Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
File: 375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa (raw, json)
Hash identifier: iMFMJlGA7XWQqQmTy0jzseySGv1DK60t3IZ4kw2B9f4=
Subject key identifier: 6B:A5:BE:B3:CF:B4:3D:38:D9:7B:94:13:02:AB:37:3D:F6:23:49:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2FB990394C2ACF9DA22C020B17B902F0FAC170F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
Signing time: Tue 21 Oct 2025 13:40:05 +0000
ROA not before: Tue 21 Oct 2025 13:40:05 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b9:90:39:4c:2a:cf:9d:a2:2c:02:0b:17:b9:02:f0:fa:c1:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:40:05 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a3f00dc4134e6f5cf7c5f4cda918261cf9c8c002fe5c2d93f39bcdd1654ca062, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:6b:02:62:be:49:1a:db:ae:da:ce:26:13:
3e:74:54:b0:82:01:ce:e1:b7:fc:1b:d9:4a:32:8c:
a9:ff:4a:da:68:94:a4:5e:e9:54:c3:ad:f6:da:15:
ad:38:f8:13:1d:ec:74:f8:77:35:0a:e8:6b:c2:6f:
99:03:25:9e:c0:6f:87:1f:2a:bb:2d:71:a9:ca:cd:
ff:96:57:2a:b0:7a:1b:ae:bb:a1:c0:0c:ca:27:f4:
98:e5:b3:25:8f:07:ef:76:e0:94:85:67:d1:b5:4e:
4b:ec:f7:17:ea:cd:3a:c4:9c:fe:dc:db:bb:d5:0e:
bb:3f:6f:3a:2f:38:05:a4:2f:23:61:a4:f0:06:74:
11:4d:8e:d8:cb:99:e6:45:c0:d0:a1:7e:b4:d4:e7:
00:05:32:7d:5f:cd:b0:11:26:ce:bc:56:f7:df:7f:
63:71:7f:49:c4:3e:30:8f:07:db:d1:21:7a:18:20:
43:6b:55:b2:19:ce:04:7f:1f:0e:27:6c:fa:55:bd:
80:d1:47:47:0e:e1:31:a3:df:25:7e:fc:3f:86:1f:
74:8b:63:3a:a2:c3:2e:2a:b1:68:36:c5:29:9b:88:
f0:f8:54:7b:7a:51:7e:64:46:de:e5:2a:3b:4a:4e:
11:91:54:af:9a:4e:f7:27:36:4b:21:dd:19:a6:80:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A5:BE:B3:CF:B4:3D:38:D9:7B:94:13:02:AB:37:3D:F6:23:49:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
04:68:22:97:0f:8b:b4:c4:fb:b3:0d:6a:86:e4:b7:b4:f4:21:
9f:e5:4d:eb:a1:19:87:cd:df:3b:da:09:31:2b:fb:d6:e9:08:
28:f2:c1:d4:bd:a0:25:36:66:53:da:51:0c:99:7b:92:95:cb:
1e:e5:7c:54:af:2f:a9:37:a3:c1:e4:2d:bf:b2:05:83:90:d0:
f5:bd:f9:d4:37:7e:53:bf:a9:16:32:dc:85:c2:99:04:db:f1:
d0:38:3b:a1:63:7a:27:1f:cd:94:60:07:51:28:c6:3d:3c:bc:
61:19:53:ab:0c:3e:22:59:bf:22:5d:8d:9d:a2:48:19:7e:f8:
78:c5:ad:6a:0b:08:78:0e:5d:05:98:02:57:d4:3a:42:75:e1:
02:7d:23:f1:f0:f9:21:31:b6:b2:c6:bf:7f:17:ca:7e:4a:01:
b2:7b:91:6e:cc:7d:77:4b:eb:fc:7c:3a:86:66:92:f0:f2:22:
55:6d:a3:47:65:7d:6e:2d:7f:77:fd:cc:ea:2b:5f:1f:d1:2e:
de:fd:2a:70:80:e9:e6:38:5a:b0:cc:55:aa:be:7c:e4:a4:ff:
5a:bc:fe:90:13:c5:9e:fe:67:0b:ae:fd:82:7c:cf:b1:3e:80:
6e:3f:06:22:57:02:33:d4:4b:f4:2e:42:3e:3e:b7:b3:1f:22:
a0:6c:51:1f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUL7mQOUwqz52iLAILF7kC8PrBcPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzQwMDVaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGEzZjAwZGM0MTM0ZTZmNWNmN2M1ZjRjZGE5MTgyNjFjZjljOGMwMDJmZTVj
MmQ5M2YzOWJjZGQxNjU0Y2EwNjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKb3awJivkka267aziYTPnRUsIIBzuG3/BvZSjKMqf9K2miUpF7pVMOt9toV
rTj4Ex3sdPh3NQroa8JvmQMlnsBvhx8quy1xqcrN/5ZXKrB6G667ocAMyif0mOWz
JY8H73bglIVn0bVOS+z3F+rNOsSc/tzbu9UOuz9vOi84BaQvI2Gk8AZ0EU2O2MuZ
5kXA0KF+tNTnAAUyfV/NsBEmzrxW999/Y3F/ScQ+MI8H29EhehggQ2tVshnOBH8f
Dids+lW9gNFHRw7hMaPfJX78P4YfdItjOqLDLiqxaDbFKZuI8PhUe3pRfmRG3uUq
O0pOEZFUr5pO9yc2SyHdGaaAHMkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRrpb6z
z7Q9ONl7lBMCqzc99iNJJTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Mzc1YjJhMzEtMmJmNS00OWFlLTg3M2YtNjExY2IzZWZkNmU1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dog
MA0GCSqGSIb3DQEBCwUAA4IBAQAEaCKXD4u0xPuzDWqG5Le09CGf5U3roRmHzd87
2gkxK/vW6Qgo8sHUvaAlNmZT2lEMmXuSlcse5XxUry+pN6PB5C2/sgWDkND1vfnU
N35Tv6kWMtyFwpkE2/HQODuhY3onH82UYAdRKMY9PLxhGVOrDD4iWb8iXY2dokgZ
fvh4xa1qCwh4Dl0FmAJX1DpCdeECfSPx8PkhMbayxr9/F8p+SgGye5FuzH13S+v8
fDqGZpLw8iJVbaNHZX1uLX93/czqK18f0S7e/SpwgOnmOFqwzFWqvnzkpP9avP6Q
E8We/mcLrv2CfM+xPoBuPwYiVwIz1Ev0LkI+PrezHyKgbFEf
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:39 2025 by rpki-client