Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
File: 45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa (raw, json)
Hash identifier: tu42rpHP0QtW/Y1q9XFryQvOsi2IlYie7Ti61+cgHL4=
Subject key identifier: DF:A5:25:FF:16:42:34:FC:62:8B:73:69:BC:46:BD:4B:FA:0D:19:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CC60471D47AF0AA51ADF29AC190FFB8FCB018DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
Signing time: Tue 21 Oct 2025 13:50:06 +0000
ROA not before: Tue 21 Oct 2025 13:50:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c6:04:71:d4:7a:f0:aa:51:ad:f2:9a:c1:90:ff:b8:fc:b0:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:50:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=bc6fc6a108b94656710bdf2c6b516bb6d0cde4cbfa48fc8c333d39479a23035d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:d4:0a:cc:c5:80:f9:9b:d5:aa:3f:58:26:
a0:a4:e3:b3:e6:24:e6:4a:82:aa:f9:f1:c8:42:68:
89:52:01:ca:82:2e:d0:b9:e6:e7:aa:82:fb:61:3d:
e6:0f:03:0d:39:3d:c7:9b:dd:c3:57:2a:6c:46:50:
93:b6:ce:bc:6d:6d:be:10:53:4a:ee:76:84:26:da:
62:f6:9c:30:5c:fb:78:be:84:03:4a:08:6b:2d:48:
fb:aa:10:49:4a:e7:b2:fa:0a:e6:88:a7:f0:9d:d9:
72:6b:38:51:d2:c3:b8:12:cd:24:68:d9:3e:d6:8e:
2f:ad:d4:4a:2b:87:ea:5d:1b:1c:58:41:93:61:2d:
4d:89:8c:27:db:ff:8f:ac:bd:34:dd:9f:1e:92:b9:
1d:7c:67:3c:8e:9a:29:33:fd:10:a1:7d:db:86:85:
ac:8c:7a:58:6c:38:ad:f3:b6:ae:eb:a7:37:ae:eb:
9a:c0:c0:59:30:6e:68:91:00:01:6c:68:18:4c:b0:
ab:6f:57:9e:98:eb:8e:00:05:f7:d6:e9:81:cb:15:
a8:fb:5a:f6:a5:c3:7a:f6:5d:c1:57:91:80:17:3b:
ce:83:05:6c:a0:c7:4b:11:85:d1:20:70:5e:54:74:
f9:cc:c6:41:7c:9e:82:bf:ba:5e:c9:a4:22:76:a2:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:25:FF:16:42:34:FC:62:8B:73:69:BC:46:BD:4B:FA:0D:19:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:e000::/40
Signature Algorithm: sha256WithRSAEncryption
25:07:94:53:e4:55:4a:12:e5:c6:20:df:76:9c:12:5f:77:ed:
3c:4d:c8:2d:0c:d3:6c:10:8d:fb:fb:af:7a:e7:de:b7:e5:b2:
ca:ca:3f:10:2c:0c:f0:8d:07:52:21:00:ba:67:fe:ce:05:cb:
6a:24:56:f0:ea:d8:5d:4e:50:03:68:1a:9a:5d:25:e6:31:a0:
b0:51:2e:10:cf:ca:0d:45:d0:bf:53:1d:e8:b8:e6:9d:8f:85:
58:86:ea:85:92:e0:c9:8f:e5:6a:70:d5:6d:23:9f:62:b4:ed:
f9:9c:2a:a6:b7:6b:af:d2:30:a4:9e:9d:ab:01:8f:42:be:c2:
75:73:97:68:29:8d:af:48:cd:0e:6e:20:29:d9:9f:bb:12:86:
7b:75:a0:eb:fe:14:c7:56:86:5f:1c:bb:24:1c:48:6d:90:2b:
a9:ad:12:cc:e9:17:7a:d2:8e:8d:05:22:c5:48:f0:dc:78:c8:
ec:7e:1b:96:ec:d2:db:c7:1d:77:f1:af:28:e9:cd:f3:b6:3d:
98:57:a3:6f:09:b9:d6:93:6d:bb:6d:98:73:7a:74:db:41:ae:
0c:07:88:e4:59:f8:79:d1:52:09:f5:3e:36:2d:25:e0:15:ef:
0c:cb:87:ca:8a:b2:f1:dc:87:04:ef:38:3b:56:3f:5e:f3:34:
d4:df:49:ce
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHMYEcdR68KpRrfKawZD/uPywGNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzUwMDZaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjNmZjNmExMDhiOTQ2NTY3MTBiZGYyYzZiNTE2YmI2ZDBjZGU0Y2JmYTQ4
ZmM4YzMzM2QzOTQ3OWEyMzAzNWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOB/1ArMxYD5m9WqP1gmoKTjs+Yk5kqCqvnxyEJoiVIByoIu0Lnm56qC+2E9
5g8DDTk9x5vdw1cqbEZQk7bOvG1tvhBTSu52hCbaYvacMFz7eL6EA0oIay1I+6oQ
SUrnsvoK5oin8J3Zcms4UdLDuBLNJGjZPtaOL63USiuH6l0bHFhBk2EtTYmMJ9v/
j6y9NN2fHpK5HXxnPI6aKTP9EKF924aFrIx6WGw4rfO2ruunN67rmsDAWTBuaJEA
AWxoGEywq29XnpjrjgAF99bpgcsVqPta9qXDevZdwVeRgBc7zoMFbKDHSxGF0SBw
XlR0+czGQXyegr+6XsmkInaiYvkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTfpSX/
FkI0/GKLc2m8Rr1L+g0ZQTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDVkMGQ3MDktN2I5Mi00YzQ2LTlkOTUtNjYwNWUyYTNkMzVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HXg
MA0GCSqGSIb3DQEBCwUAA4IBAQAlB5RT5FVKEuXGIN92nBJfd+08TcgtDNNsEI37
+69659635bLKyj8QLAzwjQdSIQC6Z/7OBctqJFbw6thdTlADaBqaXSXmMaCwUS4Q
z8oNRdC/Ux3ouOadj4VYhuqFkuDJj+VqcNVtI59itO35nCqmt2uv0jCknp2rAY9C
vsJ1c5doKY2vSM0ObiAp2Z+7EoZ7daDr/hTHVoZfHLskHEhtkCuprRLM6Rd60o6N
BSLFSPDceMjsfhuW7NLbxx138a8o6c3ztj2YV6NvCbnWk227bZhzenTbQa4MB4jk
Wfh50VIJ9T42LSXgFe8My4fKirLx3IcE7zg7Vj9e8zTU30nO
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:52 2025 by rpki-client