Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
File: 924a4487-e709-4e7a-9c72-9678b465cef8.roa (raw, json)
Hash identifier: s+iEprU64x2ezXrNaeB7+JumOy8mWJnXTWSJUmOQ/W4=
Subject key identifier: BA:15:F2:71:C6:D9:4C:D6:15:C4:8D:F1:DA:46:32:E9:BB:1A:1C:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31A1E937061B647A2F8FE626C3BB0AB0A193B530
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
Signing time: Tue 04 Nov 2025 02:50:44 +0000
ROA not before: Tue 04 Nov 2025 02:50:44 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a1:e9:37:06:1b:64:7a:2f:8f:e6:26:c3:bb:0a:b0:a1:93:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:44 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=55c22cbd700e39276f9ed355a1af65cc3634b89506aae51f38f3484c4d79bbe8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:65:30:24:35:89:ee:62:37:70:a4:8c:7c:
dc:3f:36:e0:91:dc:dc:e0:a9:80:7a:4d:fd:2f:83:
b8:ee:40:47:79:ff:c2:13:d5:62:85:16:50:3d:d1:
3a:37:a0:a3:82:ae:8a:dc:0c:6a:61:8c:94:ce:6e:
3c:31:82:24:3e:31:75:3a:55:d5:1c:e2:a5:36:37:
fd:6c:f4:05:c3:d1:12:ea:17:33:3a:fe:14:ab:a0:
f1:c3:0c:c0:5c:c3:a9:81:29:2d:58:87:35:16:a4:
33:a8:7a:e2:48:84:9d:f9:19:11:68:c6:3a:76:c5:
67:b7:fd:e6:92:89:2a:83:e2:68:11:12:a3:96:0d:
c1:f6:ae:ca:d0:77:b1:36:7a:a3:ca:9f:86:18:b5:
33:90:01:6a:a5:c0:da:da:02:0f:59:34:41:89:51:
47:3f:11:ca:6a:81:7f:f6:67:87:1b:d2:f9:55:15:
99:df:02:dd:4e:a3:35:db:68:54:a4:5d:13:04:70:
06:3e:e1:a8:4b:48:6e:c6:81:6d:73:0d:38:36:35:
d8:90:d6:32:d6:2e:6c:54:ea:18:44:0c:a8:2d:4d:
5e:a7:ad:40:7c:5a:65:73:cd:8b:a2:a3:e9:a7:9b:
e9:89:97:2a:b9:5d:98:25:38:08:90:35:58:63:07:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:F2:71:C6:D9:4C:D6:15:C4:8D:F1:DA:46:32:E9:BB:1A:1C:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
43:82:0f:20:9c:3d:b0:a4:94:a0:73:ec:c1:af:f5:58:14:52:
06:53:d6:54:25:2d:c9:37:32:01:c5:c0:7d:e6:e2:cd:4e:83:
dd:bb:01:6b:ae:74:af:03:e4:c8:ef:d8:7f:4a:6c:4e:1f:0f:
3f:58:86:b2:38:ad:14:48:bb:cc:e2:ec:a7:18:f7:c2:60:1d:
d4:d3:00:88:fd:f2:fc:d5:30:4f:a5:b6:77:90:56:94:ae:8b:
e5:af:38:c6:0b:50:37:56:b7:30:e5:df:82:9a:0a:d4:53:be:
fe:34:90:8f:37:e8:2c:fa:d6:ff:fc:a3:f5:15:01:60:cc:dd:
e9:33:f2:7c:d6:63:27:6d:8d:4b:a0:93:ad:3c:b8:38:d5:61:
bc:17:82:4e:f3:bb:cd:f7:2b:54:14:a3:8d:ed:86:38:80:82:
2d:b1:d5:14:53:16:b7:b2:8f:14:f4:be:17:3c:bf:6e:d7:a3:
40:f8:e3:5a:98:50:a9:ae:58:31:56:b0:ff:d7:9c:bb:d9:58:
1e:3e:a8:8f:08:ad:4c:73:d7:c6:26:92:f5:ff:6d:19:ce:38:
09:62:c4:41:0c:3a:bb:cd:76:45:19:29:e9:13:c9:b7:47:f1:
f9:10:55:ce:1e:8a:ec:c6:9f:9e:b3:39:2f:d0:5b:a4:5d:45:
60:00:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:34 2025 by rpki-client