Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
File: 376be0fe-aebc-4855-80a4-ea95cf413b51.roa (raw, json)
Hash identifier: O8Nvc+F82UxOV1JhS+Irr2hludoQh1qNPrLuf1qgrMU=
Subject key identifier: 07:0A:5E:1D:57:5D:CB:FC:27:BF:0F:D1:05:0D:0E:03:58:1B:68:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76379EA5FA2487B081A89AEAD655E5355ECDA57C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
Signing time: Fri 31 Oct 2025 01:40:03 +0000
ROA not before: Fri 31 Oct 2025 01:40:03 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:37:9e:a5:fa:24:87:b0:81:a8:9a:ea:d6:55:e5:35:5e:cd:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:40:03 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=673a6bd08a4e38bfa22b7ed5c91bd7fdb23e7ce57c4d9882b87d070073c438e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:70:16:a9:47:76:04:77:77:19:e5:93:04:
c9:d0:ae:ab:25:db:e1:2d:72:a8:24:34:c4:cc:b7:
49:6c:4f:98:a8:5f:10:98:9b:7b:05:13:df:30:94:
41:0f:c7:dd:2a:0e:7e:2c:8b:3c:79:f2:7c:47:09:
fe:86:05:78:ba:8d:0d:45:a2:5a:c1:6c:0e:09:28:
1d:9e:2e:a9:ca:c7:96:a4:33:9b:4e:09:1b:25:d8:
32:75:5e:3f:49:93:18:2f:f1:90:bd:9c:72:c6:9e:
74:e4:dc:f5:c0:c7:5e:8f:7b:5b:90:a4:18:28:d5:
1a:43:e0:ed:f1:cb:18:d5:82:5f:1a:2d:5d:13:c6:
43:c2:3b:40:d7:b7:f4:33:92:4b:26:82:67:5e:1c:
10:bd:2f:9b:4c:8c:ac:fd:c7:d4:b6:04:fe:88:f2:
02:5d:48:3c:78:e6:46:ac:e4:3e:b8:e0:96:18:af:
b0:65:54:ac:0b:04:ee:0f:ce:db:3c:b3:38:50:0d:
69:5d:74:49:2a:4a:ea:eb:26:ac:58:4d:ee:35:20:
87:71:46:d0:ae:32:e8:4c:69:d7:c2:3f:55:78:65:
6d:18:7a:0f:a8:54:28:26:29:2d:f1:40:9d:f5:21:
a4:56:68:72:7a:21:e8:d4:cf:97:19:04:04:08:cc:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:5E:1D:57:5D:CB:FC:27:BF:0F:D1:05:0D:0E:03:58:1B:68:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/376be0fe-aebc-4855-80a4-ea95cf413b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:5000::/40
Signature Algorithm: sha256WithRSAEncryption
77:fa:29:b0:25:ed:26:1b:1b:dd:09:f2:fa:23:bf:ce:43:35:
08:6e:80:bc:25:d6:5f:16:a5:f8:03:b7:f6:8f:68:05:d6:45:
0f:a0:f4:fe:b3:c8:10:7b:74:44:4e:69:41:f2:ca:6f:00:f8:
b0:59:9f:6b:07:d2:c1:ea:f9:9d:e2:61:e1:24:ba:b3:e2:b9:
64:d3:89:19:d9:c4:59:35:31:0d:6c:d2:75:0a:8f:d9:52:04:
62:03:38:df:60:75:bb:7e:b1:16:cb:ed:2b:04:8a:13:f9:88:
87:41:78:28:8f:be:15:08:c4:d8:d5:ca:f3:08:79:da:f0:64:
ba:b5:ca:6d:82:0a:68:b2:d1:e2:69:c1:3e:75:11:c5:9d:98:
a3:66:e8:c4:45:1b:46:5f:42:24:e7:e9:d3:7b:5a:57:f0:51:
21:b3:15:38:b4:b0:de:01:4c:cb:45:d7:41:40:96:fe:94:63:
a5:bc:3b:e9:fb:3e:c8:3d:77:4f:ec:dc:e1:28:7e:4f:89:42:
b2:d0:dd:a4:82:98:03:5e:d6:71:fa:0a:20:5d:bc:19:05:76:
99:25:61:04:75:c7:24:35:33:88:52:15:ba:4e:d0:49:5f:06:
ac:95:60:c2:9a:06:43:bb:58:a4:33:ab:d2:eb:07:a4:33:2a:
aa:a1:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:28:11 2025 by rpki-client