Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa
File: 2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa (raw, json)
Hash identifier: 4RxsMbwQb9OccnUbu/FDaEQqCwGELLKJioguptAN9kE=
Subject key identifier: 88:64:A5:6B:B9:E1:00:B6:F8:F6:66:0E:0E:51:4A:A7:19:E2:CB:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BAF25CF68CCC5F3A0CDA3949582522E1C6227DA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa
Signing time: Sat 01 Nov 2025 00:00:06 +0000
ROA not before: Sat 01 Nov 2025 00:00:06 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:f000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:af:25:cf:68:cc:c5:f3:a0:cd:a3:94:95:82:52:2e:1c:62:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 1 00:00:06 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=ffe3095d9beed5ec84c96254eb1bb57e8a89d58d0669ff6458758ed8a1f20b98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:6f:59:bb:cf:06:6b:0a:b7:ba:83:7f:78:
80:ff:c2:d4:e7:25:76:de:08:9d:c2:2f:95:35:4e:
b0:70:20:3a:08:42:85:d7:b3:2f:2c:1f:fd:19:36:
e8:3d:64:42:df:a5:91:2c:4a:26:95:46:ea:41:7c:
31:28:72:6b:13:9f:74:22:46:39:75:ab:cf:d4:43:
8a:8e:44:dc:8d:56:f9:ab:25:86:be:a7:39:f0:8c:
87:8f:df:78:5b:f1:1d:5f:09:8b:83:4a:c5:59:b6:
fb:ad:5c:64:3f:b4:11:fa:35:5b:65:f2:56:02:f0:
0c:5f:4a:4b:7b:85:a6:83:5b:b2:86:62:c5:f2:f4:
26:6b:cb:46:a1:72:44:af:fc:21:16:94:84:f5:6c:
07:65:75:16:db:9a:fc:17:e5:81:6b:12:2c:0b:07:
c8:b5:04:0b:b9:fa:45:e1:f3:ab:85:93:46:f7:f7:
20:ae:b6:3f:9a:66:a6:8c:1a:65:42:20:c6:18:99:
b8:80:eb:8e:f5:61:4f:48:f3:7f:4e:a2:d1:ed:35:
72:fe:f1:d1:dd:3d:16:7c:da:0d:8c:67:dd:8d:ea:
4e:1d:91:fa:fc:ce:a4:29:fe:c9:44:c9:da:dc:e1:
1d:c9:b5:9c:3b:fe:0e:3c:5d:15:18:ff:71:4b:0e:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:A5:6B:B9:E1:00:B6:F8:F6:66:0E:0E:51:4A:A7:19:E2:CB:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e5950d7-064f-4bc9-9ec0-ccb72ee4fb5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:f000::/40
Signature Algorithm: sha256WithRSAEncryption
48:1e:23:71:95:17:a2:93:2f:8e:29:c6:b4:72:ca:15:00:fe:
0c:67:41:3d:ad:f1:71:9b:4a:af:5d:18:89:6e:5a:7a:04:51:
24:a0:e6:fd:89:08:9f:54:6c:28:5f:3b:47:f7:fb:47:f8:d7:
77:95:62:75:eb:f2:71:a9:fb:86:ea:3a:0f:8b:aa:9f:8a:3e:
98:7b:4c:31:f1:e6:5d:47:20:f4:de:dc:1e:e6:31:52:47:33:
5e:79:86:4b:39:3a:2f:c5:c5:0d:59:fc:c1:2f:83:99:29:7c:
93:d6:53:2e:fe:90:7b:87:88:95:a0:6e:6f:af:e8:30:8b:19:
1c:6f:88:62:95:c6:81:fc:69:fb:25:fa:00:5c:16:b6:2b:fc:
0a:c8:2d:e7:ef:06:33:79:4d:b0:f2:29:9a:ce:16:bf:e0:dc:
68:0a:7b:07:c4:37:6f:1d:09:8b:31:0a:41:59:99:5a:b1:53:
d6:1b:90:a0:7a:5b:9c:45:8e:43:8c:74:52:d2:6a:4f:57:eb:
c6:2b:30:a1:f5:2f:9f:36:2c:33:e9:cb:f3:9f:d8:b1:68:2e:
d8:06:d7:89:d8:98:fb:f2:26:1b:04:85:99:fa:23:e8:0a:38:
26:5b:fe:94:4a:97:77:1d:e6:fd:af:42:8a:80:76:19:7b:33:
57:d5:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:45 2025 by rpki-client