Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/528c97d8-1890-4c86-9eee-907363f046e1.roa
File: 528c97d8-1890-4c86-9eee-907363f046e1.roa (raw, json)
Hash identifier: yLBvVihTpMBB3nLPeLSJuT2UkJxqygWhz86n5aMJc54=
Subject key identifier: 97:BB:0F:F6:8B:EF:C5:F3:71:E0:72:8B:65:99:CB:6C:66:75:EA:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CD82D8D5BB7252B3CF3EE08E6022DC5EBFAD3ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/528c97d8-1890-4c86-9eee-907363f046e1.roa
Signing time: Fri 31 Oct 2025 01:40:18 +0000
ROA not before: Fri 31 Oct 2025 01:40:18 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d8:2d:8d:5b:b7:25:2b:3c:f3:ee:08:e6:02:2d:c5:eb:fa:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:40:18 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d061b07f960d6157ed837970fed92e17d90234e7e67fd7bd5a486de24efd1969, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:90:ec:58:7f:62:da:f1:25:a8:65:66:a5:
1a:5a:bb:2a:11:d9:e8:e3:d8:7d:79:31:dd:4f:8a:
e9:1e:32:d1:6a:14:7d:0c:5f:7e:49:de:26:3a:9b:
17:e1:b8:37:ac:7a:5d:74:e1:dd:06:15:2c:4d:e1:
d2:17:c8:ab:d0:70:9d:f5:ac:c2:3f:9a:b5:6a:52:
61:e2:c0:58:ed:06:1b:6a:8e:11:79:aa:ca:fe:12:
1c:8d:2d:2c:99:6a:6f:3b:20:dd:9e:f4:b0:bf:83:
1f:0f:2f:11:73:09:15:85:e3:0c:3e:fe:12:8c:4e:
d6:24:39:e2:5e:80:25:67:a2:86:66:92:85:ef:b0:
8b:25:8e:67:1d:e0:5c:62:3e:81:f7:4a:c1:a5:6c:
92:47:6e:4d:ab:49:42:5d:b1:d2:fa:52:fa:7a:d6:
ce:b5:ba:ba:34:92:75:81:80:52:a1:dc:37:bd:08:
af:a8:1b:d4:a1:bc:b9:6c:b4:96:4f:42:22:97:d7:
38:d5:b5:c3:84:41:c7:bf:96:27:6c:ea:7c:28:a4:
6d:d7:0d:08:6e:3b:db:4e:9b:fd:4f:19:b3:8d:7d:
9c:dd:8c:f1:6b:fb:a2:e4:7e:e1:14:d5:69:d0:b4:
d2:48:8c:17:bf:cd:29:ab:4a:57:20:5e:dc:d7:d6:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:0F:F6:8B:EF:C5:F3:71:E0:72:8B:65:99:CB:6C:66:75:EA:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/528c97d8-1890-4c86-9eee-907363f046e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:6000::/40
Signature Algorithm: sha256WithRSAEncryption
63:2c:fc:39:a0:63:c3:45:d9:b2:f3:d5:50:95:e7:6b:91:ed:
22:f0:df:38:72:95:6b:2c:c8:f3:3d:fd:6e:61:4a:44:83:3a:
d1:23:9d:b1:30:a9:21:38:81:f3:16:e9:58:5e:3c:0e:12:3e:
3c:b3:7b:96:70:a1:61:04:1a:66:62:e7:2c:7d:77:bf:af:3c:
32:09:62:ef:5b:22:62:ee:a3:dd:d6:86:1c:5d:0b:14:5f:60:
47:2c:cb:f6:83:71:26:c4:12:15:fa:64:6e:41:21:82:5d:a2:
ff:a8:1d:28:89:a3:a4:c3:43:fe:05:c8:33:77:8e:1b:00:9f:
ac:bd:ba:f5:2d:48:33:c6:b5:e1:6b:4b:aa:80:87:48:88:e5:
5a:05:4b:6b:61:ec:98:ab:b7:b3:7e:30:c4:6b:eb:53:a0:02:
3a:d5:1d:86:70:22:d6:70:ff:05:4b:29:0c:54:77:c0:29:49:
c4:74:6a:de:8c:7c:3b:eb:eb:5b:89:72:c1:7f:bb:e9:fc:3e:
2f:a7:91:e8:72:56:56:86:e6:5c:1d:57:06:5b:0e:71:1b:8f:
78:86:5c:20:24:74:6f:84:dd:7a:a8:b8:56:bc:1c:56:3b:7e:
bc:92:94:1a:10:25:f1:34:7c:41:7c:ad:a1:ff:bc:dc:41:d8:
50:d1:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:29 2025 by rpki-client