Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e6878ab-55a6-4771-8954-3306e598be04.roa
File: 8e6878ab-55a6-4771-8954-3306e598be04.roa (raw, json)
Hash identifier: emwWZqq0fdjjlxMieD5gBNpmLzcSpwtk/UdaMy4oj88=
Subject key identifier: B9:10:F5:BE:8A:22:6E:D7:6C:5B:0C:81:26:E1:F8:BE:AD:EA:80:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 547D828D6D0CAA2AEEBB059DC8F16BE819B059BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e6878ab-55a6-4771-8954-3306e598be04.roa
Signing time: Wed 29 Oct 2025 07:36:49 +0000
ROA not before: Wed 29 Oct 2025 07:36:49 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7d:82:8d:6d:0c:aa:2a:ee:bb:05:9d:c8:f1:6b:e8:19:b0:59:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:36:49 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=81d721fbff9f06fe0a6b953beb5d2d02fa5656a855bec963e147b0f65c3ef17f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:d8:02:1f:90:e8:f3:d7:f8:c0:0f:26:69:
4c:29:7e:9e:ba:07:f5:a2:ea:b6:d5:97:01:38:a5:
b3:91:92:1e:f2:12:73:ad:07:ab:4e:3a:9c:60:f7:
8a:45:e1:8a:55:34:bf:2f:42:1e:a7:2f:f9:8c:e6:
82:8f:55:04:3d:ed:c6:2c:7f:ad:c0:d3:90:de:52:
f4:3a:59:fb:11:cf:fc:8f:8f:c6:38:39:7c:21:ee:
1f:f4:ae:57:d4:61:6d:07:0f:b7:84:be:bd:4b:c2:
d4:71:fe:34:70:b6:c2:77:bc:2b:f1:59:ea:59:e7:
da:71:27:47:b8:74:25:0c:1a:c9:3d:d2:c8:10:a7:
30:e7:21:b9:d2:63:75:8e:79:6c:25:92:9b:5d:2f:
31:5e:ff:8a:c0:39:f0:45:da:e3:cf:70:d0:30:b6:
b2:e0:04:d7:9c:cd:f8:25:30:66:70:e0:1f:8a:48:
d2:b9:02:d7:40:71:e2:ef:a4:6b:f8:b0:8a:d6:dd:
24:f1:0c:d6:11:72:29:ee:42:e7:e8:2a:03:09:f3:
42:08:11:85:e0:e5:3d:51:12:34:e5:d6:db:45:b7:
00:4b:06:28:0a:bf:67:ba:c1:06:46:6d:49:58:7c:
db:69:4f:27:b7:07:fc:b3:14:39:c3:ec:94:17:37:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:10:F5:BE:8A:22:6E:D7:6C:5B:0C:81:26:E1:F8:BE:AD:EA:80:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e6878ab-55a6-4771-8954-3306e598be04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:800::/40
Signature Algorithm: sha256WithRSAEncryption
7c:5b:6b:44:4b:f6:7a:15:f6:00:5f:32:bc:77:90:ff:45:16:
93:16:0b:6d:67:6a:0c:0e:92:1a:18:6d:f4:ff:63:5d:94:08:
88:65:58:81:fc:0b:13:95:62:e9:79:99:02:7c:02:6d:e3:e0:
3d:13:87:84:08:b4:7a:81:e2:04:67:06:81:33:f5:af:65:ce:
90:53:2a:bd:16:5e:fb:88:45:a3:85:00:cf:f5:2e:7e:37:10:
c7:7c:62:f1:35:2b:08:c1:75:9d:68:3c:c3:98:3b:68:12:15:
cf:4d:56:a4:51:a8:83:0d:1c:c6:88:45:d2:fb:41:4b:5a:c8:
d8:7a:e7:2b:8f:b6:31:4a:b8:38:98:c8:90:d3:74:c3:53:47:
38:a2:b3:f3:c8:26:4d:ac:70:4b:14:82:90:ef:63:24:13:55:
6d:64:3c:d0:19:92:97:bc:3e:60:30:95:c6:b0:f2:90:43:05:
d8:78:80:f2:17:09:8a:3f:c8:29:c0:41:7a:ac:a0:09:62:4e:
fe:40:05:ca:06:52:03:b6:8a:9e:ba:9b:c4:60:a6:f7:86:3d:
8d:35:6a:db:71:36:38:12:09:73:47:72:3a:e4:86:52:3f:df:
ff:d4:83:88:15:7a:b0:84:3c:0d:c1:5f:23:f2:2f:d5:ef:b3:
fe:e7:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:07 2025 by rpki-client