Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
File: 356f05f3-9814-4715-9f58-bf044bf5d10f.roa (raw, json)
Hash identifier: foPbnreKvdjGoeLFya6qgf5ReMhlJdObX2AZJfVPvA4=
Subject key identifier: AE:7C:A6:34:CF:EB:C6:64:03:3E:10:7F:16:45:2D:D8:04:08:F9:9D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3DBF3535A32463E745FFDEBD301680CB68DBECAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
Signing time: Fri 31 Oct 2025 01:40:05 +0000
ROA not before: Fri 31 Oct 2025 01:40:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bf:35:35:a3:24:63:e7:45:ff:de:bd:30:16:80:cb:68:db:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:40:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=5419e042a6e1b246889a6630fefdfbf4bd3c806e514799ad93a729664ea7db14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:c7:29:53:ca:0d:dc:ee:fd:00:de:dd:d9:
e8:cf:9e:59:b1:d7:09:51:dc:fe:b6:02:d5:dd:71:
67:04:df:01:23:af:80:ae:df:d2:ab:64:51:76:18:
bc:2e:52:22:b8:4e:ce:71:ed:99:23:8e:21:46:bd:
6a:01:42:b7:39:d7:9d:b1:04:7f:5f:e0:d0:ca:57:
e1:c2:20:b1:80:44:3b:f8:6f:63:9f:64:51:00:ce:
9e:63:67:b1:64:d8:be:b6:bf:a2:3a:33:a1:51:19:
ec:96:ce:65:20:84:bc:06:f2:1c:28:9a:5d:06:99:
61:37:e6:01:63:39:aa:7a:65:e2:75:54:61:9e:23:
b9:d5:a2:ac:89:25:c6:5c:b6:0b:f8:0c:51:3a:e7:
b0:70:63:c1:2e:53:73:65:87:05:01:56:82:6b:5a:
7e:87:9d:b4:12:c3:59:97:99:90:f6:ea:40:36:b3:
5e:1e:57:59:9f:cf:23:8e:92:97:c8:a0:0b:cc:4a:
af:39:65:cb:03:d0:2a:12:4e:61:31:9a:76:b9:b5:
1d:d6:f5:05:90:58:5c:1a:39:9b:5e:c5:7d:af:42:
ce:7d:ca:a5:cb:57:a5:fe:00:24:b1:d3:83:c7:87:
9b:0a:78:17:50:12:fd:65:45:ab:27:22:14:96:52:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:A6:34:CF:EB:C6:64:03:3E:10:7F:16:45:2D:D8:04:08:F9:9D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:880::/46
Signature Algorithm: sha256WithRSAEncryption
13:d6:b4:3f:71:0f:07:6b:fd:fd:da:ad:57:85:c7:01:82:96:
2a:f0:2a:1c:ae:49:90:00:ac:fb:97:21:9e:69:62:8e:4a:b4:
48:f2:d3:58:10:ef:aa:c3:44:67:86:1f:74:7d:21:fe:ca:de:
f0:69:77:3a:93:8d:d9:a5:cc:4c:f5:74:61:90:7b:c9:a9:b2:
9e:4c:2b:97:7d:4b:f9:55:a9:96:fd:d4:61:7d:ee:f5:f1:fc:
c3:96:f6:85:90:ec:02:ad:56:71:85:43:c7:31:81:ce:71:4f:
3a:00:6c:3b:bb:05:47:30:c6:6a:dc:4e:1a:b9:4a:0b:82:29:
ad:af:e3:53:ea:af:fd:5c:5b:d7:da:3a:8c:04:54:95:10:47:
15:60:e9:7f:05:11:91:e6:db:70:4f:52:3d:9d:44:2f:7d:97:
54:54:72:9f:d2:04:b8:e9:4d:1f:f7:7a:28:c8:e8:41:2b:be:
96:c4:f1:1b:2d:fb:99:00:db:37:72:7d:47:6a:ac:55:e9:a1:
bc:c3:d9:f0:83:b6:51:2b:49:20:f4:ef:5b:e9:2c:1a:2a:0e:
d4:88:01:90:a1:04:23:0b:62:6b:f5:70:8a:f2:aa:2a:7e:7e:
9d:16:31:f2:d9:d2:f5:03:91:0a:f2:78:d8:31:f6:3d:92:bc:
e8:97:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:53:32 2025 by rpki-client