Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
File: 0849241f-abaf-4c57-aadb-d881485a0aac.roa (raw, json)
Hash identifier: AOYzuowk8Lw3WJ3VtVsS++ii+/MTs8+PpiIOmeBve64=
Subject key identifier: 2F:BB:07:8C:CD:52:AA:CB:BE:3D:05:52:44:0C:50:25:1D:8D:A5:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A945FB21B122A10E8AE4802DE627AFC964BD9CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
Signing time: Tue 21 Oct 2025 13:31:02 +0000
ROA not before: Tue 21 Oct 2025 13:31:02 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:94:5f:b2:1b:12:2a:10:e8:ae:48:02:de:62:7a:fc:96:4b:d9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:31:02 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=6718ad12cd260c77d82173b1bea0d83a004eef2b2d6a0838f31bb640dc444dfe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:39:1e:22:fc:9c:f7:52:3e:03:c9:a7:34:
79:56:d4:38:a6:cc:ec:88:3f:0f:be:f5:71:b1:fa:
ea:26:4e:ae:8c:d4:6f:ca:78:6f:cf:49:5d:ab:a3:
c9:58:c6:19:6d:0f:85:70:8f:5f:6f:77:01:62:e6:
79:fa:b4:34:37:be:54:7e:33:b1:16:c0:41:35:eb:
2c:53:f4:78:a5:c6:97:89:a8:6b:c7:aa:c0:ee:ff:
16:fb:f2:3a:46:67:c4:a2:69:00:d6:8a:7c:97:8b:
f6:f7:c0:9d:17:99:f0:bd:a1:1b:62:5b:b9:c9:8f:
25:9b:62:02:6f:27:92:88:c0:c9:dd:05:b3:d1:2d:
94:9d:cf:ac:f5:68:9b:26:97:61:3c:9a:b8:6c:2d:
4c:c5:e9:68:93:8d:cb:ec:fa:13:c0:21:ca:60:9a:
a2:f6:55:22:29:43:fe:b1:82:51:2f:02:fc:61:a1:
31:62:6e:a8:23:bc:da:69:40:1e:dd:5e:5d:e3:58:
b0:9b:56:f6:bc:d5:8f:71:65:5c:46:fd:5c:23:dd:
e1:ec:1c:7d:fe:d1:a9:6d:08:1d:76:32:a7:20:56:
43:0f:88:58:8f:e1:f5:1f:ea:d9:2c:e7:6e:b8:05:
c0:5c:30:52:cd:24:68:e4:4c:64:8c:03:af:82:c6:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:07:8C:CD:52:AA:CB:BE:3D:05:52:44:0C:50:25:1D:8D:A5:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/38
Signature Algorithm: sha256WithRSAEncryption
6c:51:d3:04:73:6d:da:cb:8d:41:ba:f9:42:4f:e0:89:66:e0:
a4:dc:06:93:55:8d:37:57:51:e9:6f:43:dd:e6:d1:1f:18:44:
d0:9f:19:83:e6:ba:b5:b0:a3:48:1c:f9:fd:81:ee:b8:dd:16:
71:2c:2b:74:3c:1a:79:ed:f7:12:25:7a:e7:ca:8a:11:55:40:
65:66:a1:19:dd:0a:19:6b:8c:9b:a9:66:98:aa:d5:51:fa:f8:
1c:f2:9e:7c:f1:d8:aa:cd:b4:49:12:ce:82:14:d1:9b:3e:59:
65:02:c8:ad:c7:4c:32:0e:d8:33:9b:63:2e:7d:81:76:2f:f2:
4c:bb:21:d7:13:55:32:50:44:d7:74:b3:dc:8f:ad:d6:ba:67:
b5:91:4d:a6:7a:03:e0:a6:08:d4:c3:76:e6:21:f6:16:91:c0:
c1:d8:b5:66:e5:35:cb:8f:e7:a3:4e:72:3d:2e:79:6b:4f:43:
be:b2:b7:42:42:84:fd:86:50:76:77:6d:88:1a:2f:d4:6d:27:
2a:18:c9:f5:3d:98:0f:2e:1d:91:0b:6e:57:95:ec:20:ad:8f:
4b:7e:2b:65:c3:a5:81:12:07:08:c5:a9:5e:6d:83:d1:05:b2:
ae:46:ed:75:d0:85:55:28:48:ee:d6:cc:8a:62:c8:6d:68:72:
a0:16:ce:99
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUepRfshsSKhDorkgC3mJ6/JZL2c8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzMxMDJaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDY3MThhZDEyY2QyNjBjNzdkODIxNzNiMWJlYTBkODNhMDA0ZWVmMmIyZDZh
MDgzOGYzMWJiNjQwZGM0NDRkZmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI2AOR4i/Jz3Uj4Dyac0eVbUOKbM7Ig/D771cbH66iZOrozUb8p4b89JXauj
yVjGGW0PhXCPX293AWLmefq0NDe+VH4zsRbAQTXrLFP0eKXGl4moa8eqwO7/Fvvy
OkZnxKJpANaKfJeL9vfAnReZ8L2hG2JbucmPJZtiAm8nkojAyd0Fs9EtlJ3PrPVo
myaXYTyauGwtTMXpaJONy+z6E8AhymCaovZVIilD/rGCUS8C/GGhMWJuqCO82mlA
Ht1eXeNYsJtW9rzVj3FlXEb9XCPd4ewcff7RqW0IHXYypyBWQw+IWI/h9R/q2Szn
brgFwFwwUs0kaORMZIwDr4LGpw8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQvuweM
zVKqy749BVJEDFAlHY2lqzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDg0OTI0MWYtYWJhZi00YzU3LWFhZGItZDg4MTQ4NWEwYWFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BIA
MA0GCSqGSIb3DQEBCwUAA4IBAQBsUdMEc23ay41BuvlCT+CJZuCk3AaTVY03V1Hp
b0Pd5tEfGETQnxmD5rq1sKNIHPn9ge643RZxLCt0PBp57fcSJXrnyooRVUBlZqEZ
3QoZa4ybqWaYqtVR+vgc8p588diqzbRJEs6CFNGbPlllAsitx0wyDtgzm2MufYF2
L/JMuyHXE1UyUETXdLPcj63Wume1kU2megPgpgjUw3bmIfYWkcDB2LVm5TXLj+ej
TnI9LnlrT0O+srdCQoT9hlB2d22IGi/UbScqGMn1PZgPLh2RC25XlewgrY9Lfitl
w6WBEgcIxalebYPRBbKuRu110IVVKEju1syKYshtaHKgFs6Z
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:59 2025 by rpki-client