Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
File: 0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa (raw, json)
Hash identifier: uUbk+XO2BUkantKvaV1n9pHklfRvpEj8l3HCl7v1Nyg=
Subject key identifier: 32:FE:2E:B8:1F:AC:49:16:14:D2:A4:BC:07:D5:59:42:35:08:99:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CF4FBBBDDA4A70DD067E36DAA685D0407B6645B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
Signing time: Mon 01 Sep 2025 19:51:05 +0000
ROA not before: Mon 01 Sep 2025 19:51:05 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f4:fb:bb:dd:a4:a7:0d:d0:67:e3:6d:aa:68:5d:04:07:b6:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:51:05 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=4137d01be3b28dbef83be6b1e8ea0098d90f44672933ae6f8b4847d17f8eb635, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:ad:10:f9:71:3f:65:52:4e:d7:31:39:e1:
b1:f6:1b:02:de:75:58:ee:a5:43:5f:e8:e5:63:90:
9b:06:46:59:9c:60:3f:65:65:ab:fb:28:0b:b3:fd:
a7:79:54:94:dc:0f:fe:a0:ba:75:14:db:21:f7:45:
31:cc:0b:e6:03:bc:55:dc:af:6b:02:e2:53:e6:d3:
a3:6e:cf:9c:16:28:53:ec:59:2f:ae:73:c2:32:04:
e7:cd:2c:da:56:ad:3c:d0:81:a1:81:12:ea:3b:15:
b4:b6:22:d1:60:a2:9d:39:93:96:c4:af:a0:bf:c4:
ae:1b:f5:62:de:cc:38:49:71:47:9c:49:45:12:4f:
39:47:0e:46:9c:0a:9c:d5:57:5b:4b:b6:ce:24:30:
e5:11:2f:b7:5b:2b:48:db:db:3b:8c:de:2f:f6:62:
a5:4c:66:54:a1:47:73:de:fc:ee:da:07:e0:fc:d4:
01:70:b6:95:0f:8d:34:d4:ed:c3:24:46:57:f7:61:
51:eb:6a:e5:93:6f:9a:9f:e8:08:d8:c3:3f:ba:30:
94:cb:68:f4:ed:50:97:c6:a2:66:44:08:3c:29:fe:
24:5c:4b:fa:50:0a:b4:94:40:25:70:e3:b6:66:65:
97:c3:a7:b7:67:46:d7:9a:ff:29:58:a6:23:15:26:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:2E:B8:1F:AC:49:16:14:D2:A4:BC:07:D5:59:42:35:08:99:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
bd:fe:e9:9b:6e:43:2a:1c:86:f4:8e:65:d3:75:13:e9:fc:3c:
76:a9:c0:9a:6c:a2:14:a5:18:d0:4d:13:ae:d4:0a:05:d4:83:
78:d7:08:97:fe:ec:89:dd:3f:a8:ea:26:f9:a2:c7:9c:04:6b:
71:99:e2:c0:b6:2a:db:3e:ff:01:ae:4c:35:b3:46:a9:11:93:
40:7a:25:4f:38:92:28:a7:c1:2a:40:ef:96:63:69:03:e4:9c:
20:c5:f1:2b:e7:dc:d9:ad:e9:2c:be:3e:ff:5c:49:44:90:07:
d6:6e:92:48:f6:cb:87:06:ff:c4:75:4b:0c:d5:4e:d5:22:aa:
09:75:44:11:90:74:03:05:f6:00:c1:5f:45:06:3e:80:04:91:
99:6d:68:8c:00:28:6e:e1:6b:aa:7e:6e:25:4b:a8:cc:db:89:
16:cf:86:b6:fa:43:7e:df:73:55:2a:45:da:59:f0:36:5f:47:
f3:e8:78:cf:5f:53:2e:b7:e6:15:af:11:86:e4:a3:6e:0f:d5:
19:c4:9d:8e:82:0c:36:9b:d9:2a:3b:82:c1:b8:84:f6:c0:6c:
ab:0f:e6:a0:95:73:6b:08:ab:2e:01:db:62:ef:34:b9:63:fa:
b7:8f:2b:3a:4f:05:33:7a:9c:d5:a8:84:6e:de:14:06:96:dd:
01:80:42:3f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTPT7u92kpw3QZ+NtqmhdBAe2ZFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTUxMDVaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQxMzdkMDFiZTNiMjhkYmVmODNiZTZiMWU4ZWEwMDk4ZDkwZjQ0NjcyOTMz
YWU2ZjhiNDg0N2QxN2Y4ZWI2MzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJaUrRD5cT9lUk7XMTnhsfYbAt51WO6lQ1/o5WOQmwZGWZxgP2Vlq/soC7P9
p3lUlNwP/qC6dRTbIfdFMcwL5gO8VdyvawLiU+bTo27PnBYoU+xZL65zwjIE580s
2latPNCBoYES6jsVtLYi0WCinTmTlsSvoL/Erhv1Yt7MOElxR5xJRRJPOUcORpwK
nNVXW0u2ziQw5REvt1srSNvbO4zeL/ZipUxmVKFHc9787toH4PzUAXC2lQ+NNNTt
wyRGV/dhUetq5ZNvmp/oCNjDP7owlMto9O1Ql8aiZkQIPCn+JFxL+lAKtJRAJXDj
tmZll8Ont2dG15r/KVimIxUm3k8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQy/i64
H6xJFhTSpLwH1VlCNQiZVjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGIyZTMwOWUtZTlkNC00NTQ2LTg5NjktMmQ3YjRiOWQ1MTNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAvf7pm25DKhyG9I5l03UT6fw8dqnAmmyiFKUY
0E0TrtQKBdSDeNcIl/7sid0/qOom+aLHnARrcZniwLYq2z7/Aa5MNbNGqRGTQHol
TziSKKfBKkDvlmNpA+ScIMXxK+fc2a3pLL4+/1xJRJAH1m6SSPbLhwb/xHVLDNVO
1SKqCXVEEZB0AwX2AMFfRQY+gASRmW1ojAAobuFrqn5uJUuozNuJFs+GtvpDft9z
VSpF2lnwNl9H8+h4z19TLrfmFa8RhuSjbg/VGcSdjoIMNpvZKjuCwbiE9sBsqw/m
oJVzawirLgHbYu80uWP6t48rOk8FM3qc1aiEbt4UBpbdAYBCPw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:17:00 2025 by rpki-client