Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File: 87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier: CgBcOn8yhRsUF3XCYB4eL4IzQamd3jjV7xeenB9OY0c=
Subject key identifier: 3C:03:B4:03:AC:01:54:C6:DB:58:D7:A7:FF:77:9D:DC:66:12:B4:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D61C1DDB8DBCF30F15DF3433E329A6FFABB94E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time: Tue 21 Oct 2025 14:10:09 +0000
ROA not before: Tue 21 Oct 2025 14:10:09 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:61:c1:dd:b8:db:cf:30:f1:5d:f3:43:3e:32:9a:6f:fa:bb:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:10:09 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a639b824735187ca2333188f65c5b4c25107204afbe80221a85de8b300136b62, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:45:c6:30:a0:28:a9:83:78:17:aa:19:db:
5f:e4:1a:24:5b:63:77:57:54:2f:37:eb:b3:37:df:
8b:68:3a:4a:c3:03:1e:77:01:b4:98:68:a2:80:ed:
3f:48:fe:68:a4:41:e5:69:16:02:ac:b1:c0:75:dc:
33:ac:4e:5b:12:7a:a0:75:d3:50:b8:d1:b5:f0:a8:
34:b6:63:18:ce:8b:01:89:91:2d:09:57:a9:73:c2:
61:2d:d7:3f:7b:9e:8f:05:05:8d:0c:a0:8c:4f:17:
68:a5:d7:17:a6:9f:4d:72:bc:f9:df:1d:b4:e8:1b:
9c:a8:6d:1c:4c:5e:73:cf:1e:a0:32:44:f5:da:62:
ac:0f:66:15:99:f0:8c:15:0d:e0:14:d6:7b:95:9f:
86:b2:1a:77:6c:f3:fa:9a:52:38:06:5b:36:f0:3f:
43:a1:41:ab:a5:7e:c6:86:e9:21:ed:77:48:ec:6a:
78:e1:2f:b6:c8:85:ce:95:32:95:95:b2:ee:dd:54:
95:1c:ba:43:ca:1a:1e:81:ae:91:a2:56:e3:6a:9b:
2a:b1:64:dd:73:32:82:ec:28:12:77:bc:dc:bf:23:
64:f3:b1:93:32:55:7c:e3:e2:50:d8:49:82:75:eb:
25:fe:b4:18:31:35:05:93:27:de:f3:61:c1:29:03:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:B4:03:AC:01:54:C6:DB:58:D7:A7:FF:77:9D:DC:66:12:B4:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:8000::/40
Signature Algorithm: sha256WithRSAEncryption
11:f7:80:51:51:2b:1f:cd:1a:97:92:ee:08:2c:4a:ed:b6:a2:
d9:85:90:80:31:ad:c9:61:7f:47:66:8e:4e:ee:9a:19:d1:a8:
96:8f:de:ac:86:d0:bf:87:a4:04:23:4e:94:18:e0:f6:fc:93:
f7:18:cc:88:c1:e4:25:94:ca:ab:c3:b3:98:2f:6c:d4:a1:de:
49:cb:4e:1a:ff:00:ad:fb:6b:50:0f:84:a5:b0:c4:60:59:a1:
f6:34:af:1e:ac:91:d3:8c:a8:fa:5c:6d:0b:be:0d:d9:49:f0:
ae:89:0c:b9:e6:3c:de:3d:a5:ff:eb:89:f9:48:93:31:d8:83:
be:ee:d8:97:2a:05:90:a5:ed:e3:9e:fe:ee:5e:27:45:db:2d:
9b:3b:72:b9:86:ed:c1:19:2c:5c:20:50:18:fa:a6:51:9d:ed:
0c:e6:82:b2:e6:f5:fc:97:4b:9c:93:7b:c9:18:9e:ba:da:d1:
2e:d1:c5:66:17:20:97:84:55:dd:de:0f:4f:a8:53:1d:7f:ee:
c4:1b:9f:c7:d8:5e:d2:6b:0b:ab:5a:66:81:56:18:a7:88:39:
d8:3c:03:78:90:ff:ee:e5:81:de:42:56:db:6e:eb:bb:7e:53:
1c:39:d9:41:57:ab:ed:c7:ea:fc:b5:88:0a:b0:f5:d8:e3:98:
fc:50:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:40 2025 by rpki-client