Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
File: fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa (raw, json)
Hash identifier: EfN0ZY95F2CtoUGOmpmocKCFS/CYdFIF02bG83ch3T4=
Subject key identifier: E8:A7:1D:DB:C1:D4:05:9E:4D:A7:BB:A7:73:7C:89:E1:04:1C:AE:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16461BDD398195F7D2F4554A7F3EED9A851F29EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
Signing time: Fri 11 Jul 2025 19:00:16 +0000
ROA not before: Fri 11 Jul 2025 19:00:16 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:46:1b:dd:39:81:95:f7:d2:f4:55:4a:7f:3e:ed:9a:85:1f:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:00:16 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=40012b368cf6fddf9752fd2d349fc00d239798bfd138c1c9e2579b183f2ff548, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:3f:b2:ca:4f:65:b5:65:4d:7c:6e:b5:4b:
ec:20:80:fe:54:30:0f:a1:54:0e:05:3d:f1:08:a0:
e6:3c:13:19:dd:a1:b3:ee:0b:9d:93:4b:1e:95:98:
91:b9:6f:bc:d3:b8:fe:94:e0:67:73:e0:b9:a4:35:
a4:a5:98:e0:01:12:6e:2a:12:bf:98:e3:ab:1e:50:
5e:d9:9d:56:88:2b:a6:af:dc:a8:df:e9:0b:1a:57:
cf:45:19:80:6a:79:b2:38:fd:1e:18:23:fe:53:04:
0c:98:59:e5:67:7d:a6:ac:38:1b:de:1d:23:19:f5:
ec:de:84:e5:68:a3:e8:e4:f3:1f:d1:ba:e0:8b:82:
be:08:6a:b3:85:fc:8c:0f:35:e0:c4:05:53:32:e7:
c0:fb:ca:37:5e:40:97:1f:3e:ef:42:0f:a4:8b:ce:
7d:fa:37:c1:3b:c7:13:76:4c:e2:b8:51:44:89:f9:
da:7c:69:ff:89:31:5c:8b:8e:f7:8b:34:9e:d2:ba:
98:dc:4b:1d:93:54:7c:43:ea:40:c1:07:fd:24:88:
c3:82:9c:52:6c:d4:e0:13:26:f1:3d:46:c0:42:fe:
e7:41:ce:3c:9f:b5:5e:b5:1c:0a:24:91:f8:69:25:
40:f6:60:17:e2:56:ee:e3:3e:91:45:1f:fd:14:84:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:1D:DB:C1:D4:05:9E:4D:A7:BB:A7:73:7C:89:E1:04:1C:AE:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fce7a03b-9e90-4921-9c56-5b0bd4e60ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
04:7e:4d:29:5e:22:99:0d:31:23:96:cb:c2:f9:9b:69:6d:7a:
28:3b:e7:7d:e4:b6:47:5d:35:ae:38:4f:46:e2:f2:f2:78:69:
e2:ab:33:7a:ab:c2:c5:33:9f:f0:67:31:99:5b:f2:76:50:2e:
f7:37:c7:e7:c3:dc:e3:ab:6c:f1:f6:ba:70:d5:35:4d:cc:ce:
7d:e6:69:41:6a:e7:8e:23:a0:c9:72:89:48:4d:83:31:02:42:
24:46:81:ee:a8:47:5e:42:b6:7d:65:bb:fc:55:32:d6:84:4a:
9c:24:f2:bd:c4:aa:f2:cd:9a:5d:14:3b:ad:6f:3e:08:78:86:
8f:93:25:bd:5d:43:74:5e:46:25:c8:04:f0:af:91:55:98:f3:
b9:1f:09:d4:b6:ae:72:2a:0a:0e:ca:b4:43:6a:98:7a:5e:55:
59:71:3a:37:96:5f:ad:7c:86:5f:c4:ca:f5:f7:ba:6b:1b:f1:
d8:4d:d9:74:f2:fb:98:9f:4a:34:54:ed:3d:07:94:0c:ff:e0:
3e:4f:9e:09:a8:11:91:a3:23:27:00:0c:b6:f4:e9:0b:4e:7e:
48:99:5e:e1:fb:d3:3f:28:ae:55:70:47:cf:91:5e:c2:fa:d5:
b5:1e:ec:df:1d:f0:29:c3:c5:de:0b:28:5e:34:ff:2a:bd:d8:
21:57:8d:86
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFkYb3TmBlffS9FVKfz7tmoUfKe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTAwMTZaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwMDEyYjM2OGNmNmZkZGY5NzUyZmQyZDM0OWZjMDBkMjM5Nzk4YmZkMTM4
YzFjOWUyNTc5YjE4M2YyZmY1NDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALdKP7LKT2W1ZU18brVL7CCA/lQwD6FUDgU98Qig5jwTGd2hs+4LnZNLHpWY
kblvvNO4/pTgZ3PguaQ1pKWY4AESbioSv5jjqx5QXtmdVogrpq/cqN/pCxpXz0UZ
gGp5sjj9Hhgj/lMEDJhZ5Wd9pqw4G94dIxn17N6E5Wij6OTzH9G64IuCvghqs4X8
jA814MQFUzLnwPvKN15Alx8+70IPpIvOffo3wTvHE3ZM4rhRRIn52nxp/4kxXIuO
94s0ntK6mNxLHZNUfEPqQMEH/SSIw4KcUmzU4BMm8T1GwEL+50HOPJ+1XrUcCiSR
+GklQPZgF+JW7uM+kUUf/RSEYS0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTopx3b
wdQFnk2nu6dzfInhBByutDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmNlN2EwM2ItOWU5MC00OTIxLTljNTYtNWIwYmQ0ZTYwZWQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA
wDANBgkqhkiG9w0BAQsFAAOCAQEABH5NKV4imQ0xI5bLwvmbaW16KDvnfeS2R101
rjhPRuLy8nhp4qszeqvCxTOf8GcxmVvydlAu9zfH58Pc46ts8fa6cNU1TczOfeZp
QWrnjiOgyXKJSE2DMQJCJEaB7qhHXkK2fWW7/FUy1oRKnCTyvcSq8s2aXRQ7rW8+
CHiGj5MlvV1DdF5GJcgE8K+RVZjzuR8J1LaucioKDsq0Q2qYel5VWXE6N5ZfrXyG
X8TK9fe6axvx2E3ZdPL7mJ9KNFTtPQeUDP/gPk+eCagRkaMjJwAMtvTpC05+SJle
4fvTPyiuVXBHz5FewvrVtR7s3x3wKcPF3gsoXjT/Kr3YIVeNhg==
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:42:17 2025 by rpki-client