Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d791d74-cfd7-4000-a1e5-34325a5e1541.roa
File: 9d791d74-cfd7-4000-a1e5-34325a5e1541.roa (raw, json)
Hash identifier: k77vy+4dZc0hF4e/GVBXJs31FJVQ/5KI03ly56PmDwc=
Subject key identifier: 16:AB:B4:FB:9C:14:EC:88:A6:8F:EC:7A:4A:A8:E7:C6:49:6D:B7:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 065B509A09B6140572C56032731DE438658A5159
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d791d74-cfd7-4000-a1e5-34325a5e1541.roa
Signing time: Tue 04 Nov 2025 02:50:42 +0000
ROA not before: Tue 04 Nov 2025 02:50:42 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5b:50:9a:09:b6:14:05:72:c5:60:32:73:1d:e4:38:65:8a:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:42 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=75e8fe517dea75b0f3e41524c0d15d4b592bdd914d30a08ed31d3b1e30d9634b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:e7:be:29:36:94:ef:84:aa:c7:8a:fc:7f:
6a:c8:10:09:bc:9c:f0:ae:e7:f6:6a:5b:bd:2c:6b:
dc:2b:36:98:39:a0:86:5c:da:9f:dd:2e:4d:89:80:
05:41:bb:3e:e5:63:62:ca:90:c5:17:48:e5:4e:4d:
17:ff:28:0b:1b:6d:a6:3b:65:0a:17:f8:e5:35:51:
03:f1:1e:b8:e3:b3:ab:a1:89:b7:ba:1e:70:9e:9b:
dc:f1:1a:e9:4e:2e:c1:33:31:5f:c9:3d:7c:e2:24:
91:d7:6c:62:ee:e0:d3:36:8d:47:68:cf:5a:d7:cb:
1b:f8:88:a1:0c:ed:e5:d0:92:e9:22:60:b0:7f:89:
72:b3:37:d8:52:76:38:24:b1:21:df:85:8a:20:09:
b5:8d:c0:9c:a4:b9:52:f8:7c:6e:3b:f3:73:74:2d:
4a:20:5c:cb:4b:5b:29:60:18:5d:01:64:12:ad:37:
c6:cf:2f:82:b0:95:91:80:a4:cd:02:73:a2:02:fd:
2e:58:06:a8:9b:f1:7f:62:d3:67:70:c2:3b:86:a8:
d0:47:97:ce:37:e5:6e:85:ab:26:ba:aa:5b:19:5b:
bb:68:0d:f8:58:c5:58:9c:f2:65:20:1f:fa:ae:89:
dd:32:5f:db:0d:cd:07:80:c7:67:34:8e:76:ef:05:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AB:B4:FB:9C:14:EC:88:A6:8F:EC:7A:4A:A8:E7:C6:49:6D:B7:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d791d74-cfd7-4000-a1e5-34325a5e1541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:5000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:86:69:a7:95:89:b8:26:fa:ba:6c:fd:00:70:fc:6c:3e:37:
9a:3f:b5:14:73:75:e1:dc:38:99:c1:77:2b:d3:95:16:49:ea:
cd:35:f4:ff:48:61:ea:60:96:95:a1:89:ac:12:19:78:d5:9f:
0d:97:01:9f:0c:ee:8b:0a:fc:c3:c1:0c:a4:56:7a:98:5f:26:
fd:4a:10:06:29:29:76:db:9b:a0:97:87:28:78:b9:1a:f2:b5:
a8:a8:f0:91:c7:51:19:8a:56:c0:d8:ac:0f:f9:5e:00:07:c2:
64:63:8b:f8:b0:77:d5:5d:7b:df:05:4f:8a:1f:9b:c9:ca:28:
69:47:5d:a9:8a:5f:07:29:fe:79:6f:42:dd:43:47:38:b6:6d:
3e:36:cc:d8:2f:22:55:0f:c2:7e:7d:4d:99:35:3a:fc:38:0a:
4e:ea:48:f1:e9:f0:ab:cc:48:56:52:42:1a:47:75:6c:06:6c:
12:c7:ab:d8:02:65:e0:ab:ae:db:ce:08:51:ae:75:26:e4:27:
2e:fe:68:d6:4f:52:70:cf:85:13:ff:5d:a3:a0:3f:25:a9:97:
68:8a:de:84:8b:77:1c:d5:8e:9f:72:df:51:61:1a:6a:8c:43:
8a:1d:d7:c8:63:78:7a:3d:9b:d5:78:ad:fe:88:de:09:0d:20:
d1:80:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:58 2025 by rpki-client