Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
File: 4581b00e-602d-4a4b-b191-1af16885c541.roa (raw, json)
Hash identifier: I/Mw8GVlNubXaC/XeRmBmH5aNRJwjAocsBP2dwARwCc=
Subject key identifier: 7C:A4:9E:87:56:F2:6B:A2:D8:72:16:3E:D7:B9:99:97:C7:77:28:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79BE7A3CA19E5FDCA7D79EE29B3CAA58A5BA66E1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
Signing time: Fri 31 Oct 2025 01:20:08 +0000
ROA not before: Fri 31 Oct 2025 01:20:08 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:be:7a:3c:a1:9e:5f:dc:a7:d7:9e:e2:9b:3c:aa:58:a5:ba:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:20:08 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=608779610015f02c7e79738719749beed97a4f81a2b78fbcef4ed116ce1a30ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:27:ae:61:d8:6e:39:24:da:1f:30:bb:e3:
d6:19:06:8a:31:27:84:4f:f4:aa:11:ee:a1:67:2a:
b3:26:4a:1e:ef:b2:16:4c:7f:66:85:e7:19:2e:65:
f8:d5:1d:63:3c:f6:57:26:58:56:f1:d4:19:dd:4f:
89:a1:28:62:d0:49:be:98:ae:9c:ea:1b:d2:ef:53:
1a:f1:34:8a:80:61:24:8e:73:c2:37:4b:c7:ab:d1:
be:75:60:1b:26:ab:6d:1c:46:36:8f:b1:63:d8:ec:
c5:cd:9b:15:22:27:b0:2e:47:c3:fc:c7:d2:c5:ea:
51:cd:0e:1b:77:ef:01:48:10:ba:5a:f4:18:7d:5f:
44:f6:69:24:88:1a:92:12:8b:62:6f:49:56:1a:47:
5e:69:59:4d:48:18:9b:02:82:05:6e:99:67:b5:4c:
35:83:4b:b3:6a:d7:93:3f:92:53:26:fe:b2:76:dd:
2c:fa:f4:8d:ed:d5:6a:f3:a4:78:1c:fc:41:56:12:
ae:c5:9b:56:6d:00:ce:92:41:4d:5a:53:fc:1e:ac:
62:51:d5:da:2f:d3:f9:41:2a:00:55:79:a7:16:13:
98:99:7b:02:1c:7c:0d:15:cb:cb:ce:cb:2a:2f:75:
25:34:8a:82:72:6d:6c:a5:53:f9:f1:85:7a:1b:8c:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A4:9E:87:56:F2:6B:A2:D8:72:16:3E:D7:B9:99:97:C7:77:28:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5000::/40
Signature Algorithm: sha256WithRSAEncryption
14:7b:03:1b:f8:9e:71:ec:01:ae:13:b1:6e:4b:d4:e6:a4:a0:
fd:7b:f5:f4:cf:ff:09:50:4a:64:a7:e1:fa:9a:b1:86:d3:96:
a4:db:2b:ef:92:be:21:87:6c:e4:9f:a2:ee:53:cd:f6:80:10:
69:4d:54:2d:7d:65:13:8c:36:bd:da:2f:4c:8b:b0:2f:71:af:
81:28:51:cf:dd:95:5d:5a:70:52:be:88:01:6b:31:76:7b:7d:
f7:90:eb:d7:00:d9:23:f3:8d:a8:74:26:ad:c5:25:3b:23:0d:
7b:f4:13:1e:04:ec:a9:dc:81:cb:35:85:62:fe:b5:b5:3a:83:
11:fe:30:ad:f7:f5:28:7f:1a:54:fc:18:4e:75:c9:0f:f3:fa:
7c:15:39:e7:1b:0c:ab:eb:31:92:e2:87:01:c8:58:c9:cd:a5:
38:82:7c:e5:02:98:6e:d4:37:17:70:38:fd:de:55:f0:c4:91:
31:c8:f5:52:24:41:78:a1:10:56:30:21:a1:69:f3:06:7e:48:
32:a4:5d:00:71:2c:b5:ba:3a:c8:85:b8:4c:6d:35:85:b3:fc:
fe:29:85:6c:fd:fa:50:25:ac:f9:73:94:24:9a:bd:45:92:4f:
b9:1d:c0:95:15:74:31:45:9d:3c:41:67:c5:20:47:0c:86:de:
ad:a2:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:51:37 2025 by rpki-client