Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44ba21ed-7966-4228-a560-fed2cedee366.roa
File: 44ba21ed-7966-4228-a560-fed2cedee366.roa (raw, json)
Hash identifier: ZqcsCrnAseds4lrQmFbpIoWrn0o33WzhONRYgvUXPzE=
Subject key identifier: C2:EA:E1:C1:7C:E5:8E:CD:43:4D:2C:2C:47:3F:63:E1:CC:7A:09:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44A775F3A6EEC9F5B20555A376749D99D05AE507
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44ba21ed-7966-4228-a560-fed2cedee366.roa
Signing time: Wed 29 Oct 2025 07:28:13 +0000
ROA not before: Wed 29 Oct 2025 07:28:13 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a7:75:f3:a6:ee:c9:f5:b2:05:55:a3:76:74:9d:99:d0:5a:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:13 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=0548f98842e9658b40ebe2faaddc83e5d0661ffd2598d1356409bb78f6aeb479, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:0e:05:13:28:fe:f1:83:35:5b:ab:3c:f7:
5d:03:5e:94:c3:4f:ba:36:42:e7:5c:e2:c8:40:2f:
7f:4b:0e:e5:24:d4:0d:64:aa:0a:cf:87:b3:24:64:
88:ce:41:59:5b:7e:d2:51:6a:23:73:6a:2d:ce:b5:
e8:03:3f:05:07:c5:99:3c:63:c9:b8:2d:37:34:af:
44:d3:dd:7e:5a:96:7b:8c:8c:bd:20:5d:e5:07:27:
f5:68:25:ef:2b:e1:f1:e6:cc:bb:0e:f4:26:8f:33:
88:3f:f4:9b:b1:74:b8:b6:0a:da:d1:5d:89:42:62:
2a:43:a6:bd:84:f4:a1:61:fe:55:de:ca:f5:80:cc:
75:6d:e0:b7:f9:75:8a:60:98:14:b2:4a:6b:f4:59:
30:91:0d:e1:3c:25:83:10:35:18:ed:50:a5:8b:5d:
10:8c:8a:24:a2:3b:1d:a7:32:77:80:0b:96:36:2c:
2a:22:09:93:71:14:df:cf:7c:1b:a6:83:ec:dc:3d:
d8:17:65:79:80:3c:83:12:ef:06:8a:03:3c:0d:96:
d5:40:bf:46:66:67:d2:b1:01:f3:0d:0b:d5:44:c6:
38:3f:2c:b5:f6:a5:8a:b9:bd:3b:5e:11:47:a6:12:
bf:ab:4f:a7:22:4d:a4:03:e3:4a:dd:48:b5:3d:9d:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:E1:C1:7C:E5:8E:CD:43:4D:2C:2C:47:3F:63:E1:CC:7A:09:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44ba21ed-7966-4228-a560-fed2cedee366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:8000::/36
Signature Algorithm: sha256WithRSAEncryption
09:b3:9b:1e:94:09:17:2b:aa:9d:98:e5:50:17:60:c6:85:e9:
23:9f:2f:a5:e4:b5:3f:2b:9a:d7:2e:ac:b2:8d:9a:5e:68:77:
69:3c:a2:56:f4:d2:9f:88:3e:8f:92:3c:61:2c:80:80:8f:04:
20:03:7a:85:a9:c2:6a:01:f9:44:85:d0:d9:ee:44:32:58:f4:
93:19:54:3b:00:11:00:46:6a:65:6f:51:04:b2:4e:52:7d:db:
f0:b9:4a:60:e6:cf:c2:bb:a4:f7:2a:f4:2f:c1:05:23:3f:7b:
a2:80:a4:00:eb:20:b8:78:9c:77:cc:5a:ad:17:c7:d3:75:15:
6f:cb:84:d7:9c:3c:67:25:55:04:6b:ec:c5:d1:a9:5b:d8:1c:
3b:f0:ac:75:24:63:c4:1e:7c:82:4a:ac:17:06:f1:94:20:98:
3e:5e:4b:60:b1:e4:bb:21:89:79:b2:fe:e4:8a:83:07:3a:63:
82:07:d6:a1:c1:de:45:98:0e:d3:e1:28:c6:c1:6e:97:10:9c:
b7:4e:e9:10:f8:34:03:22:cb:80:74:2c:d3:08:b9:38:bc:41:
18:4c:cc:50:74:76:c4:39:db:2a:6a:9a:c6:07:6b:4a:3e:2f:
77:01:f4:aa:ab:6b:b2:23:3e:4f:70:b0:f9:df:46:ab:6d:25:
bb:c8:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:35 2025 by rpki-client