Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
File: 16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa (raw, json)
Hash identifier: 6ga1oDRt0vBz2Vq3bev3pGOFsK8cuj6NcBt17hSfnSI=
Subject key identifier: 2C:E7:CF:95:A5:3E:BD:7C:82:73:B6:B7:95:4A:AA:30:A1:45:68:A1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FD5E849F1C5422E04556C8C35E93D40E7C15032
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
Signing time: Fri 11 Jul 2025 20:20:16 +0000
ROA not before: Fri 11 Jul 2025 20:20:16 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d5:e8:49:f1:c5:42:2e:04:55:6c:8c:35:e9:3d:40:e7:c1:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:20:16 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=66993280a4964dd76888a04f655f6dd9133d33277b7738faa8ceca9d4fb9bdcc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:48:ff:5e:2e:9e:58:c3:b1:d6:b2:6f:02:
4d:61:14:da:34:12:cb:8d:50:41:49:55:a2:89:d6:
23:e1:fc:e9:32:84:52:98:f0:55:44:d2:e4:43:5b:
4f:ac:52:c8:49:81:c2:ec:48:6b:6c:1e:09:8b:88:
09:1b:9d:63:64:8d:6b:d8:3a:87:24:02:b5:51:c0:
13:ae:c4:3a:97:a8:2e:42:fb:80:cd:ca:30:c5:c0:
b0:81:5f:ee:3d:ca:cb:a3:09:1f:96:b4:a8:7d:29:
8f:5d:98:03:bb:9f:44:f0:c9:8b:03:e9:c0:e9:95:
23:4b:17:25:60:e4:ff:9a:49:42:74:90:be:0b:04:
fe:96:cc:c0:0a:ec:c0:d8:89:94:0b:a8:f8:9d:1b:
f3:b2:57:5f:f9:a3:c8:0d:be:a8:18:2c:7f:ff:03:
cd:50:93:d8:ea:63:68:33:fa:89:5a:38:22:04:f1:
a5:06:35:76:ff:7d:25:3e:56:15:ad:02:24:3e:c0:
42:83:ec:81:5e:12:95:ff:aa:82:fa:cd:c2:68:19:
af:04:f9:ef:da:f6:4f:ff:da:96:db:d8:bd:60:0c:
cf:a8:fc:d9:e1:fd:ac:e8:f2:39:1b:68:52:96:86:
de:15:af:80:9c:64:d8:2b:e7:9a:02:27:c1:fc:f4:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:CF:95:A5:3E:BD:7C:82:73:B6:B7:95:4A:AA:30:A1:45:68:A1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/16e83d89-9c29-4d70-9d1d-85e4dc7e3d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:0c:cc:fd:34:3a:b8:02:1d:2b:ac:29:98:21:04:39:c4:d0:
43:8c:35:3a:54:a5:2d:ec:11:76:0d:79:72:15:fb:22:d8:9b:
57:24:41:cb:d3:05:32:e7:16:64:82:8d:93:04:bf:0f:d3:3c:
6f:69:72:74:6c:fb:62:f0:ea:d7:ff:80:c3:4a:96:d3:0f:41:
bd:44:6c:1f:b3:29:d7:99:3d:4e:d0:63:3c:a8:b2:d4:59:e4:
da:c7:55:f2:2f:62:50:3b:82:0b:08:e5:8f:40:50:e7:25:16:
7c:91:cc:80:f4:33:0e:b8:bf:5b:d4:65:cc:93:69:cd:24:34:
07:a6:e3:16:16:ce:d4:a4:de:7a:f6:da:c2:10:7e:08:df:d0:
87:da:45:6c:6e:45:55:0a:00:17:aa:84:59:8e:68:21:6d:31:
52:04:f8:a2:2e:84:42:4d:26:1d:b3:83:ab:1a:9c:42:e3:e1:
f9:79:90:d7:01:e8:ff:35:22:50:3d:fe:fb:9a:1b:e6:4d:be:
52:76:34:ec:60:38:87:37:e0:9e:0f:f1:db:b0:94:6c:e2:a4:
85:4e:22:ec:9d:e6:36:47:6f:59:28:21:2b:31:c5:00:b4:9c:
4d:cb:30:0a:ed:9b:c1:b4:66:1b:65:01:51:45:d4:ea:ab:07:
98:f7:5d:90
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUD9XoSfHFQi4EVWyMNek9QOfBUDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDIwMTZaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDY2OTkzMjgwYTQ5NjRkZDc2ODg4YTA0ZjY1NWY2ZGQ5MTMzZDMzMjc3Yjc3
MzhmYWE4Y2VjYTlkNGZiOWJkY2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIvSP9eLp5Yw7HWsm8CTWEU2jQSy41QQUlVoonWI+H86TKEUpjwVUTS5ENb
T6xSyEmBwuxIa2weCYuICRudY2SNa9g6hyQCtVHAE67EOpeoLkL7gM3KMMXAsIFf
7j3Ky6MJH5a0qH0pj12YA7ufRPDJiwPpwOmVI0sXJWDk/5pJQnSQvgsE/pbMwArs
wNiJlAuo+J0b87JXX/mjyA2+qBgsf/8DzVCT2OpjaDP6iVo4IgTxpQY1dv99JT5W
Fa0CJD7AQoPsgV4Slf+qgvrNwmgZrwT579r2T//altvYvWAMz6j82eH9rOjyORto
UpaG3hWvgJxk2CvnmgInwfz0wLUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQs58+V
pT69fIJztreVSqowoUVooTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTZlODNkODktOWMyOS00ZDcwLTlkMWQtODVlNGRjN2UzZDZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hiw
MA0GCSqGSIb3DQEBCwUAA4IBAQB+DMz9NDq4Ah0rrCmYIQQ5xNBDjDU6VKUt7BF2
DXlyFfsi2JtXJEHL0wUy5xZkgo2TBL8P0zxvaXJ0bPti8OrX/4DDSpbTD0G9RGwf
synXmT1O0GM8qLLUWeTax1XyL2JQO4ILCOWPQFDnJRZ8kcyA9DMOuL9b1GXMk2nN
JDQHpuMWFs7UpN569trCEH4I39CH2kVsbkVVCgAXqoRZjmghbTFSBPiiLoRCTSYd
s4OrGpxC4+H5eZDXAej/NSJQPf77mhvmTb5SdjTsYDiHN+CeD/HbsJRs4qSFTiLs
neY2R29ZKCErMcUAtJxNyzAK7ZvBtGYbZQFRRdTqqweY912Q
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:19 2025 by rpki-client