Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
File: a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa (raw, json)
Hash identifier: eVb9il2LhLMVkA2BWUHAXR4R+iTBq8EWepoglPO1eiw=
Subject key identifier: B7:DC:8B:BE:15:1E:13:08:95:BB:9F:08:65:F7:38:7C:FD:FE:6C:D0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F535D6E42EA94F42FAED807B57A5B94D59830C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
Signing time: Tue 04 Nov 2025 02:51:01 +0000
ROA not before: Tue 04 Nov 2025 02:51:01 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d05b::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:53:5d:6e:42:ea:94:f4:2f:ae:d8:07:b5:7a:5b:94:d5:98:30:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:51:01 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=eaee7fc2a5ef4fb692b100978971dd0eb8d06e9e2558ec98f650b59ece89c7a4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:e1:d8:ab:94:c0:f1:ca:9b:a1:c4:74:f5:
a8:d9:88:c4:85:3f:74:b8:22:57:9d:dd:29:58:37:
08:5a:ca:61:84:df:49:80:57:b9:6c:32:dc:41:1b:
28:0b:f8:f0:b0:f8:ac:0e:74:6a:c0:6c:94:cc:58:
78:de:38:b6:44:d3:f7:11:62:1d:9f:53:40:56:07:
5a:35:55:35:51:5c:80:b7:2c:54:09:36:f9:42:9b:
85:09:e0:20:78:b4:49:64:32:e8:78:4d:4a:34:06:
ab:c4:4a:9e:af:ff:16:ca:cf:44:42:23:c4:78:50:
fc:b9:67:23:95:84:ae:d9:2d:9c:b8:85:df:ac:ff:
6e:14:a6:45:27:d7:86:86:49:e8:7c:d4:ad:11:b4:
9a:d4:87:f4:6c:26:8d:a1:c7:65:5a:ee:97:60:9e:
cf:f5:99:3e:15:62:7e:c2:21:dc:ce:cc:f7:27:ec:
ec:a5:57:2d:7a:7e:2d:04:b3:5d:26:70:de:b4:21:
e8:55:0e:34:d1:f8:0e:64:36:ab:76:e4:df:dc:57:
dc:c1:3e:83:f9:3d:1c:aa:28:3e:e0:2a:e9:3e:ae:
a9:fc:cb:8b:68:f9:ba:ac:66:56:56:2e:26:44:2d:
28:7f:8e:fb:e1:9d:80:3e:d5:29:d7:74:0f:b6:da:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:8B:BE:15:1E:13:08:95:BB:9F:08:65:F7:38:7C:FD:FE:6C:D0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5bcb770-7e3d-4ccd-bf1c-4cc17ea01c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d05b::/32
Signature Algorithm: sha256WithRSAEncryption
02:7d:f6:0e:39:97:55:8e:16:a2:7b:7e:9c:27:33:40:90:69:
f8:c1:7a:dd:2e:1c:08:4b:04:49:5e:53:f1:e2:de:a3:ac:05:
39:41:ed:17:d2:ce:56:fb:87:85:57:53:2c:e4:72:e8:5f:8a:
66:39:77:cd:0a:94:aa:37:26:c6:a9:a8:43:a8:8e:a1:05:a6:
d4:9a:97:44:c9:e1:8a:2c:24:a9:b5:11:1e:de:6b:75:13:77:
ff:52:3e:14:d3:2d:3f:2a:1e:d0:d8:ae:7e:dc:69:95:64:fd:
e7:52:1a:9a:99:92:fd:5e:3e:e2:01:55:ce:8c:65:9d:68:b0:
66:62:a7:cd:33:e0:d1:2b:71:4d:c3:ad:9b:16:0c:18:cb:35:
37:ae:df:cd:8e:21:8c:6f:6f:1f:64:62:eb:d4:ba:c1:6a:97:
33:75:ab:ab:b4:08:f5:60:93:cc:ff:1e:cb:33:76:44:3e:7f:
7b:c5:10:1c:4f:8b:d8:08:f1:48:ed:f9:3e:ac:ff:61:b7:06:
1d:cd:31:a2:f3:8d:ba:0c:be:e4:98:2c:01:d3:d4:26:ab:4b:
a0:d1:53:5b:b3:b1:83:7a:2f:f2:8d:9b:a2:a9:ea:be:be:0f:
85:a6:d5:36:67:52:10:a8:bc:57:2c:93:c5:37:12:47:17:8b:
4b:45:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:29:53 2025 by rpki-client