Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
File: e3c7ab12-58a1-44db-9063-7d7fef442d38.roa (raw, json)
Hash identifier: S1BuLBXNq6z9Tg+/YwH/DFbYcVtB7BWTlij2be0V//g=
Subject key identifier: D2:72:0A:45:E9:D9:91:F2:47:05:98:F5:76:ED:F8:CE:39:E5:13:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 581C27BD8229D0B69AA6E9A7DBF98C8A5BA7A01C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
Signing time: Wed 29 Oct 2025 07:36:43 +0000
ROA not before: Wed 29 Oct 2025 07:36:43 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1c:27:bd:82:29:d0:b6:9a:a6:e9:a7:db:f9:8c:8a:5b:a7:a0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:36:43 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=24990d9acffada0eeca0d12cf1723e7daf635234f85e7e4d46e322ee7b49ddf4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:af:60:d7:3c:f6:23:89:5a:1b:ae:6b:b0:
23:6d:d1:db:65:38:92:b2:7d:16:f2:d4:bc:e4:e6:
b2:d5:36:66:58:84:e0:50:9d:f8:ee:98:fb:b0:45:
9f:32:c4:ee:65:2c:91:a4:c1:b9:79:28:b1:bd:44:
e3:a5:c9:c5:64:20:bf:e9:0f:2d:14:7d:6f:ca:67:
ce:18:6e:72:70:d0:00:37:11:e9:9d:e5:8e:60:eb:
07:7b:b5:ec:9b:cf:96:ad:14:e2:97:ff:3f:56:29:
fe:50:21:b0:28:50:cb:7b:24:1d:58:2e:df:e4:a1:
72:69:eb:06:54:cf:8a:ed:b7:46:35:47:4f:87:8f:
94:08:f8:71:98:0f:7a:ce:92:b9:69:b4:83:91:0f:
f1:c1:e1:f1:e3:47:03:7b:8d:31:0d:ae:9f:df:e9:
3a:90:b6:9e:21:1a:27:e8:e1:96:5c:ba:64:c9:15:
12:e7:07:67:6d:d4:c8:29:e6:62:d0:30:aa:4b:41:
07:b2:97:f7:77:0f:d3:73:74:e2:d6:76:b7:67:fb:
14:4b:58:67:a4:74:21:93:5b:90:e0:7f:13:59:9c:
07:e5:6d:dc:45:4d:fc:59:89:87:40:6a:d8:ad:a7:
c1:09:8f:d6:1b:f1:a4:45:98:f2:82:c0:de:a8:39:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:72:0A:45:E9:D9:91:F2:47:05:98:F5:76:ED:F8:CE:39:E5:13:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3c7ab12-58a1-44db-9063-7d7fef442d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:c080::/48
Signature Algorithm: sha256WithRSAEncryption
77:e0:8f:3b:f6:24:1e:86:11:f4:f0:d0:b4:7a:ed:3a:5d:5a:
23:c1:9a:ac:eb:5a:9d:83:77:f2:9b:bb:90:6f:46:14:83:fe:
2f:02:1f:7d:f9:bf:6e:b5:b6:39:83:94:a2:e6:c5:9c:98:4b:
41:0d:21:93:c1:7f:d8:d6:89:44:17:14:78:62:91:60:6a:35:
cf:81:83:b6:07:7c:93:18:df:39:af:a9:a5:df:85:98:89:d2:
2c:ce:29:86:53:f3:14:38:0f:bc:ee:8a:57:29:a7:94:4e:05:
a2:4b:75:81:ac:e3:ee:d5:79:2f:52:c6:8d:1f:80:bc:82:db:
d3:8d:29:b2:37:b3:0f:8e:a7:d7:b9:a5:c0:91:d0:bd:f1:d6:
24:2f:fb:0d:b7:20:fd:59:33:7b:6d:a1:d5:78:9d:d0:d8:33:
3b:5e:59:c1:b5:94:5b:fc:56:54:a9:a4:44:a2:cb:46:4d:9b:
a3:a8:7a:b9:f8:11:fe:2a:a5:da:ba:bc:dc:c5:0b:5d:e1:0c:
0c:39:0c:e3:50:02:fa:72:bd:f3:dc:2b:91:9f:45:5e:48:75:
39:24:5b:51:18:ac:ec:69:9f:c9:08:ee:15:92:ce:8d:2d:94:
bb:ef:d9:b3:8e:33:d3:26:1b:dd:87:4c:40:31:b6:24:ac:94:
7b:ff:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:47 2025 by rpki-client