Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa
File: 6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa (raw, json)
Hash identifier: yi9NMDdnMfmWgTZaZNYykotv3CbxzoUDB+201JgydmY=
Subject key identifier: D7:EC:4A:69:6A:5B:A2:27:D8:4F:FF:12:A7:56:E2:48:B3:67:F0:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72A6FD8115F83999D71B9C71A1F80E47DE940C8E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa
Signing time: Wed 29 Oct 2025 07:28:21 +0000
ROA not before: Wed 29 Oct 2025 07:28:21 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a6:fd:81:15:f8:39:99:d7:1b:9c:71:a1:f8:0e:47:de:94:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:21 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=e893845aa2b82f40364f7efe720e2d04c8b0cdfc4a56cf3ae82c1416a8013eb6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:58:b9:77:3d:ac:eb:6a:41:97:8d:a8:68:
40:ee:63:64:45:ee:a2:dc:c4:80:9c:84:8f:05:13:
af:4d:23:43:ba:59:c2:2f:01:a5:0a:65:b5:e9:96:
07:c6:bf:ff:e4:c4:b8:2e:36:15:93:fc:c5:2e:40:
9c:c8:af:75:c9:4b:5e:2f:51:0e:8e:bf:18:fc:5d:
8b:96:63:1a:01:82:2e:5a:51:38:43:7a:30:4f:ed:
29:a8:9a:90:10:a5:be:ae:ed:5a:51:c8:c2:56:d6:
64:3b:93:40:5d:50:2c:38:0d:de:66:ed:c6:55:43:
99:78:46:c6:9d:50:f3:4d:02:1f:9a:ae:ce:3c:10:
23:4e:65:96:37:39:84:d4:26:09:fc:3a:e6:41:ce:
6a:05:78:52:fd:bd:17:ab:0a:ee:84:e4:de:8f:b6:
8c:5e:5d:84:df:50:0c:32:1c:78:02:e2:7c:2f:a2:
9b:ae:82:44:63:43:30:18:8f:5a:23:80:85:01:cb:
ad:49:96:2b:80:05:43:ac:ec:e3:0d:65:6a:d9:84:
ce:bc:b9:39:3e:70:10:b3:09:1b:6e:bf:ea:ec:a0:
d7:50:7a:c9:09:4b:e6:f9:01:05:e5:fd:1d:25:bd:
f9:28:b7:d3:20:34:e0:d7:bc:54:16:c5:ba:a3:49:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:4A:69:6A:5B:A2:27:D8:4F:FF:12:A7:56:E2:48:B3:67:F0:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6866e708-97dc-4a53-a9f1-7fe1a42a1fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8040::/48
Signature Algorithm: sha256WithRSAEncryption
23:81:63:b1:4d:5a:30:0c:b0:e3:e5:d7:f6:e8:69:6f:ea:2b:
53:c8:9a:a6:96:2c:dc:03:2d:a9:1d:dc:08:93:b1:30:d4:a9:
a5:39:0b:47:97:49:20:20:48:93:4c:dd:41:b7:86:47:1f:5f:
38:75:d7:86:4a:cf:70:d9:4a:68:b9:fd:10:9e:29:2b:cf:9f:
34:de:37:52:5e:58:35:08:f3:4b:3a:93:d4:9a:53:27:b3:99:
c4:3b:63:29:d1:62:90:35:38:3f:48:d5:30:79:c9:db:2e:32:
77:c8:5a:39:5f:82:68:ba:a4:f9:45:01:15:b8:1a:68:02:21:
aa:60:e8:d7:ce:a2:da:09:2e:aa:0a:2b:13:63:a9:42:7f:e8:
27:61:be:a2:25:d8:8a:cc:05:b2:cc:96:8a:6f:3d:c8:40:dc:
45:d9:82:4d:80:39:6a:6a:2c:e2:a4:67:bb:ee:f5:be:90:e7:
f0:02:36:7b:2f:a5:62:1e:2d:7e:02:f6:bc:d8:d4:ae:2e:d2:
b3:ef:44:66:aa:14:03:3c:a3:78:da:c9:43:aa:3d:97:3b:01:
87:67:90:bf:58:e4:9c:4d:e8:fc:9f:bd:b9:53:d6:05:93:fd:
0c:a2:62:2a:e7:e9:c9:c7:d0:21:03:25:c1:aa:8b:cb:28:48:
0e:24:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:41 2025 by rpki-client