Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa
File: a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa (raw, json)
Hash identifier: MtaYfyj76xZIl9MyKRdAQ1LP469lcT0TJ5CE/vOA04s=
Subject key identifier: CE:08:19:D3:86:86:4D:B1:A3:70:56:AF:50:B3:E8:E2:5E:5F:9C:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09DB641933E1BBFE837D4919E22B310E80A2D967
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa
Signing time: Mon 30 Jun 2025 17:50:49 +0000
ROA not before: Mon 30 Jun 2025 17:50:49 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:db:64:19:33:e1:bb:fe:83:7d:49:19:e2:2b:31:0e:80:a2:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 17:50:49 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=921ef637bc79884098dc92b63cda0b311d2a8dd11c578fa4d23581285777c6c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:71:41:b3:bc:6e:25:3d:3b:24:41:28:a6:
27:b0:a8:a8:49:90:d6:46:78:99:4a:58:54:2c:1e:
ef:be:f6:22:79:58:59:c0:d2:ed:66:1a:6a:cc:28:
d8:80:45:56:92:52:84:a7:8d:9e:6f:16:f6:45:b5:
1e:26:a0:a1:81:b9:b9:89:14:c4:1b:ac:84:e0:77:
ad:4e:d4:32:99:f9:c1:77:e2:19:cb:43:b1:81:38:
4d:40:9e:4b:6b:6b:76:aa:19:32:34:50:d2:95:96:
e2:af:77:b3:74:f5:46:ad:f0:c7:e1:3c:c2:9e:a1:
cf:5b:a7:c3:88:95:e9:a8:36:3a:9d:48:d6:20:9e:
3d:83:be:12:c9:36:89:cb:4f:b7:bd:d1:d2:0d:c2:
ca:60:5c:a1:93:77:89:bf:b9:ca:b0:d2:89:2a:6f:
69:6d:84:16:01:07:58:42:cd:ff:7a:c4:b4:de:87:
e0:dc:8b:4e:9a:15:a0:b0:b2:75:3d:71:42:0e:4b:
2d:8d:0d:c3:3a:e6:53:dc:d1:35:7c:b2:de:95:7f:
c9:3d:22:fe:41:3a:4a:f4:02:04:3b:cd:4b:86:36:
96:65:a3:b1:f6:46:73:09:da:48:60:d6:1b:d0:64:
ad:e4:ae:08:0c:24:98:9a:ff:f8:34:e6:dd:c4:9c:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:08:19:D3:86:86:4D:B1:A3:70:56:AF:50:B3:E8:E2:5E:5F:9C:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a78aefb4-d1eb-4a11-9899-bf6729e18ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:3d:e8:bb:98:d4:8c:d9:09:7b:3f:3c:8e:46:39:12:68:6e:
74:b1:f8:4f:aa:71:d8:df:d7:c6:2f:d2:c4:56:28:8a:2c:39:
05:e6:3d:9b:a2:96:0f:de:77:61:77:84:ea:5a:92:ab:62:88:
8d:b3:11:c8:e0:52:82:3e:30:6a:32:23:0b:26:ec:17:48:20:
d1:77:40:99:3e:2f:34:de:6e:7a:e6:52:c3:f2:19:c5:49:10:
47:77:52:c7:10:23:d7:55:20:9e:a8:62:0f:48:ed:6b:9e:af:
4d:86:5b:e9:82:c5:9e:eb:1d:71:90:b8:b9:57:04:e7:06:95:
fb:85:bb:80:1e:d2:cf:d4:c0:e9:49:ac:48:46:5d:b5:1c:f4:
28:20:24:23:a7:ee:67:56:5a:a7:3d:f5:31:3d:65:14:a9:39:
a5:85:d3:38:27:7d:ff:e4:21:08:c4:e4:dd:54:70:fc:08:61:
ff:55:0b:0c:56:bc:a4:c3:74:93:9b:05:2e:88:6b:68:42:83:
4b:9b:5a:37:f3:f1:c1:c2:b4:ba:ca:ea:3c:e9:58:7c:a4:1b:
98:d5:70:3c:b7:f5:d0:6c:8d:ff:5b:8b:cb:de:04:77:51:3c:
3b:dc:10:0a:4b:e1:ff:88:16:6e:df:87:ce:57:96:7c:fd:61:
44:84:7c:2e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCdtkGTPhu/6DfUkZ4isxDoCi2WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MzAxNzUwNDlaFw0yNTA4MDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDkyMWVmNjM3YmM3OTg4NDA5OGRjOTJiNjNjZGEwYjMxMWQyYThkZDExYzU3
OGZhNGQyMzU4MTI4NTc3N2M2YzgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANjGcUGzvG4lPTskQSimJ7CoqEmQ1kZ4mUpYVCwe7772InlYWcDS7WYaaswo
2IBFVpJShKeNnm8W9kW1HiagoYG5uYkUxBushOB3rU7UMpn5wXfiGctDsYE4TUCe
S2trdqoZMjRQ0pWW4q93s3T1Rq3wx+E8wp6hz1unw4iV6ag2Op1I1iCePYO+Esk2
ictPt73R0g3CymBcoZN3ib+5yrDSiSpvaW2EFgEHWELN/3rEtN6H4NyLTpoVoLCy
dT1xQg5LLY0NwzrmU9zRNXyy3pV/yT0i/kE6SvQCBDvNS4Y2lmWjsfZGcwnaSGDW
G9BkreSuCAwkmJr/+DTm3cScalkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTOCBnT
hoZNsaNwVq9Qs+jiXl+cvjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTc4YWVmYjQtZDFlYi00YTExLTk4OTktYmY2NzI5ZTE4Y2NkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HSw
MA0GCSqGSIb3DQEBCwUAA4IBAQBdPei7mNSM2Ql7PzyORjkSaG50sfhPqnHY39fG
L9LEViiKLDkF5j2bopYP3ndhd4TqWpKrYoiNsxHI4FKCPjBqMiMLJuwXSCDRd0CZ
Pi803m565lLD8hnFSRBHd1LHECPXVSCeqGIPSO1rnq9NhlvpgsWe6x1xkLi5VwTn
BpX7hbuAHtLP1MDpSaxIRl21HPQoICQjp+5nVlqnPfUxPWUUqTmlhdM4J33/5CEI
xOTdVHD8CGH/VQsMVrykw3STmwUuiGtoQoNLm1o38/HBwrS6yuo86Vh8pBuY1XA8
t/XQbI3/W4vL3gR3UTw73BAKS+H/iBZu34fOV5Z8/WFEhHwu
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:32:42 2025 by rpki-client