Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
File: adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa (raw, json)
Hash identifier: nNCpiS+mujVlC0zl+KMy26WMp2boQrXsN4GtCRGdBFE=
Subject key identifier: B4:EB:B3:45:CE:BC:A0:CE:8E:6D:32:2B:22:D0:35:1A:2E:9C:EF:89
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B732967075F2F4DC5D7EDA1EB9F06438AAB252A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
Signing time: Wed 29 Oct 2025 07:28:16 +0000
ROA not before: Wed 29 Oct 2025 07:28:16 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:73:29:67:07:5f:2f:4d:c5:d7:ed:a1:eb:9f:06:43:8a:ab:25:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:16 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=0e1d078f2dc05eadef51fbf02c83f0e80de49daccb4862faea7b0aecdfeb5f13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:2c:5d:b3:d5:bd:f2:e1:4e:87:03:91:fb:
c7:2c:e8:32:fc:0e:c1:19:66:4c:5d:d9:d4:5d:27:
09:c9:77:c4:f6:fe:9a:bc:c3:0a:24:96:00:07:ce:
97:c2:6a:a2:e7:b6:81:b7:63:28:b9:83:f8:7e:86:
da:c4:73:1d:de:a1:a5:c7:df:82:e2:b5:6f:0b:b3:
d0:6d:76:cd:d9:12:ad:a5:dc:1a:f4:65:5c:42:6a:
4f:6c:3c:57:41:32:b4:d6:ff:f4:10:cc:28:fd:ed:
7e:35:5b:c5:00:c0:67:dd:3a:cd:8f:9c:19:a0:55:
15:2e:33:e5:76:fd:b8:87:d4:87:ae:26:31:e9:1d:
d5:0c:9d:24:91:de:a7:5f:9a:d1:aa:e9:c3:da:bf:
b3:65:8a:bf:6b:8d:86:8c:06:91:9c:67:0a:a5:21:
80:f8:83:31:92:a3:3a:d7:8f:8b:5d:6a:5b:fc:5f:
ee:81:62:34:80:eb:ba:ae:54:7c:e3:1e:b1:7d:da:
d7:76:02:25:0b:19:bc:05:1a:1e:28:ec:91:29:54:
0a:51:04:ce:25:30:0b:f2:b7:e0:3d:b6:2d:0f:b4:
e6:84:bd:00:a0:53:cb:da:bd:04:70:88:5c:1a:a0:
92:12:91:86:8a:0d:4f:f0:b6:fe:30:71:8d:24:1b:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:B3:45:CE:BC:A0:CE:8E:6D:32:2B:22:D0:35:1A:2E:9C:EF:89
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/adaf366f-c98d-4a0b-86ac-4e6b6e95a0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:4020::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b8:de:a9:21:a1:19:2d:95:7c:f1:1c:50:e3:ca:32:da:e7:
88:b9:6b:12:4e:16:32:bb:1b:ce:1b:8f:c6:61:37:bd:c1:e7:
2c:90:e9:b7:68:12:97:f8:e3:ee:ed:29:60:41:af:a8:ad:33:
ee:a1:61:04:69:4b:b0:66:4c:6c:6e:49:4e:65:47:6a:6c:4a:
b1:a3:04:07:c0:7f:1a:01:d7:05:de:6b:df:b5:2f:88:c0:95:
f3:54:d0:da:09:f9:00:92:a7:ec:0e:46:73:77:b1:38:3d:fa:
d7:d9:6d:8e:cc:8e:db:f7:7b:8c:43:f3:0a:d1:7a:e6:d6:41:
83:cc:49:d7:a6:26:45:04:59:55:51:cd:14:e6:b9:a6:21:3d:
b1:69:88:26:55:ec:9b:7b:87:23:53:d2:2a:f4:37:f1:c7:ec:
75:ee:83:79:b4:a3:04:b0:65:48:0f:bc:85:ea:7e:d9:58:5a:
01:ed:22:9a:c4:8b:bf:5c:f1:4f:18:dd:08:9f:0c:89:e0:63:
33:b7:60:cb:ff:0f:45:3e:e0:4c:ff:62:cb:ee:8f:c8:23:3d:
a0:9d:a5:4b:67:c8:61:99:c2:e1:bd:99:2a:cd:7d:bd:aa:45:
99:ea:54:b1:f6:0b:2e:3b:9d:ce:62:20:2d:19:e2:24:67:29:
f7:92:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:48 2025 by rpki-client