Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
File: 56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa (raw, json)
Hash identifier: FJctNHl07s3d9NSubsuhkzz2bR8R2rXIxwSn4WnlUDw=
Subject key identifier: C4:0C:30:D4:9E:CC:93:8B:3B:6B:F9:31:66:DD:70:95:49:BF:AD:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04293ACA3261ABC2A1CF5E8CEBA775AC7AED98B9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
Signing time: Wed 29 Oct 2025 07:36:48 +0000
ROA not before: Wed 29 Oct 2025 07:36:48 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:29:3a:ca:32:61:ab:c2:a1:cf:5e:8c:eb:a7:75:ac:7a:ed:98:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:36:48 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=83c5905fdc8d4c38b8e9a9a1cb2445e6ddab47afae09abc62d31bd41aecffce7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:79:ef:cc:6e:5a:b7:ee:8e:7b:86:39:bc:
6d:6b:35:c0:03:43:ef:51:2f:57:7f:80:83:10:dd:
7f:cc:6b:9b:68:f0:20:80:97:36:60:2b:a7:ae:25:
28:d8:8f:00:e4:e3:84:42:16:c4:bd:85:a0:0a:f5:
7f:80:9b:67:b7:87:1c:54:d7:c1:e3:fc:49:2f:14:
82:17:56:ff:67:a8:99:9f:3d:2c:46:e1:07:cb:fb:
17:73:4a:97:3a:92:6b:cc:a3:b7:e6:0e:59:38:3c:
f2:d9:fb:1c:43:fa:1c:ff:4a:89:3f:2e:76:00:84:
9b:c2:22:5f:28:97:4c:f4:9b:e0:24:f5:31:89:24:
e9:54:c5:41:b1:26:12:c0:dc:51:64:c3:c8:a0:74:
86:77:c7:bb:f3:3c:b6:61:6b:9b:5e:11:87:c1:f1:
bc:09:62:84:64:01:84:28:43:ec:0a:10:d2:be:17:
ce:dd:3e:78:ce:54:03:8d:d3:54:7a:3e:b7:d1:35:
10:9b:51:05:80:14:8b:97:ec:cc:a1:27:8d:fd:94:
de:01:d3:dc:42:d3:c0:67:2e:5b:29:8b:33:65:dd:
b8:29:4a:9d:7f:ff:20:50:bf:e5:5a:cc:92:94:3a:
c0:fd:54:a5:24:62:8b:1c:1d:80:98:e0:21:00:f5:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:30:D4:9E:CC:93:8B:3B:6B:F9:31:66:DD:70:95:49:BF:AD:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c94df9-71ae-4a4a-8ebc-c8c1d589a4c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
6a:8e:98:5e:1b:08:87:5e:94:65:01:a4:f7:7e:05:46:32:2c:
b6:55:8d:d3:ca:8e:5d:28:47:f7:f2:bb:19:14:a6:86:65:c5:
4a:2d:2a:5d:3e:73:c2:2a:44:42:14:e4:15:6e:be:cd:92:44:
1f:b9:c0:7f:48:37:e5:dc:0d:57:14:bc:f6:6b:24:f1:90:9e:
c0:dc:38:03:e3:03:0b:76:a9:cd:51:8b:7b:04:62:6b:07:2e:
62:ae:8b:32:18:c1:32:c1:1b:56:47:d7:88:1c:a2:37:20:41:
81:20:f5:13:d8:16:14:b3:67:a0:c2:2e:1f:d4:98:23:1f:b8:
71:70:07:be:d2:93:a3:a8:37:77:b5:9d:ed:8d:d6:20:c1:f5:
75:a1:10:b5:39:57:d7:7c:e5:ea:6b:2e:8d:db:1d:f5:4c:2e:
27:70:8e:62:b5:6e:51:d7:ff:1d:a4:1f:c4:48:74:88:d2:65:
9e:55:dd:0c:af:b7:81:4f:44:ab:b0:b2:a2:c7:60:0c:94:8f:
72:b1:9e:21:5e:2f:87:1c:e7:ec:de:65:88:63:ee:5c:6c:b7:
54:76:2a:a5:01:e1:d9:0a:3f:58:8d:72:2a:b5:5d:76:c8:83:
5b:e4:03:84:e3:26:a5:d5:d5:4c:a0:ea:aa:61:be:e5:ef:f1:
fb:cf:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:49 2025 by rpki-client