Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
File: d5fc0fee-af50-4f94-a822-c9f3238359cf.roa (raw, json)
Hash identifier: 3xtV4FjTSC679P+tngdprcltetkbmcLalS5M84KNl1I=
Subject key identifier: E2:88:39:71:7B:6B:7A:FE:D0:AD:AE:09:7F:A5:D6:E2:A4:6F:C2:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C000B0E7BE12F7646736EFDF895EDD844846325
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
Signing time: Fri 31 Oct 2025 01:20:06 +0000
ROA not before: Fri 31 Oct 2025 01:20:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:00:0b:0e:7b:e1:2f:76:46:73:6e:fd:f8:95:ed:d8:44:84:63:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:20:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=299d66cad6125974b66f225522098d4b507ced5d8f6cc0e3cff75a50c3802446, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:ce:86:39:67:bc:31:21:cd:a1:7e:a9:b2:
b7:67:1c:d3:4d:57:c8:62:57:f7:83:8e:a4:de:42:
5b:aa:65:8c:5b:ca:67:06:8d:26:24:c5:69:09:6b:
8b:fb:9e:a4:ad:e7:4a:85:86:f4:88:80:5d:27:5c:
fa:51:03:87:00:98:d6:3d:66:86:4f:59:d5:89:37:
eb:88:23:bf:09:38:27:e8:7b:5e:4a:8d:17:d2:23:
c6:d3:82:b6:3f:41:db:0d:f0:2a:ec:ea:ba:02:d0:
6c:c6:c7:18:cb:aa:81:c9:34:be:51:12:6d:18:29:
9e:91:48:d9:41:a1:11:b7:d6:b7:e6:86:bb:6d:a0:
a8:1c:95:85:ae:09:51:9a:fd:1d:b2:5b:66:88:93:
21:b0:2c:21:bc:16:5d:a1:a8:7e:47:7d:4c:85:5b:
f7:ae:c6:b2:cb:24:12:03:06:e9:80:ef:9c:4b:95:
e5:d3:23:47:bb:09:17:7d:f6:4c:53:a3:ea:8e:63:
99:82:10:aa:b1:bf:c9:b5:7a:ae:a0:06:18:40:c4:
45:a8:e5:ae:ee:d5:e5:cf:73:0a:f3:e2:67:1a:b9:
c6:d6:ff:b2:59:b7:53:4c:20:66:d4:e2:c5:2e:a8:
37:49:bf:04:7c:b0:65:4a:b2:66:c2:a6:c7:43:47:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:39:71:7B:6B:7A:FE:D0:AD:AE:09:7F:A5:D6:E2:A4:6F:C2:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2000::/40
Signature Algorithm: sha256WithRSAEncryption
19:33:c7:b5:44:d3:be:a2:c7:25:dc:3e:6a:32:b2:36:e1:b2:
b5:b3:71:73:7b:c9:f1:ca:34:78:2a:2f:ae:39:17:db:4d:87:
c7:f6:62:d7:ff:6f:5d:dd:3d:61:97:f7:e7:d5:03:1c:d0:ef:
a0:39:f3:2f:e6:f8:cd:0c:13:1f:23:9f:51:40:f0:70:16:20:
08:25:b2:43:aa:e2:63:2d:5b:81:27:0e:e4:3c:2d:a9:a7:2e:
ab:6d:17:15:93:98:3d:2d:c1:73:d4:09:27:55:c3:40:d2:86:
39:c3:a0:b8:84:af:32:04:91:75:86:f7:52:54:e0:77:3e:3a:
f5:d7:8d:4d:63:f4:fd:00:60:da:ea:65:0b:cd:59:95:dc:49:
b8:9a:e6:e8:b7:fe:2b:79:6b:dc:ec:51:35:c6:04:eb:7f:6a:
fc:2b:a3:2e:e1:99:e5:c4:bf:04:74:26:77:90:17:d1:f6:cd:
2f:3b:e8:38:7b:3d:bf:f2:9e:37:f7:5c:38:84:67:02:fe:98:
54:f4:4f:28:b8:a3:3a:7e:8d:3a:74:49:86:23:6a:50:9c:2a:
b3:0a:3c:74:de:41:93:dd:2a:44:d6:08:e5:85:33:14:67:5d:
1b:1b:38:43:1f:03:c4:5c:55:0f:be:d8:4e:1d:1d:6f:0e:3e:
bd:c5:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:51 2025 by rpki-client