
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
File: 46510026-3bc6-4802-9977-5875dcaffcac.roa (raw, json)
Hash identifier: XtUBC+jip9lUn1K0NTnBLkJ13zXddAIaA2ZrPHvcdLg=
Subject key identifier: 1C:9C:67:7F:C3:BE:DF:57:85:2B:6E:B3:4A:1F:60:14:01:F5:EB:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78F8389C02BF0B14603E304C9043E0B1A8680BCC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
Signing time: Wed 30 Jul 2025 20:07:19 +0000
ROA not before: Wed 30 Jul 2025 20:07:19 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f8:38:9c:02:bf:0b:14:60:3e:30:4c:90:43:e0:b1:a8:68:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 20:07:19 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=6c5b6727c924733f679c1dafb2d61bb47f5721cc0b6ef21275f970e00d060603, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:a3:cd:a8:c3:49:41:bf:13:ac:79:2c:4b:
05:41:b1:52:76:49:ca:25:e6:f1:b2:5d:5a:b3:00:
c6:d1:a3:7c:42:8f:f9:aa:64:04:48:4e:8b:aa:67:
31:d0:38:ac:fc:de:d0:6f:d3:4c:7b:16:92:69:d1:
b3:6f:57:10:27:d7:e5:1e:a5:e1:1c:71:5c:3f:7b:
06:eb:d3:3e:44:8d:f1:e0:e0:78:ae:2f:23:de:f9:
4d:d2:23:f7:b0:83:ee:bb:21:87:c5:44:82:fe:2a:
5f:57:32:24:7c:d8:da:8d:6b:d8:93:d0:58:50:06:
d3:55:56:b5:4c:52:21:9b:d2:52:cb:36:24:2c:8b:
0c:40:19:64:19:2f:d2:24:da:57:20:7c:f1:f3:9a:
b6:2a:f0:57:c9:b9:20:ae:ac:0b:8d:e1:24:8a:89:
1d:93:4e:54:61:a9:c4:69:d6:9c:7f:37:68:44:84:
ef:9c:2a:90:3a:c6:f3:fd:6c:f5:fa:86:94:80:2c:
ea:3c:a9:e8:ce:66:12:c5:52:40:a6:0f:97:3b:a0:
0b:e2:dd:87:3c:7a:31:7a:76:81:7b:95:f8:b3:69:
74:41:20:bc:ee:e8:dc:c2:f7:54:9b:46:fe:9e:81:
25:17:be:5e:d9:e1:cd:c5:c3:78:44:68:c1:2c:37:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9C:67:7F:C3:BE:DF:57:85:2B:6E:B3:4A:1F:60:14:01:F5:EB:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46510026-3bc6-4802-9977-5875dcaffcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
35:b5:b3:ca:52:52:7a:1e:3b:e4:6b:a6:35:ac:e7:99:90:15:
f1:5f:37:32:ed:8e:41:11:b5:b9:ca:a4:61:ea:06:48:c8:b7:
48:18:32:fb:f9:4d:a9:d4:b4:20:20:ba:f2:6e:7b:4e:d1:80:
76:26:3a:df:5b:a1:ac:56:f6:f7:07:24:c7:54:5f:3e:71:16:
77:d8:d8:94:3c:b0:1a:d9:c6:62:f2:3d:3b:83:5e:c8:33:21:
1c:ac:21:52:be:4b:9e:b7:66:82:b7:c8:c5:f3:a8:17:3f:06:
06:7b:81:6b:8d:1a:7a:ab:16:2f:6b:88:8f:1d:65:f3:4c:1d:
38:0f:45:54:38:b1:dd:e7:06:29:ee:34:f9:24:b6:30:b8:dc:
7f:95:1b:b3:dd:58:85:d7:68:04:2e:99:44:1d:65:64:02:86:
d4:26:b5:d0:6a:27:d4:60:b0:40:9d:3a:bb:6c:33:0e:2a:cb:
80:d8:93:6a:3f:74:f4:5f:cd:ba:b9:6c:03:d0:ae:64:07:2a:
55:29:f1:35:a6:91:64:32:f4:7b:dd:8d:47:36:0e:0e:f0:eb:
86:6d:49:42:1a:a9:76:16:b9:7e:ff:e0:95:e4:f3:ab:47:e4:
ec:91:45:26:16:97:6b:70:99:70:71:96:94:5c:73:83:df:48:
74:1f:a6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:00 2025 by rpki-client