Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8f63940-d674-4d8d-868b-853d00b0d422.roa
File: b8f63940-d674-4d8d-868b-853d00b0d422.roa (raw, json)
Hash identifier: nqSPuY4CX+va+3dhBXSbWeqsYQJEoSatd0e71t7A7y0=
Subject key identifier: D0:21:21:E5:F8:96:01:D8:4C:69:BF:7F:1F:07:EE:10:2F:91:00:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CF411E9BFC3DFCF8ECF10B57EDFB5BB2A098E21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8f63940-d674-4d8d-868b-853d00b0d422.roa
Signing time: Wed 29 Oct 2025 07:36:51 +0000
ROA not before: Wed 29 Oct 2025 07:36:51 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f4:11:e9:bf:c3:df:cf:8e:cf:10:b5:7e:df:b5:bb:2a:09:8e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:36:51 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=5ebc56d46b839fc29fff78a33b7e22b5b28900d527801d60191c2ab54badf2a5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:77:06:2e:b8:88:ed:4e:b8:af:5a:3a:1c:
94:ee:6a:bf:37:d5:6d:09:17:21:7d:cb:fe:4e:4e:
e8:12:da:39:d1:a8:f2:c6:e4:c5:87:3a:53:5d:de:
a3:ff:e6:ea:8f:25:cf:d7:e9:98:94:cc:fa:48:c9:
30:49:96:d5:d8:16:7f:7b:31:5d:31:dc:f0:b2:33:
16:58:11:31:a1:01:07:56:bf:6c:fa:1b:8b:0d:ed:
a6:37:84:5b:c4:38:33:11:63:10:15:75:08:7e:67:
d5:c2:e7:b4:99:5f:90:62:5f:11:49:42:23:f8:91:
a6:b3:c0:70:19:1f:f6:3e:eb:b2:73:87:1c:f2:21:
4b:b4:86:57:51:16:05:8e:fe:43:20:63:22:8b:01:
b6:ef:8c:e2:0f:2a:41:af:33:35:bb:df:91:95:a4:
a8:b9:3d:aa:42:5d:9a:a5:7d:6d:86:23:c8:a7:e1:
7b:c1:69:8d:88:52:88:70:2f:cf:b7:87:c1:ea:9a:
4b:50:86:01:be:a4:c5:9b:1c:b1:21:4c:ed:be:e5:
98:57:96:4d:a3:34:23:ac:b8:5f:d3:49:93:02:de:
45:09:f3:7a:23:e1:9e:b4:72:8a:94:9a:2a:b7:fd:
45:85:d2:60:ba:58:03:65:43:c0:8b:61:6e:37:ad:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:21:E5:F8:96:01:D8:4C:69:BF:7F:1F:07:EE:10:2F:91:00:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8f63940-d674-4d8d-868b-853d00b0d422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
63:55:40:58:91:59:fd:63:05:99:96:0d:7e:4e:3d:ec:83:3c:
9f:41:29:f2:91:f4:3b:2b:db:e9:3d:a1:df:02:2b:3e:24:52:
e6:49:4a:19:b8:46:ef:85:dc:52:0c:72:2b:44:e2:5d:87:94:
b6:5f:10:49:3b:f1:92:44:31:83:66:2a:0f:09:3d:d3:e2:81:
87:7d:88:3e:e6:e8:a9:fa:ef:8e:27:fd:03:cd:97:32:cb:f0:
1c:71:20:f9:f5:4e:37:66:dd:24:6d:29:6e:3a:b2:4d:bb:e1:
4a:c9:42:30:ce:ce:a3:e9:80:59:b2:aa:8b:a8:76:ba:fa:06:
2c:ea:6c:bf:d9:53:e0:c4:35:28:ea:6f:30:4f:2e:48:de:8f:
04:56:af:cf:d1:84:3d:c5:16:e7:b3:e4:bf:1b:95:4d:3b:45:
7c:53:93:cd:f5:10:5b:69:75:1d:29:1a:17:06:f2:d8:b2:21:
e3:a5:86:0e:82:cc:6b:a7:b8:24:d7:48:f9:b0:e2:0c:34:a3:
d4:cd:96:d7:c4:65:49:99:bf:f2:e6:7a:08:4a:b9:a9:7f:25:
de:57:d6:ef:92:65:e2:f9:c8:4a:cb:08:7e:5e:72:56:2b:81:
16:7b:a4:25:9b:8a:56:f0:04:02:94:bf:33:e5:12:c0:da:f7:
81:e0:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:40 2025 by rpki-client