Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
File: 7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa (raw, json)
Hash identifier: 4ADHkSlmxO5Zc2eSHSqKgOW5dUX/BqwElRl6LNHf10k=
Subject key identifier: 08:15:B5:65:1C:F1:61:33:7B:C8:E1:6A:C4:09:7B:63:DE:4C:D2:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 241E985C8EA23C28DE8BCBAA40AE6ACB59398117
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
Signing time: Tue 04 Nov 2025 02:50:10 +0000
ROA not before: Tue 04 Nov 2025 02:50:10 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1e:98:5c:8e:a2:3c:28:de:8b:cb:aa:40:ae:6a:cb:59:39:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:10 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=782ca9d28513f765a9671ef5aa8233ffbe198a24d3460dd6017e1ab71a4354a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:dd:2b:46:7d:82:40:98:10:b3:07:b2:c9:
d1:ec:0c:3a:95:bc:5f:27:f6:34:78:c3:97:a1:92:
23:a2:f8:6a:f8:27:a5:c7:0b:6c:a1:42:f9:8f:3e:
67:66:c9:b6:2d:5b:4d:03:2a:40:5f:34:d9:e4:40:
27:d3:56:69:ab:28:41:27:e5:b5:9f:0f:a0:c0:bc:
9a:f5:8d:f8:02:4a:1b:f8:0b:8e:e8:38:2a:2a:62:
eb:5e:c8:fe:85:4b:fe:89:12:82:87:c9:b9:66:dd:
f0:6a:dd:80:34:fa:98:d2:15:0c:fa:26:84:62:e3:
6d:ea:79:00:dd:1f:81:14:e8:a2:88:c9:da:00:f1:
8a:e8:37:be:52:e9:e3:7e:2e:67:a2:29:7d:43:8a:
74:6b:93:43:3d:06:ef:b6:78:64:06:51:17:88:17:
13:c2:0d:1b:63:7a:13:b2:7c:c9:91:f9:d2:99:ab:
50:32:f2:00:6c:65:05:bc:f8:31:4c:7e:91:98:ab:
a1:6a:a2:a8:54:3b:11:8a:00:36:a5:37:54:0b:3a:
7c:ed:b8:51:75:aa:94:84:d6:26:09:3e:2f:ec:67:
42:db:bc:4e:6c:2a:5b:dc:be:15:a7:4c:24:14:76:
64:6a:4c:05:3c:db:98:5c:02:f6:54:04:65:03:a1:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:15:B5:65:1C:F1:61:33:7B:C8:E1:6A:C4:09:7B:63:DE:4C:D2:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d3290b1-5123-4651-a2b9-bde2c7d0d334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/18
Signature Algorithm: sha256WithRSAEncryption
21:b2:0f:b4:b7:2d:fb:db:05:cb:fd:5b:d9:31:4b:58:cc:9b:
ff:c5:94:a1:19:86:68:bb:8b:4d:6e:e1:68:f7:3d:ef:bb:4b:
a0:42:96:b7:bb:d5:eb:5f:1f:d6:f1:78:c1:15:af:d3:66:f5:
1f:bc:ed:d4:d6:d7:0f:75:98:b0:f3:ed:56:70:5a:7c:f5:24:
7b:9a:9e:2e:db:a0:42:13:95:91:23:5e:f8:10:c7:c8:08:68:
93:d8:f3:e3:1c:66:11:e3:16:42:a5:de:6c:de:8c:33:32:5b:
ae:5c:4c:46:10:f7:6f:a3:11:ad:cf:5b:cd:94:48:9f:14:48:
cb:9b:b9:4f:b4:e0:f2:aa:5c:3b:83:c2:0a:ae:cb:21:89:2a:
c5:30:c1:1f:a2:81:90:00:12:24:0b:c8:de:a5:95:34:87:3b:
65:9e:7a:92:95:e0:72:8d:ed:17:1e:31:92:e7:87:cb:e7:47:
bd:8e:75:e4:a9:f8:8b:fb:78:9f:19:fe:60:8a:0b:d8:ba:36:
ea:79:b6:ab:e7:97:14:13:06:3b:db:98:53:95:a1:e7:da:0e:
e5:d7:f4:28:af:7e:b5:68:8a:3f:ae:7c:a8:a6:9e:b6:de:a3:
9f:fc:94:3d:9e:a4:b2:91:96:68:91:f3:e4:2f:9f:30:08:95:
53:3e:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:46 2025 by rpki-client