Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa
File: 5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa (raw, json)
Hash identifier: H7CUJFhdiQO5Zsx6pBADyeJFX/xkgf+oeYV/eDd/yog=
Subject key identifier: 2B:A6:8B:97:90:AA:CE:DD:03:6B:83:2A:EA:FE:67:97:32:9E:66:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57E44BC8DB274398E163D09FF9B497863EAAB5A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa
Signing time: Tue 04 Nov 2025 02:50:38 +0000
ROA not before: Tue 04 Nov 2025 02:50:38 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e4:4b:c8:db:27:43:98:e1:63:d0:9f:f9:b4:97:86:3e:aa:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:38 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=cd0b3ca9b0fa8aec9fa1336e6cb229a8b6e919a07fbf41416955ef91e9596c2b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:66:43:a8:26:6a:c5:dd:c9:fa:ed:a7:8b:
21:98:d3:5d:a7:7e:13:93:6e:e9:a9:34:34:0b:81:
b5:c1:57:e0:56:77:37:0a:f6:da:55:76:f0:d7:1c:
57:cc:48:b9:42:67:c0:ae:f6:b2:1a:a5:2d:7d:c3:
fd:4e:57:f5:23:d5:e1:37:ca:b7:83:2e:bf:b7:85:
07:6f:3b:a3:1d:04:41:81:be:5e:6f:2b:9e:51:98:
be:14:6b:d2:6c:c3:be:1e:a1:e2:22:d9:b2:9d:72:
42:ef:d4:8c:ec:db:35:8d:59:28:0c:62:07:b6:d9:
1b:3c:d0:9d:80:36:73:7b:70:0c:2b:b0:2a:9f:9a:
8f:9a:c4:46:da:16:55:ed:35:6b:20:91:65:d1:14:
b6:09:a9:a5:91:7e:72:a5:8b:01:46:a9:f8:83:87:
56:39:2e:19:2e:da:8f:03:2a:83:98:44:50:d4:3c:
07:51:0c:49:1c:bc:05:d7:2e:e9:6a:67:22:16:79:
bc:c7:1f:4a:71:13:24:e2:27:f5:d9:09:a3:cc:83:
94:5f:1c:92:85:96:d4:ed:24:ab:ae:16:a4:82:5b:
4d:2f:32:39:79:22:4e:7c:4c:37:3e:7f:55:c7:05:
b1:0f:01:51:54:e1:8a:98:fb:4c:17:d7:e4:04:47:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:8B:97:90:AA:CE:DD:03:6B:83:2A:EA:FE:67:97:32:9E:66:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d322170-f0d4-4cd2-98f4-e2f1db786c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:1000::/40
Signature Algorithm: sha256WithRSAEncryption
35:94:6b:b8:1e:76:c2:fe:7e:8f:da:2d:a1:0e:81:c8:e4:fe:
5f:eb:be:6e:84:e8:6c:f0:a2:80:46:9d:30:3f:4d:89:d7:9a:
a9:d9:be:62:f1:ce:03:e1:e0:79:08:de:ab:0a:a1:67:8a:3c:
19:e1:9a:45:da:18:6a:5f:67:18:c4:3c:66:0f:b2:0e:1a:a8:
9b:dd:d9:ef:f0:9e:e4:09:50:56:b7:02:92:22:c5:9b:85:96:
d4:1a:ad:02:77:9d:d3:31:26:74:77:1e:aa:2d:a1:b1:35:7c:
e1:6a:4f:6d:14:bd:a3:85:e4:48:91:c6:87:e8:ae:77:4e:7d:
17:c7:7a:e5:17:57:d0:74:a1:60:99:e4:ad:68:d9:ae:60:6e:
3d:50:9b:86:d2:c1:b0:35:af:64:39:b8:c7:47:73:d5:a6:76:
71:35:d0:83:ab:a0:4f:5c:f4:52:c0:c0:2e:66:e2:8c:03:d4:
84:75:8a:ef:8a:b4:ed:69:16:72:2f:42:7a:33:de:b1:16:85:
51:38:5b:95:5d:2f:a3:4e:e0:ff:b2:5e:07:78:3d:32:85:07:
41:90:79:d2:61:2a:09:a6:39:be:ad:1c:f4:84:a4:59:02:8f:
5b:78:2a:d1:58:fa:c2:f1:3e:96:c1:ff:28:a5:98:1d:8f:b7:
8d:0f:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:40 2025 by rpki-client