Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42fc7c20-224c-4e3b-8c6c-851926d0e396.roa
File: 42fc7c20-224c-4e3b-8c6c-851926d0e396.roa (raw, json)
Hash identifier: 3YDT0x8vBlKbUALjqFaAVEcq3bmixK1nuuhZ7Ieezs8=
Subject key identifier: 97:C6:62:AE:6C:F1:14:91:36:00:09:D2:83:17:75:EC:BE:6F:60:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62710687CB2D8E353888DD1551217DB075E8DCD7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42fc7c20-224c-4e3b-8c6c-851926d0e396.roa
Signing time: Fri 31 Oct 2025 01:20:06 +0000
ROA not before: Fri 31 Oct 2025 01:20:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:71:06:87:cb:2d:8e:35:38:88:dd:15:51:21:7d:b0:75:e8:dc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:20:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=4adfbb68c05b8ce12f60d79dc69ce2920a1d4fe03a4bdf8ac63b5387d45c6a1a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:b8:11:8d:66:ee:d8:23:52:5a:7d:07:49:
a3:f1:4a:90:77:e5:01:09:1a:7e:aa:5b:69:b0:dd:
2d:a6:6f:e8:2f:36:9b:d9:5b:8f:c7:0b:0c:a2:cb:
6c:bc:55:c0:fd:c0:80:3a:93:36:b4:7c:03:0f:99:
59:3c:c0:73:4b:00:29:1e:25:37:79:00:be:c1:7e:
ef:16:87:f1:56:e1:4b:4b:42:5e:c2:69:4d:cc:3a:
53:1d:44:1e:a1:20:a1:ca:6e:e5:32:3f:00:76:85:
4e:0f:65:f2:53:30:e0:3b:a6:a7:8e:d7:7a:55:5e:
d9:83:0c:0b:39:70:fb:d7:bb:be:af:d5:eb:25:e8:
62:69:24:ff:6c:bf:1f:91:77:1d:51:3c:51:65:65:
f8:76:f4:4d:6e:9b:5a:4b:cf:13:01:27:88:05:9d:
36:37:36:a5:d6:86:86:f6:38:e2:b3:b7:6a:dc:4d:
eb:b5:4a:9d:0c:cf:a3:c8:ce:ba:b3:25:7b:57:3f:
96:6d:64:d8:61:1d:af:8b:fd:0b:bd:21:3c:d5:4d:
68:6c:c6:d6:e0:23:0e:b3:e8:41:51:a5:3c:f9:0a:
95:5b:d2:fc:65:98:b5:56:0d:60:bc:3d:f1:d0:b5:
5e:72:f3:7d:95:72:4e:53:2a:bc:f4:67:1a:6c:37:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:62:AE:6C:F1:14:91:36:00:09:D2:83:17:75:EC:BE:6F:60:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42fc7c20-224c-4e3b-8c6c-851926d0e396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:c000::/40
Signature Algorithm: sha256WithRSAEncryption
84:61:7c:e0:fb:d1:fd:88:75:fb:74:3d:c2:cd:3a:11:6f:72:
c1:fa:74:e3:d4:42:e0:fd:d9:53:58:24:33:1a:6b:e8:63:22:
84:9a:38:6a:f2:39:5e:9c:00:7e:7a:e9:9f:b9:4c:14:6d:4b:
fb:c0:d9:7d:a1:82:49:ea:b7:fd:9f:2f:91:d6:4c:cc:c9:9b:
90:af:1e:a4:4d:93:c0:59:57:7f:45:ed:2e:1f:eb:30:84:84:
23:b9:b1:da:ee:fb:fc:38:4f:76:44:bc:bc:64:b0:20:f6:50:
15:aa:aa:14:39:7f:4a:c2:40:e8:50:ac:53:95:8b:f9:b0:1a:
d2:c2:73:2b:69:03:ba:7f:a3:ed:e7:7e:3a:75:c7:21:60:ca:
76:cb:ab:db:39:15:2f:e6:c3:34:16:1e:97:b4:1f:fb:f0:cb:
da:85:71:b1:32:a9:27:85:18:12:7f:5b:bf:40:88:72:32:8f:
c6:bd:6e:b1:bd:b6:2b:9d:3b:dc:86:ad:5a:6b:6b:ba:14:1f:
db:1f:92:e6:11:4a:8f:ab:cd:6f:21:ed:18:3b:7a:02:2c:17:
01:bf:55:db:7b:e3:3b:d3:d3:38:1a:c9:fa:ab:e0:53:6d:66:
cc:15:46:73:ab:4e:48:fb:2b:1e:57:09:ac:5c:57:ee:c4:6f:
b0:74:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:28:47 2025 by rpki-client