Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
File: 07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa (raw, json)
Hash identifier: ve09C98QXCMO8GEpYdm3FoBEBapEpshc2ruBIexWR5s=
Subject key identifier: 68:B9:B2:21:7F:0A:BD:32:45:9F:58:75:59:CB:80:4A:C3:BD:EC:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4001216A96D30CDD2AD2A0D55FB6B9D52CDF1AEE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
Signing time: Wed 29 Oct 2025 07:28:18 +0000
ROA not before: Wed 29 Oct 2025 07:28:18 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:01:21:6a:96:d3:0c:dd:2a:d2:a0:d5:5f:b6:b9:d5:2c:df:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:18 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=4d412d5a74fe01a4e14a8a64ff404acdc3dd94723e327569d94124669114134e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:7e:d9:51:f7:5e:d7:09:47:8a:f4:b9:93:
46:a5:77:ed:9f:52:60:05:1b:d7:9c:39:09:1e:6c:
5a:b1:39:da:26:bf:fb:70:6b:d7:c6:23:47:f6:00:
ba:fe:58:a5:1d:19:7c:65:6f:a4:c7:2e:c7:9b:79:
a1:10:53:bd:0c:ff:a6:70:de:05:43:ee:13:c6:b4:
a4:c1:c7:73:a4:fe:04:a0:68:30:ad:5b:bf:3f:c9:
15:29:8b:1b:17:eb:6a:0f:a9:c6:27:25:bc:cf:42:
0a:f1:1e:bb:6b:d6:51:aa:5e:49:ea:d1:47:e4:c9:
b8:1b:f8:4b:81:ac:a5:d8:15:cc:25:5b:b0:5a:12:
ed:56:80:74:03:0a:94:6b:60:06:e4:22:0d:34:7b:
77:1c:61:d6:df:34:ce:86:18:98:8f:e9:d6:ce:28:
47:fc:83:a9:c3:fd:b1:98:50:f9:98:1f:c6:bc:84:
26:71:a4:4b:cf:ab:e3:fa:ce:2f:f3:9d:30:2e:7f:
a7:e8:8d:8b:5e:90:af:e0:4b:94:37:13:d6:7a:72:
5b:4b:a5:9c:e9:ef:5e:6f:e8:e0:44:41:ec:6f:a6:
84:f6:db:78:e6:e1:a8:ca:40:dc:5a:7e:2f:63:f5:
56:65:e2:03:1c:37:18:9d:39:e4:e1:c5:06:27:f8:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:B2:21:7F:0A:BD:32:45:9F:58:75:59:CB:80:4A:C3:BD:EC:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/07e8f8f5-64b0-4b06-8876-18a0d4f4b047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:5040::/48
Signature Algorithm: sha256WithRSAEncryption
a4:e3:04:a6:cb:79:11:65:ed:d5:05:16:79:66:3b:bb:03:52:
1b:18:17:46:38:39:04:76:69:7f:4d:5f:83:21:95:65:c4:d4:
3c:52:9a:93:7e:a7:5b:15:87:ee:3f:8d:1f:7f:0e:d6:ff:95:
d0:aa:4f:d5:69:bf:40:88:dc:d8:37:ee:f7:3a:df:c6:72:f7:
9b:37:eb:c9:37:32:78:1c:f8:c8:58:24:ce:ae:fe:a3:6b:92:
71:43:fc:ea:03:29:b9:91:2e:ca:29:cb:65:ce:bb:28:71:a4:
5b:65:bc:b1:31:f5:7a:73:92:27:6e:0f:8e:16:1f:12:a5:09:
11:58:0c:9e:10:58:56:c4:1b:98:bf:f7:aa:60:5a:b6:ac:02:
66:f6:9a:5e:f4:95:d6:01:72:de:e5:ce:48:29:cf:6c:6e:2e:
9d:a1:dd:2f:8e:89:ac:a9:57:3e:81:3e:44:13:d8:7b:47:af:
2e:d0:77:d1:01:d9:30:08:0e:cf:a1:17:83:63:15:4a:81:a9:
bf:d5:96:29:d9:d2:67:73:cd:a3:54:aa:4d:0c:b1:18:a7:59:
44:cf:66:ef:e9:18:0c:26:10:a2:7a:fd:e0:84:4d:3b:d3:40:
dc:11:77:45:a5:22:8f:20:a4:ef:f5:bc:83:94:0d:45:ec:ba:
a5:b0:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:47 2025 by rpki-client