Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
File: 14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa (raw, json)
Hash identifier: dwvP4B2osWyn0j2RMxUKbllJyRUG605rpGlKLWfeO40=
Subject key identifier: 4E:10:D8:AD:92:11:DE:2D:7C:4D:11:97:2B:F6:77:F4:2F:8C:45:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A7A24FB752936A78C2D0F69BD694EBE42EE6FD8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
Signing time: Fri 31 Oct 2025 01:20:06 +0000
ROA not before: Fri 31 Oct 2025 01:20:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7a:24:fb:75:29:36:a7:8c:2d:0f:69:bd:69:4e:be:42:ee:6f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:20:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4172c32fd6a53950e1a6d60dcc1cbf9b1849f60b2f18c5433ceca0725a362a7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:05:7c:86:64:8d:b6:9a:dd:cc:0e:ee:39:
9c:c5:7b:c0:c6:26:ba:8b:c6:25:7b:ed:b0:f1:a3:
e0:40:fe:c9:be:d6:95:91:d9:43:7a:aa:23:bb:a4:
42:c7:8f:2b:93:45:07:8e:76:57:63:f2:73:a0:f9:
d3:a0:d5:8b:0a:fa:2b:1c:10:72:03:26:f1:73:fb:
b6:f4:16:2e:d7:7e:07:3b:62:7c:68:b4:14:13:7c:
f9:f2:6c:15:0f:ef:b9:ab:24:5f:00:7d:50:02:63:
80:5e:59:c5:6b:48:b5:40:6f:f5:ed:a3:fe:6d:ff:
48:5c:c3:72:72:ad:92:b7:42:f4:e5:5e:a6:8b:0b:
63:fe:f8:0e:b0:0b:31:15:9a:85:f9:d5:1b:2f:90:
bc:42:0b:72:fa:cd:89:0d:58:07:76:1c:bf:20:b7:
28:c4:59:a2:a1:c7:35:e8:e8:41:b0:15:f3:ac:6e:
46:bd:55:c9:09:f2:04:a0:47:4c:d4:d6:b1:d1:3d:
77:ea:71:4f:ba:74:e7:3a:bd:ae:2a:43:c1:3e:46:
88:23:5c:e1:61:f9:a8:e0:a6:f0:0e:26:79:41:f0:
37:9d:94:3f:80:49:fb:0d:de:54:a1:b0:5f:85:d0:
d6:88:ae:0e:6d:0e:b5:ef:dc:ac:b4:7e:39:0a:23:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:D8:AD:92:11:DE:2D:7C:4D:11:97:2B:F6:77:F4:2F:8C:45:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c020::/48
Signature Algorithm: sha256WithRSAEncryption
c0:1c:ca:37:1f:f5:0c:9d:af:31:67:d3:dc:0b:cd:7e:dc:71:
83:bf:54:9e:83:2d:1d:23:f8:ee:f7:6d:26:e5:22:ad:cf:5a:
67:fd:2e:8f:b8:61:3e:ed:08:46:2e:ee:df:f2:d7:f2:05:de:
af:3f:ff:9f:68:c0:fc:07:8f:f9:b9:66:4a:82:46:f2:fb:74:
81:ec:22:ae:cf:12:bb:de:d8:cb:89:25:28:ad:40:ea:b9:ed:
cc:4e:82:4e:f2:1d:c8:9c:6c:cc:a0:42:f1:bd:d6:ca:5a:0f:
6b:ee:37:f3:28:7f:72:5f:64:0f:1d:cf:97:d9:83:bc:4b:e9:
e3:e8:ed:82:b2:af:64:72:1f:ff:f2:3f:2a:bd:06:a7:f1:73:
99:a3:e3:1b:de:14:b9:63:eb:23:2c:61:93:c2:71:3b:70:be:
f9:fd:5b:74:0b:e3:fc:21:93:1c:67:5e:e7:c6:f2:d4:b0:9c:
96:c4:d2:ee:ba:3f:d5:03:db:f4:5b:dc:db:d0:98:22:0a:4a:
2c:4c:9f:fb:93:ba:ce:58:4e:af:f8:b4:28:e4:ad:a4:d5:16:
23:cb:f1:ba:be:d6:3f:8f:8b:dd:d4:24:08:d4:e5:d1:b3:8b:
0d:73:b6:45:c7:67:ae:37:c5:99:eb:1f:c0:70:a3:f2:df:df:
71:43:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:59 2025 by rpki-client