Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
File: 7cde339d-568f-4b5b-98d4-9eca268d8a43.roa (raw, json)
Hash identifier: KIT36bwJwRjGeO3O4ge8EgeLfIeRHmEOt5GQ4RsYdP4=
Subject key identifier: 97:C5:1A:3E:61:55:25:E1:47:1F:84:02:A0:54:65:A3:2E:A7:48:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 12C32ED79FE8179D85616717C355AC33761BF782
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
Signing time: Tue 04 Nov 2025 02:50:42 +0000
ROA not before: Tue 04 Nov 2025 02:50:42 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c3:2e:d7:9f:e8:17:9d:85:61:67:17:c3:55:ac:33:76:1b:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:42 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=a37adcf0e5a1de252b94512ae52983f1d30dee2bdf13c1480f6a8daff3ffcc5b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:79:fb:03:f2:1a:d6:74:09:9f:a7:e4:78:
df:c2:a5:a0:cb:3e:9d:23:d8:3d:80:ef:04:31:a4:
91:55:e6:bc:67:02:e9:79:84:cd:31:1b:15:0a:f5:
1a:c5:f2:69:14:cb:59:67:99:85:6b:c2:a3:c1:d2:
c2:60:ae:cd:3c:b1:8e:9c:63:24:91:a7:45:dd:3e:
fc:7d:40:99:a9:95:ad:a6:f1:60:dd:b6:92:97:c4:
15:61:03:03:81:25:aa:ce:c4:1e:f4:f1:c9:86:83:
56:37:f7:0a:bb:81:70:86:71:c1:0e:3d:6d:b6:db:
cd:59:03:93:6d:6b:c7:bc:4b:35:2f:b3:be:87:22:
8a:a6:4f:b5:2c:3e:2a:c3:3d:4e:91:9b:be:47:f5:
27:5f:80:a5:7f:ef:c3:c0:36:bd:c0:97:13:bf:28:
ba:7b:6e:25:c7:fc:a8:9e:d8:4a:98:5c:0e:c7:b2:
91:3e:94:90:cc:40:09:65:14:91:c7:50:70:7f:4a:
db:ec:5c:39:89:af:92:11:72:22:8c:14:de:9c:ee:
34:92:76:de:55:7b:54:73:89:73:e0:53:7b:99:07:
6b:fa:1e:a2:7c:16:c0:50:c0:30:48:f1:18:62:cc:
93:67:34:f7:18:f9:3e:77:78:34:0c:af:7f:43:93:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:1A:3E:61:55:25:E1:47:1F:84:02:A0:54:65:A3:2E:A7:48:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cde339d-568f-4b5b-98d4-9eca268d8a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5000::/40
Signature Algorithm: sha256WithRSAEncryption
51:17:a1:2f:1b:3f:2e:d7:e3:41:c8:a1:f5:5b:08:30:f1:69:
51:56:bd:3a:aa:27:36:d6:c1:47:74:b6:62:f6:a6:53:79:6b:
a9:da:6a:04:6f:da:05:8c:98:a1:70:63:a7:cb:1d:ec:34:2e:
44:de:d8:21:fe:13:d4:ad:e7:eb:c4:6c:1f:d8:5b:aa:89:4c:
d6:78:12:31:8d:72:a3:c5:aa:be:9b:ed:3a:1b:8b:d5:e9:53:
78:f9:f7:2e:b0:41:26:4c:66:81:18:9d:be:46:83:40:1f:45:
fb:89:eb:88:2d:bd:70:72:e1:d4:41:07:34:1f:e3:06:9f:b2:
65:50:1d:64:37:d8:16:e6:3b:89:0d:63:a0:dc:23:95:f1:92:
54:ec:23:48:77:10:ff:09:15:33:58:63:a7:27:dd:7b:92:2d:
35:51:0b:3f:0a:21:ba:ff:d3:d0:a0:05:f5:49:83:41:e9:35:
9e:00:de:0a:29:34:54:1c:c0:d9:f7:c2:d9:e0:8c:c5:c5:d4:
7b:53:d3:fc:7d:2b:89:74:8e:33:d2:91:15:6d:ce:ae:78:bb:
47:2c:2d:9d:34:d9:51:58:ec:96:49:99:b8:b1:94:a2:17:ce:
0d:89:10:af:b6:81:2b:46:c3:76:2d:ba:69:04:a5:f8:1b:52:
85:b0:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:29 2025 by rpki-client