Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
File: 366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa (raw, json)
Hash identifier: S96AAOsEbDUe4mGBZdQPxAVGUi9KV2q4pYzDNR2Z+dc=
Subject key identifier: 75:10:A7:6A:42:9A:4A:46:24:0D:AA:91:14:B5:ED:C8:23:DB:B8:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C7F656133CB0C81E7045DAF19DB91DB34B646F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
Signing time: Mon 01 Sep 2025 19:50:54 +0000
ROA not before: Mon 01 Sep 2025 19:50:54 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7f:65:61:33:cb:0c:81:e7:04:5d:af:19:db:91:db:34:b6:46:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:50:54 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=0b96bdf0eba1a9e4c96d93d15fefb32d51d8253bd9cd3a6a518088c180e94eaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:af:78:15:cd:93:70:20:fd:59:62:8a:27:
55:63:3f:25:f1:6c:cd:0e:b2:22:1c:a0:6e:9c:9d:
d3:42:9b:63:ab:7f:86:b7:ae:70:00:67:91:40:8d:
41:67:6a:16:5f:b7:76:9d:80:c4:c3:fd:06:8b:79:
b8:bf:3d:50:c2:75:9b:c3:39:e2:8c:42:d5:de:fc:
54:28:a2:e1:95:52:8c:cb:e9:7e:00:f1:96:a1:a6:
f5:db:de:57:1e:cd:a1:3a:36:f2:27:6b:07:15:82:
8f:d4:9f:70:a1:db:ce:2d:39:8e:31:93:32:a3:a7:
70:4e:e2:ad:be:64:f8:3e:8a:d6:7f:b4:22:16:4f:
49:da:3c:a8:d6:9c:69:02:36:90:52:37:f1:cb:12:
02:8e:89:50:58:da:bd:08:d8:94:43:d7:52:57:03:
38:62:e4:bb:ee:e6:05:a7:b0:10:e5:02:a2:74:84:
1b:7e:12:54:f4:e3:c7:94:79:56:e4:7a:08:02:d2:
19:b7:d4:44:40:5c:b6:b3:91:30:19:72:62:b9:fc:
b1:d9:55:9e:5c:a0:63:32:7d:93:f1:0d:bd:89:8a:
ef:01:59:87:b3:a8:8d:43:9f:51:8f:af:d8:ef:5a:
d6:71:5f:0a:fc:cb:5f:17:d3:22:f4:23:08:1c:c5:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:10:A7:6A:42:9A:4A:46:24:0D:AA:91:14:B5:ED:C8:23:DB:B8:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4040::/48
Signature Algorithm: sha256WithRSAEncryption
c3:eb:fe:03:db:b2:f1:83:71:e0:46:13:cb:46:47:42:ac:c6:
99:ab:dc:29:43:23:10:0f:08:6c:8d:f9:93:c8:07:5e:5e:81:
ff:26:3e:e0:7b:7d:4b:e9:dd:35:7c:6b:cd:f1:42:c5:d6:66:
c4:72:34:89:ea:d2:58:b3:0c:07:52:07:be:3f:f4:de:54:b8:
3e:1d:26:d9:18:29:06:73:2e:9c:20:e0:75:fc:c7:ce:2c:81:
1f:d4:a0:88:f3:50:90:3e:45:57:5b:5a:ed:2e:2f:fa:26:64:
bb:dc:11:07:0a:2a:87:03:a7:74:0c:77:76:39:e3:84:fb:46:
b1:07:23:69:6f:11:86:52:e6:29:70:ed:cf:9f:ca:a5:ac:88:
20:94:f9:07:28:1d:c9:09:4b:a1:c5:1e:4e:38:3f:cc:08:47:
0a:1b:da:a3:c6:1c:34:9f:f7:92:58:df:d7:6d:28:b0:d8:dd:
cf:ff:69:29:cc:6d:08:77:26:15:5b:72:16:46:41:10:33:ef:
9f:7d:d0:1a:1a:af:d1:9f:8a:6f:e9:c0:7d:34:d1:b0:b0:ee:
1d:60:dc:ee:96:89:f0:54:b7:f6:49:74:7e:14:4b:44:2a:45:
ae:b7:2d:cf:b0:df:4d:f4:a2:e8:91:35:91:ec:45:78:01:05:
2c:32:fb:9b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbH9lYTPLDIHnBF2vGduR2zS2RvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTUwNTRaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDBiOTZiZGYwZWJhMWE5ZTRjOTZkOTNkMTVmZWZiMzJkNTFkODI1M2JkOWNk
M2E2YTUxODA4OGMxODBlOTRlYWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANLLr3gVzZNwIP1ZYoonVWM/JfFszQ6yIhygbpyd00KbY6t/hreucABnkUCN
QWdqFl+3dp2AxMP9Bot5uL89UMJ1m8M54oxC1d78VCii4ZVSjMvpfgDxlqGm9dve
Vx7NoTo28idrBxWCj9SfcKHbzi05jjGTMqOncE7irb5k+D6K1n+0IhZPSdo8qNac
aQI2kFI38csSAo6JUFjavQjYlEPXUlcDOGLku+7mBaewEOUConSEG34SVPTjx5R5
VuR6CALSGbfUREBctrORMBlyYrn8sdlVnlygYzJ9k/ENvYmK7wFZh7OojUOfUY+v
2O9a1nFfCvzLXxfTIvQjCBzFJ2kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR1EKdq
QppKRiQNqpEUte3II9u4dzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzY2YzM4MGYtN2YzYy00OTFmLWE3Y2ItYmZmYzYyYWVkMWUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFA
QDANBgkqhkiG9w0BAQsFAAOCAQEAw+v+A9uy8YNx4EYTy0ZHQqzGmavcKUMjEA8I
bI35k8gHXl6B/yY+4Ht9S+ndNXxrzfFCxdZmxHI0ierSWLMMB1IHvj/03lS4Ph0m
2RgpBnMunCDgdfzHziyBH9SgiPNQkD5FV1ta7S4v+iZku9wRBwoqhwOndAx3djnj
hPtGsQcjaW8RhlLmKXDtz5/KpayIIJT5BygdyQlLocUeTjg/zAhHChvao8YcNJ/3
kljf120osNjdz/9pKcxtCHcmFVtyFkZBEDPvn33QGhqv0Z+Kb+nAfTTRsLDuHWDc
7paJ8FS39kl0fhRLRCpFrrctz7DfTfSi6JE1kexFeAEFLDL7mw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:47 2025 by rpki-client