Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
File: 5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa (raw, json)
Hash identifier: xzXpxcXtYFe/Ct63ZS189RPd35CbzuidQm33qhobSs8=
Subject key identifier: DC:A1:39:FC:27:17:63:0A:90:ED:92:6C:26:99:A5:D7:31:DD:41:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C1F5731DC13098DD9514FE82B4AE48C9018877B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
Signing time: Wed 29 Oct 2025 07:28:18 +0000
ROA not before: Wed 29 Oct 2025 07:28:18 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1f:57:31:dc:13:09:8d:d9:51:4f:e8:2b:4a:e4:8c:90:18:87:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:18 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=4ff1ecbdee2388e8bc7343fb81714acae5dbfdaf763a19258cad06d079d68db7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:66:37:b6:12:b7:3a:41:06:9b:a0:78:a9:
e5:ca:04:3a:5f:7f:ab:45:bf:eb:ff:46:c7:24:af:
6a:76:55:1f:b8:e0:7c:74:da:6f:c0:32:14:56:cd:
63:60:03:ef:18:3e:92:0c:aa:f9:38:ed:f8:3c:22:
6e:30:6b:e4:15:4f:d0:1b:b7:5c:88:29:30:8f:bc:
bf:eb:a0:21:78:40:45:d6:f1:e3:bc:af:1c:9d:97:
d1:9e:46:c8:bd:22:37:ca:1b:81:4e:64:80:d2:16:
c0:d1:08:62:33:ff:e2:ed:7d:86:0b:93:08:68:00:
9c:ed:d7:cf:9b:11:67:d2:76:b7:79:dc:f9:77:e1:
04:28:45:b3:8b:e0:00:45:b7:9a:67:84:1f:7f:bc:
96:56:26:ca:bc:58:44:cf:c7:53:0e:41:af:1b:6b:
62:a8:e6:bd:75:5b:5e:9a:b9:23:05:c9:93:93:d6:
d8:91:f3:0b:17:15:6c:72:4e:80:65:b1:cf:f9:80:
f4:7d:f4:68:0d:9d:3c:d0:61:3e:45:aa:2d:77:ad:
d8:cd:c3:9c:49:35:6f:7e:e5:59:18:f6:65:f0:f6:
20:7a:fa:f6:07:83:01:7b:ee:f9:7d:c4:5e:16:81:
52:01:06:d1:6b:14:8c:c8:95:b7:31:be:05:a6:69:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:39:FC:27:17:63:0A:90:ED:92:6C:26:99:A5:D7:31:DD:41:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5d79f36c-d366-4ae5-8ab0-17966fb8cf8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
c4:3c:1e:b2:30:dc:a4:91:b7:0a:48:7d:58:92:a3:31:84:8b:
83:7c:d0:df:ed:ab:6a:38:08:3a:63:33:5c:63:b3:c3:ae:56:
89:53:26:dd:7c:e4:48:4c:a4:2c:3c:dd:80:07:72:c9:a4:e8:
74:50:39:95:4d:7e:6e:1c:c3:22:54:75:2a:23:ef:08:90:95:
ba:cd:da:00:0c:a5:a7:5f:c4:ee:d3:cc:dd:65:9d:87:cd:be:
48:c5:d4:cc:d2:ec:2b:5b:16:33:7b:e1:28:82:a1:9f:de:6e:
3e:f3:2d:05:22:ed:66:e5:ea:ec:46:9b:f0:a6:de:7b:b6:d9:
e2:56:54:a4:37:85:6e:34:75:cb:f9:d4:45:e4:c7:d8:1d:75:
9c:9c:1f:11:5d:03:9c:74:9c:60:45:3a:f1:e2:1b:c5:83:c5:
f3:32:98:e0:c6:1e:0a:ab:92:77:40:ba:f9:a8:86:ff:b1:be:
61:07:64:ed:69:e2:b9:d6:69:67:be:56:d4:17:fd:32:a1:97:
d9:7d:53:31:35:5b:c4:66:69:77:66:9c:a1:e5:24:c8:b8:6c:
00:29:03:6b:d0:a7:b3:e0:7f:68:fe:99:27:50:79:dc:dd:51:
5c:5a:89:61:06:f4:11:d4:cc:80:56:70:d2:c9:f7:6a:62:5c:
4b:34:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:49 2025 by rpki-client