:e4:95:63:9f:2c:df:00:f1:60:4b:2e:
e8:7b:23:87:e8:a9:f1:ff:f5:7f:60:f2:58:4c:24:
48:7b:b5:13:a3:8c:46:25:a9:89:f4:9d:aa:59:21:
54:22:ce:59:f8:ac:3b:ce:a2:64:36:de:c0:b0:42:
31:9f:49:e4:e2:5d:29:e4:e4:b9:5f:3c:1e:60:36:
2b:4e:6a:7c:9d:73:90:4e:95:4e:d1:4a:9e:45:2e:
54:ba:b6:4e:f0:f5:be:45:1a:75:72:2c:ab:d7:cb:
99:2f:39:e7:2b:5e:07:bf:0a:41:86:79:43:37:a6:
b4:3d:1d:6f:b1:30:bb:72:6b:08:93:41:4c:5f:c6:
65:6d:9c:33:7f:b3:4d:51:f0:59:1e:41:b7:bc:f1:
c3:50:4a:02:2a:78:0e:7b:3b:b5:4b:24:32:7b:db:
a2:1d:61:69:a9:14:0d:b1:0d:24:5f:0e:b7:14:6e:
4c:78:ca:f6:6f:e9:29:87:ca:22:17:73:82:d2:da:
02:9c:80:e1:f5:fc:48:6c:d8:78:74:6e:4a:b3:02:
06:db:63:e4:6a:37:d0:d8:18:78:9c:36:69:49:97:
ea:85:68:05:98:68:9a:dc:6c:06:d2:0e:ae:e3:b7:
a7:cc:f9:5b:2e:a6:42:c9:76:6b:6f:f7:63:07:aa:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:08:15:78:23:82:9F:FF:8A:56:5B:1D:73:3A:E7:FC:EC:B4:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc3cf1ff-209d-46f6-a7dd-a7ba5d5bfba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8000::/40
Signature Algorithm: sha256WithRSAEncryption
07:71:c9:0d:5a:20:8e:25:c0:24:ee:73:d9:3d:0c:9a:78:36:
c5:bc:f9:60:d3:a3:31:23:d7:08:e4:8c:c0:0b:f1:26:8b:cf:
b9:bb:14:89:f3:86:58:b8:c6:90:f8:a7:53:6b:91:8d:07:e8:
01:ae:5a:53:e2:e7:44:93:a5:3b:8e:a5:15:9e:84:c2:c8:91:
e5:6d:44:ba:88:a8:92:b4:62:29:e6:5b:1d:9a:4d:aa:b8:5d:
47:99:25:04:84:0d:f8:fb:bb:22:d3:bd:68:a0:cf:22:52:08:
29:d0:13:fb:9d:a1:64:60:0d:2c:0a:7f:c4:a1:b4:60:18:de:
0a:9e:79:d0:d4:4b:14:05:e0:8e:db:c8:8d:8d:c6:ae:c4:5e:
ee:d1:d7:fe:10:b3:a3:54:45:c8:e1:83:26:1c:af:24:0d:5e:
29:02:fb:02:d9:57:f5:dd:84:b5:c2:b2:2a:2d:ba:3e:68:7b:
e1:55:b0:d8:4b:f7:d2:43:c9:0a:76:f2:c9:f5:5f:09:05:ff:
d1:88:33:84:a9:b3:7e:7e:a5:9c:73:ec:eb:31:d0:af:60:47:
10:3f:5a:f6:85:60:88:71:63:3c:d1:72:0c:8c:a0:92:3d:c2:
79:a0:b8:4d:41:13:23:4a:a5:ec:2b:b6:2a:ab:8c:0e:c1:f9:
08:73:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:48 2025 by rpki-client