Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
File: 4b43f183-cd0a-4862-a7f0-bf7122100edb.roa (raw, json)
Hash identifier: IbnQghYDJS5DmT2iI7cuTU/z4eOK0vC/ONbLYjicwTI=
Subject key identifier: 78:95:B0:95:A8:AD:D8:10:B9:88:E9:FA:47:98:C9:F8:61:01:55:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48148F1B87BEA644847C95CB5E824569AAB60B31
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
Signing time: Tue 21 Oct 2025 14:20:03 +0000
ROA not before: Tue 21 Oct 2025 14:20:03 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:14:8f:1b:87:be:a6:44:84:7c:95:cb:5e:82:45:69:aa:b6:0b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:20:03 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=4d8cfa7efdf01b47703646c02728fa273ef969eb7ad623731b2a09b08b0345af, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:5b:70:7e:da:95:b3:5c:d5:f8:85:4c:28:
42:57:5a:1a:4c:ac:8e:c4:c7:18:d6:d6:11:26:ad:
c1:9f:a3:34:b0:10:0f:59:99:f2:2d:c3:93:e4:25:
5e:c0:c2:9f:7f:0a:37:14:1f:26:76:72:2b:f9:cc:
51:00:1c:5e:7d:0b:dd:4d:fc:05:15:76:b6:db:ca:
59:4f:14:1c:9b:07:23:54:ba:7d:d6:24:1c:3c:12:
1e:97:f7:23:91:e1:26:e6:15:b9:be:61:fa:45:69:
58:f6:ac:19:5b:0b:12:d5:b7:61:67:5b:f7:95:82:
c8:f6:4b:85:44:7c:99:29:da:cc:c1:82:10:e4:95:
ca:15:fa:a8:fa:60:cf:bd:4d:17:99:a5:cd:10:81:
03:70:a7:32:8e:36:3b:4e:78:be:91:13:da:c9:c0:
3e:6a:66:20:3a:ce:fe:3d:94:72:b7:b5:09:6c:53:
f9:41:08:35:2b:dc:ae:47:2a:54:3d:a6:50:64:01:
58:23:ba:ad:67:bd:e0:29:9e:96:79:36:88:72:0e:
01:39:23:d5:ea:88:bb:1c:32:84:62:92:b3:42:81:
31:5b:75:0c:03:5c:db:34:6c:12:c6:df:c6:7f:d3:
29:9a:ec:45:65:1d:6b:1a:9d:39:e5:ae:bd:92:4e:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:B0:95:A8:AD:D8:10:B9:88:E9:FA:47:98:C9:F8:61:01:55:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:c00::/38
Signature Algorithm: sha256WithRSAEncryption
8c:6b:ed:4e:6b:8c:26:d1:8a:4e:89:d8:d5:0c:51:17:e2:23:
2c:09:1e:37:23:df:5d:69:08:2f:8f:c4:b1:f2:f6:c1:69:8f:
44:fd:80:b9:18:fe:e5:cc:ea:c9:d5:e9:f2:bd:ba:76:d3:82:
a0:5f:50:86:11:08:bf:e3:35:7a:14:e9:cc:d9:84:ea:3a:b3:
7c:f4:a5:58:e5:32:0e:bf:91:13:61:b2:a9:1e:fe:d6:34:f9:
d9:a2:ae:0f:2a:60:74:bc:6c:b4:af:f3:2c:00:ce:dc:aa:2e:
a3:7d:f7:90:f1:f4:f8:1b:85:95:29:30:05:53:78:7c:2d:6f:
4b:fd:66:8a:99:60:32:88:1d:2a:4b:fa:0d:a7:f1:f2:f0:43:
e0:9a:e2:34:d1:35:c8:19:1b:55:6f:6c:70:a6:9f:9f:a2:37:
7b:ae:b5:24:20:22:31:99:14:fe:b7:5c:e3:cc:98:09:51:8d:
50:77:93:08:3a:dc:63:ee:09:83:7c:60:45:d1:52:f5:ea:d7:
7c:b5:2a:f4:7d:a2:71:c0:41:0c:0c:65:c2:68:ed:21:4c:4c:
52:2e:89:b2:7f:fb:ea:99:03:96:fd:92:c1:39:07:7a:41:18:
72:11:81:c0:44:4a:b3:cd:a8:4f:12:75:de:b0:a6:44:40:09:
3d:36:9d:24
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSBSPG4e+pkSEfJXLXoJFaaq2CzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDIwMDNaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkOGNmYTdlZmRmMDFiNDc3MDM2NDZjMDI3MjhmYTI3M2VmOTY5ZWI3YWQ2
MjM3MzFiMmEwOWIwOGIwMzQ1YWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+PW3B+2pWzXNX4hUwoQldaGkysjsTHGNbWESatwZ+jNLAQD1mZ8i3Dk+Ql
XsDCn38KNxQfJnZyK/nMUQAcXn0L3U38BRV2ttvKWU8UHJsHI1S6fdYkHDwSHpf3
I5HhJuYVub5h+kVpWPasGVsLEtW3YWdb95WCyPZLhUR8mSnazMGCEOSVyhX6qPpg
z71NF5mlzRCBA3CnMo42O054vpET2snAPmpmIDrO/j2Ucre1CWxT+UEINSvcrkcq
VD2mUGQBWCO6rWe94Cmelnk2iHIOATkj1eqIuxwyhGKSs0KBMVt1DANc2zRsEsbf
xn/TKZrsRWUdaxqdOeWuvZJOxPECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR4lbCV
qK3YELmI6fpHmMn4YQFVrDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGI0M2YxODMtY2QwYS00ODYyLWE3ZjAtYmY3MTIyMTAwZWRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQM
MA0GCSqGSIb3DQEBCwUAA4IBAQCMa+1Oa4wm0YpOidjVDFEX4iMsCR43I99daQgv
j8Sx8vbBaY9E/YC5GP7lzOrJ1enyvbp204KgX1CGEQi/4zV6FOnM2YTqOrN89KVY
5TIOv5ETYbKpHv7WNPnZoq4PKmB0vGy0r/MsAM7cqi6jffeQ8fT4G4WVKTAFU3h8
LW9L/WaKmWAyiB0qS/oNp/Hy8EPgmuI00TXIGRtVb2xwpp+fojd7rrUkICIxmRT+
t1zjzJgJUY1Qd5MIOtxj7gmDfGBF0VL16td8tSr0faJxwEEMDGXCaO0hTExSLomy
f/vqmQOW/ZLBOQd6QRhyEYHAREqzzahPEnXesKZEQAk9Np0k
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:21 2025 by rpki-client