Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
File: 275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa (raw, json)
Hash identifier: EGYtgVa1nzrH/4qVh9DxbCug6/zeecnLeZlk7OoBIPA=
Subject key identifier: D6:4D:F6:37:16:F4:1C:97:41:0D:6F:9B:84:48:89:2E:D6:99:A2:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20CC71F61AEAEB4C8933B1A37400F10C7AC8DD73
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
Signing time: Wed 29 Oct 2025 07:28:16 +0000
ROA not before: Wed 29 Oct 2025 07:28:16 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cc:71:f6:1a:ea:eb:4c:89:33:b1:a3:74:00:f1:0c:7a:c8:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:16 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=63cd1d2eb20081c93c780b22155b8ea459d07e7d6477bf39d5decdd867cefa73, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:e8:cb:2d:c9:cc:bb:4d:ef:6a:cd:d5:da:
da:ab:0d:91:25:4f:08:d4:24:f7:96:6e:31:58:04:
73:90:9f:5c:e0:af:e6:23:9e:dc:b3:21:c0:08:92:
23:7b:8c:64:47:e3:f3:75:15:c7:40:82:63:66:24:
7b:55:b8:ac:8b:f1:a2:46:98:f4:87:c2:5a:de:53:
2b:b3:74:aa:73:3a:e2:59:e3:af:8b:ae:4e:82:d0:
5d:33:00:2d:a2:f0:cb:c2:7a:cc:80:9a:10:76:73:
fc:b5:8c:17:7d:80:72:2a:3d:d2:d7:0f:03:60:9d:
ca:27:1b:17:4c:65:94:46:c4:4c:75:31:26:84:3d:
69:aa:17:f1:18:dc:a6:9f:be:91:47:d3:a1:2e:e5:
72:08:3a:fa:52:c6:9f:31:95:b8:15:42:5b:c8:ab:
0d:09:25:84:dc:14:b4:8f:05:b0:4b:e2:36:8c:51:
a7:b7:88:c4:ae:1c:20:d7:e3:17:46:9d:65:b3:58:
19:5d:de:db:e0:88:f9:5a:53:d1:cf:a7:dc:ce:23:
95:4b:ce:b6:ff:52:db:0e:c1:69:64:a1:0e:e0:b5:
c1:55:ad:09:63:32:f9:34:95:ec:ab:27:db:5e:7c:
3e:f5:7b:c5:d6:a8:0b:64:94:1f:ef:0b:06:e8:f6:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:F6:37:16:F4:1C:97:41:0D:6F:9B:84:48:89:2E:D6:99:A2:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/275b5acb-af1b-45c1-8d2c-ee84e17069c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4040::/48
Signature Algorithm: sha256WithRSAEncryption
9c:33:79:f0:2e:12:38:d6:00:0b:dd:00:d8:38:4d:50:d7:7d:
a1:93:51:bd:f6:bd:20:d9:83:d7:da:fb:b6:d2:90:b4:a6:50:
b5:f9:73:9b:7b:31:6e:7e:89:d5:3c:e9:52:14:19:23:f5:eb:
ad:cc:23:eb:fe:4f:d0:60:8a:d2:11:1c:85:0e:fc:34:24:13:
9c:7c:97:44:c7:d6:b9:06:cf:6a:8a:c5:80:c5:1c:18:9a:bb:
93:70:eb:80:65:00:95:8b:8a:bf:fe:7a:60:62:c7:fc:1f:96:
32:6e:94:32:e0:b1:0d:00:ee:6e:b7:22:55:2f:0e:67:1e:e7:
01:05:29:25:7b:e0:02:2f:6d:e5:85:d7:a5:d1:83:c5:d6:33:
cb:64:0a:df:bc:d9:3d:98:dc:91:0a:78:80:ed:5a:13:eb:61:
b1:de:c7:ab:15:8f:36:b7:7b:5a:e3:14:ec:10:de:33:21:da:
39:b8:fc:eb:71:64:24:00:01:33:55:e9:93:ff:36:cb:3e:24:
e7:dc:cb:58:04:aa:b5:4c:39:95:5d:c7:58:35:a2:ea:a4:fb:
d6:68:32:cf:8c:38:5c:17:c2:c4:36:e2:c9:f0:12:fd:15:c1:
4f:68:41:af:c2:e2:cb:55:d3:47:a6:5b:61:f8:87:57:d3:84:
7e:ad:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:48 2025 by rpki-client