Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
File: d6265269-370a-4e3b-983b-9bec3a5c535a.roa (raw, json)
Hash identifier: 2WxLIRYSdwJYDLbgXUNFTT6RSj75LqKfVorzjY5tnMM=
Subject key identifier: CF:DA:A4:7F:FE:30:70:CA:C6:6B:A9:E8:16:61:C8:9B:D3:08:CA:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A125618B397916B0768E2B7694F6B19724D20C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
Signing time: Fri 31 Oct 2025 00:40:11 +0000
ROA not before: Fri 31 Oct 2025 00:40:11 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:12:56:18:b3:97:91:6b:07:68:e2:b7:69:4f:6b:19:72:4d:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 00:40:11 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=628b21e6a1696d46caab5dce527c7d6e9b8dda6ae914ea62f505945e606b5b82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:34:34:c9:d3:16:13:67:52:61:dc:1a:3a:
a3:42:b5:06:0a:44:52:0a:aa:4e:de:cb:4d:de:53:
17:25:78:f2:95:4c:21:99:a7:4d:87:b0:32:b8:f1:
51:f4:4d:4d:02:06:15:3a:fa:0c:4d:99:03:48:12:
4f:dc:3e:fd:84:80:cd:0e:f5:7d:94:96:a3:e7:63:
71:e7:37:6c:f0:78:5e:62:1b:ec:4a:57:fe:a6:12:
0f:6c:32:69:a3:45:63:eb:73:6e:8a:3f:41:40:78:
59:62:d1:ab:ed:ef:03:ef:c3:25:fa:56:9e:ac:13:
62:52:9a:e0:83:e3:8c:66:b0:d2:26:c4:0b:9f:4c:
bc:97:fe:5c:41:db:f4:b1:ee:9f:df:49:25:f8:7f:
93:68:85:94:d9:c3:89:cd:9d:fa:4b:f3:09:3c:83:
0c:ba:0e:df:a3:03:4b:de:43:c1:26:11:43:d5:d8:
56:03:79:24:6c:c3:1e:70:6b:c9:27:14:6c:7c:57:
1a:bb:0b:48:f5:dd:70:08:86:75:5a:55:24:83:6a:
01:2b:ce:5a:cd:8f:31:df:fb:53:04:1f:c4:9e:42:
32:06:43:b4:2e:55:3f:fb:c9:8a:76:f9:ce:92:bd:
9f:5c:a6:fa:47:1f:e5:7d:97:d6:e8:e3:65:74:d9:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:A4:7F:FE:30:70:CA:C6:6B:A9:E8:16:61:C8:9B:D3:08:CA:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6265269-370a-4e3b-983b-9bec3a5c535a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e000::/40
Signature Algorithm: sha256WithRSAEncryption
54:b4:ef:05:12:2c:0d:f6:81:9e:d9:ef:02:22:ce:44:9c:80:
e0:b6:66:83:39:bf:dd:92:c7:b3:eb:8c:5c:57:4a:a8:73:3a:
51:c8:36:94:c3:42:39:da:94:8a:a0:f0:1f:5a:f9:b2:5f:2e:
96:8a:95:05:02:78:96:a4:d2:4d:e2:2b:ca:9a:cb:7d:8e:91:
3f:d6:41:b3:02:bd:9f:a4:53:a3:da:4c:5b:ef:74:12:29:27:
b5:d1:9a:4d:82:d0:27:9e:e7:93:1f:94:68:4e:af:f9:67:e1:
b9:d3:45:30:c7:9e:ec:1f:41:de:c3:93:9b:bc:c5:38:64:b0:
71:83:cb:29:4c:3d:d4:22:49:d7:a7:f7:5d:9a:ec:40:f8:49:
96:08:3f:ea:e2:f6:10:2b:af:08:a1:db:b4:b0:ba:3b:71:e2:
21:df:21:f0:c3:5b:4f:8a:87:6c:fb:c5:a0:3c:88:98:f7:a6:
af:9b:fd:53:07:59:ba:fb:1a:3d:09:69:2b:31:e8:68:d8:d6:
50:06:c0:bc:16:58:3d:88:55:c5:fc:38:42:a3:35:9b:39:39:
6d:66:c0:7e:e9:a0:c5:9d:78:7d:70:f3:1c:b7:51:c5:48:5f:
07:cf:1e:ca:f6:13:27:f1:8f:e3:b6:bd:e7:74:c5:9f:44:b6:
d0:08:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:13 2025 by rpki-client