Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
File: e9709897-68c6-44f9-98f1-1f292cf13bea.roa (raw, json)
Hash identifier: utEoQsXKfb7BhZdBpt0AkxF5M6QBw5KpjIkQs3ky1bY=
Subject key identifier: 59:C7:DE:87:33:19:F7:6F:50:91:0B:9E:8D:CB:30:78:D3:E7:DD:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C0B02A68A12256CC85C85ED04AB13DE44E6CF7E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
Signing time: Tue 04 Nov 2025 02:50:43 +0000
ROA not before: Tue 04 Nov 2025 02:50:43 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0b:02:a6:8a:12:25:6c:c8:5c:85:ed:04:ab:13:de:44:e6:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:43 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=5fe2aada5aae86c6cc9af13d4f3b362697c74d83749aa67e0d96d0c99d1638a1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:0f:98:5b:dd:04:9f:54:ce:30:4d:12:66:
19:df:58:87:2e:6f:cc:e7:88:1a:3c:3c:4f:59:81:
3c:95:e1:c8:41:ea:8d:f9:29:f4:df:d1:b7:0f:1d:
a8:a0:46:27:51:7d:2c:66:49:a2:eb:c2:24:8c:26:
2f:67:4b:92:45:17:41:d6:29:c7:98:11:9e:a8:6a:
ad:e0:48:8e:3d:f9:b4:d4:55:23:fd:4f:06:22:3c:
87:ba:29:4f:46:72:c2:a7:52:51:cc:24:48:18:88:
61:3d:8d:44:8f:78:1b:41:90:38:39:27:3c:e2:3a:
0b:7e:80:05:e0:eb:1b:50:87:f4:cf:e9:68:2b:0b:
fb:ca:d8:69:e0:c7:b8:3f:cd:a9:27:d6:c2:54:b7:
45:80:1b:9c:87:a6:88:39:46:46:7e:79:c4:a0:c6:
74:5f:a8:e6:b1:02:84:cf:08:db:ee:37:28:ae:65:
cc:68:3c:dd:82:08:76:51:1b:9a:b0:e2:d7:f9:d4:
c7:72:d4:2d:04:9d:aa:2e:00:39:20:b2:1b:f2:de:
62:cf:97:bc:ee:23:7f:4d:b9:13:b1:f6:55:d2:d8:
ff:8f:dd:d1:4e:52:93:4b:b2:9a:3a:41:75:9f:4f:
6d:77:c6:5c:8c:3b:86:f6:77:88:75:34:21:89:23:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:DE:87:33:19:F7:6F:50:91:0B:9E:8D:CB:30:78:D3:E7:DD:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9709897-68c6-44f9-98f1-1f292cf13bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
97:d8:68:f1:fc:0f:e0:12:55:12:22:7c:0b:a3:30:c3:54:7c:
25:d8:e5:8a:ed:7d:b2:87:43:d1:99:0d:7d:7f:05:7f:5b:3e:
45:de:21:91:4d:45:14:3c:9d:c7:76:a5:8e:cf:21:67:c3:ad:
e2:35:85:69:06:18:e2:6e:04:00:15:80:35:22:ad:60:ed:e1:
63:42:05:c3:10:68:ad:fe:35:db:58:57:18:7f:de:5d:8f:a5:
89:2a:a8:32:ce:5c:55:80:e4:a1:31:8f:02:2f:8d:5e:9e:2c:
5f:ad:1f:5a:00:ba:f1:6b:75:cd:4a:5a:9d:46:0c:6c:3d:05:
8e:7e:21:00:9e:70:4b:54:e5:be:75:75:0a:c7:5f:57:f1:69:
03:f5:73:31:59:fc:7f:28:4d:5b:c2:39:bd:77:12:b4:88:72:
32:9e:62:39:0d:be:eb:80:53:8e:72:4c:f6:13:51:35:48:79:
19:ed:b7:58:64:62:65:b1:ae:1c:ce:4a:59:5e:c1:80:b9:58:
5a:43:5e:13:1e:db:5a:01:dd:48:3e:f3:83:4b:91:c0:00:53:
89:e7:bb:75:6b:97:3a:60:d2:10:e2:bb:2f:03:ce:d6:04:61:
3a:07:e9:8f:72:b2:57:ce:84:62:b7:e9:d4:77:ce:f3:55:12:
57:81:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:39 2025 by rpki-client