Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
File: 2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa (raw, json)
Hash identifier: fEiZ9DOfM/ow7QRQ103UwhqvdmrWfQX1E9Ln9OH2CVs=
Subject key identifier: 60:BA:5A:90:A3:65:31:B4:63:50:9D:88:23:AD:7F:21:59:D5:D4:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11010C409062076799235B91BE69C6F426C68317
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
Signing time: Tue 21 Oct 2025 14:00:07 +0000
ROA not before: Tue 21 Oct 2025 14:00:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:01:0c:40:90:62:07:67:99:23:5b:91:be:69:c6:f4:26:c6:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=016c3662cd91ee8661417bc2217ca61bd97ca71ab54de9cf718e6fdb2d3209ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3f:1b:fb:c8:24:86:e0:5b:3f:59:25:a1:c6:
7c:be:c3:a4:ea:4f:f4:48:06:92:c4:45:7d:23:77:
59:33:f0:40:31:de:c3:4b:fc:7a:a3:aa:e6:9a:a8:
f3:33:ff:65:d1:b4:71:58:9f:1a:22:37:6b:42:4f:
83:8c:2e:ce:17:97:cb:da:cf:94:c6:a2:fc:25:43:
2c:08:f1:19:69:a3:06:d0:d6:21:1a:95:17:f6:e4:
7b:20:ea:d4:f8:29:25:12:58:7f:9f:ff:25:0b:f8:
a5:8f:84:72:af:c8:af:aa:eb:3a:84:25:8c:26:52:
d2:e6:fb:d2:c6:db:39:27:ca:9b:8e:c6:4a:5f:62:
7c:ef:29:0b:73:60:21:74:e6:40:84:5a:1a:9c:b9:
81:f5:de:8f:37:ed:66:a2:bc:0f:48:0a:41:f3:9e:
9b:ce:12:2a:eb:08:14:3c:43:bc:52:af:b9:aa:37:
d6:fa:49:54:80:a3:a6:46:d1:a2:98:95:90:fe:34:
a8:91:51:c5:ef:b8:72:fc:81:2a:67:6d:35:05:d5:
d1:1f:08:3b:08:0a:b3:14:85:a3:04:ad:43:80:09:
41:64:b0:fc:3d:d2:64:30:ac:d6:b5:b9:89:04:ed:
80:b7:7a:09:b9:b8:ca:55:b6:b3:0f:43:48:b1:f1:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:5A:90:A3:65:31:B4:63:50:9D:88:23:AD:7F:21:59:D5:D4:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a93bdc2-823c-416a-ac40-6f6c823bcef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1080::/48
Signature Algorithm: sha256WithRSAEncryption
76:91:2e:a3:17:2b:51:3b:73:3b:3e:72:af:66:e0:0b:91:ca:
a7:fe:73:59:6d:03:9e:89:d2:6b:47:bd:f7:db:12:9c:f4:68:
cf:6d:18:d1:06:d1:76:b4:8f:2b:85:b9:48:36:58:78:22:d1:
5b:13:d4:fd:36:6b:20:dc:c1:cd:09:bc:1e:47:9e:b6:06:73:
2a:6d:18:7f:84:f0:f6:f5:cc:5d:ff:e8:e2:d7:03:89:83:a6:
23:17:51:14:e1:fd:6a:8c:e8:0b:16:e2:02:9d:4d:95:57:7b:
f6:59:4c:85:94:f3:e1:d2:d1:0f:03:17:9d:f2:fa:2e:43:36:
cc:dd:5b:86:40:b6:2a:ef:7f:46:57:f1:28:09:0c:5f:7a:62:
30:e3:09:30:e1:ca:82:f0:1b:65:8e:bf:70:7c:91:ae:ad:e0:
99:f8:44:ca:3c:20:04:25:a4:de:5a:21:91:9d:69:8d:b3:b9:
45:10:ea:25:07:18:7f:80:d6:f7:c6:62:83:04:58:f1:ca:c8:
d1:81:94:d8:1c:7f:b4:9f:3e:e1:56:45:ba:5c:91:bf:89:8c:
88:f5:22:b0:8a:4b:9e:37:bd:4d:0b:47:9e:50:18:8c:ff:56:
f3:2b:92:d2:57:98:5a:70:ee:a0:d1:82:ad:98:e6:43:9c:db:
02:66:13:66
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUEQEMQJBiB2eZI1uRvmnG9CbGgxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDAwMDdaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDAxNmMzNjYyY2Q5MWVlODY2MTQxN2JjMjIxN2NhNjFiZDk3Y2E3MWFiNTRk
ZTljZjcxOGU2ZmRiMmQzMjA5ZWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPE/G/vIJIbgWz9ZJaHGfL7DpOpP9EgGksRFfSN3WTPwQDHew0v8eqOq5pqo
8zP/ZdG0cVifGiI3a0JPg4wuzheXy9rPlMai/CVDLAjxGWmjBtDWIRqVF/bkeyDq
1PgpJRJYf5//JQv4pY+Ecq/Ir6rrOoQljCZS0ub70sbbOSfKm47GSl9ifO8pC3Ng
IXTmQIRaGpy5gfXejzftZqK8D0gKQfOem84SKusIFDxDvFKvuao31vpJVICjpkbR
opiVkP40qJFRxe+4cvyBKmdtNQXV0R8IOwgKsxSFowStQ4AJQWSw/D3SZDCs1rW5
iQTtgLd6Cbm4ylW2sw9DSLHxR4UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRgulqQ
o2UxtGNQnYgjrX8hWdXUWTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmE5M2JkYzItODIzYy00MTZhLWFjNDAtNmY2YzgyM2JjZWY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAdpEuoxcrUTtzOz5yr2bgC5HKp/5zWW0DnonS
a0e999sSnPRoz20Y0QbRdrSPK4W5SDZYeCLRWxPU/TZrINzBzQm8HkeetgZzKm0Y
f4Tw9vXMXf/o4tcDiYOmIxdRFOH9aozoCxbiAp1NlVd79llMhZTz4dLRDwMXnfL6
LkM2zN1bhkC2Ku9/RlfxKAkMX3piMOMJMOHKgvAbZY6/cHyRrq3gmfhEyjwgBCWk
3lohkZ1pjbO5RRDqJQcYf4DW98ZigwRY8crI0YGU2Bx/tJ8+4VZFulyRv4mMiPUi
sIpLnje9TQtHnlAYjP9W8yuS0leYWnDuoNGCrZjmQ5zbAmYTZg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:26 2025 by rpki-client