Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
File: 4b43f183-cd0a-4862-a7f0-bf7122100edb.roa (raw, json)
Hash identifier: h2QyQk2HGVG5qvRjWpaxdHaWsGCzfg/s+S5RdXW26bg=
Subject key identifier: E2:88:79:31:CF:28:77:41:3D:A1:2E:55:9E:FA:5A:BC:83:6B:B5:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F0BF617915A5D265CE7602F16F5B25638F07306
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
Signing time: Mon 01 Sep 2025 21:11:11 +0000
ROA not before: Mon 01 Sep 2025 21:11:11 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0b:f6:17:91:5a:5d:26:5c:e7:60:2f:16:f5:b2:56:38:f0:73:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:11:11 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=a1101106b88744132b47fc377f7329aa762ab87d9a5318cd85f4ac1bc873bfeb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:8b:61:a2:99:a1:1c:02:d6:3d:1a:2e:fd:
6e:d7:07:e7:f3:14:b6:73:a2:54:87:7b:a5:73:7a:
d4:8a:7f:f4:71:44:71:87:0e:c4:f1:2a:49:5a:e8:
6a:ee:2a:22:62:d8:ce:c7:b1:45:14:36:a7:e7:b5:
ba:69:ca:ab:bb:5a:70:73:d8:72:83:bb:05:1f:14:
03:1e:e1:7d:b2:74:fc:94:3c:ad:d5:1f:77:3e:7a:
41:d1:7f:fd:8d:e4:e9:22:7d:90:08:f8:5c:51:35:
96:f1:be:c4:da:2b:b5:6e:36:bc:09:86:2f:d1:34:
54:f6:0f:29:88:e4:b3:aa:c9:84:92:e1:d6:30:03:
65:82:02:ed:8c:5a:e1:51:a4:ef:27:45:41:17:24:
8c:c2:ab:9a:63:f2:05:e1:68:6b:7f:01:a7:97:61:
00:da:e3:06:1c:83:63:ba:97:a8:f2:cc:29:1d:d2:
29:15:8d:67:75:8c:2a:d1:1b:4a:23:b0:57:8e:f7:
83:20:27:95:45:da:04:87:fe:8d:00:16:d6:6d:7e:
a6:e3:a6:41:a7:60:75:30:d0:5e:30:d9:04:43:e8:
d6:62:dc:b7:fa:3e:3a:4f:1e:ba:b2:17:c8:f7:16:
31:92:ba:c8:e2:f2:45:95:95:4e:e8:42:fa:9e:f2:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:79:31:CF:28:77:41:3D:A1:2E:55:9E:FA:5A:BC:83:6B:B5:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:c00::/38
Signature Algorithm: sha256WithRSAEncryption
93:15:20:42:77:50:08:9b:94:c1:58:02:1b:18:e5:0d:f4:74:
b0:2a:07:2a:ec:c4:76:63:6b:47:14:0f:04:40:f1:7d:2a:9f:
8b:e5:98:fb:15:56:5f:d3:24:fa:05:4d:c0:eb:5b:cb:41:96:
7b:89:86:bc:16:05:65:e5:49:3c:0a:f4:37:ef:51:2f:3d:be:
f1:5c:50:19:05:84:da:c3:d5:9c:b3:5a:26:b8:eb:0d:86:f9:
8a:8c:78:88:14:84:67:70:5b:b6:95:57:77:fb:d1:a7:77:77:
48:6a:b4:0d:50:f7:1f:bd:d6:da:37:2d:c0:ba:b9:3d:56:51:
3a:8d:26:14:9a:45:28:52:74:b5:39:3b:16:4e:17:49:ff:aa:
0d:30:56:af:16:ee:60:04:98:62:56:75:a0:f9:bb:80:9f:a8:
e1:16:ed:a9:8d:cf:02:65:6f:6a:36:1a:70:e0:94:6b:66:0e:
e6:0a:4d:bb:7c:89:62:49:6a:eb:8a:cb:64:4d:51:0d:e0:ce:
52:3f:ec:bb:0f:29:ec:75:0e:17:ae:23:c5:ee:d8:3d:22:48:
01:e0:15:e0:bc:58:60:c1:77:7d:83:c4:57:07:c1:55:a1:1b:
04:2f:7d:3a:bf:5a:16:3f:ac:2b:5c:86:ad:2f:aa:ba:52:6b:
02:0e:c6:e7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXwv2F5FaXSZc52AvFvWyVjjwcwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMTExMTFaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGExMTAxMTA2Yjg4NzQ0MTMyYjQ3ZmMzNzdmNzMyOWFhNzYyYWI4N2Q5YTUz
MThjZDg1ZjRhYzFiYzg3M2JmZWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKPei2GimaEcAtY9Gi79btcH5/MUtnOiVId7pXN61Ip/9HFEcYcOxPEqSVro
au4qImLYzsexRRQ2p+e1umnKq7tacHPYcoO7BR8UAx7hfbJ0/JQ8rdUfdz56QdF/
/Y3k6SJ9kAj4XFE1lvG+xNortW42vAmGL9E0VPYPKYjks6rJhJLh1jADZYIC7Yxa
4VGk7ydFQRckjMKrmmPyBeFoa38Bp5dhANrjBhyDY7qXqPLMKR3SKRWNZ3WMKtEb
SiOwV473gyAnlUXaBIf+jQAW1m1+puOmQadgdTDQXjDZBEPo1mLct/o+Ok8eurIX
yPcWMZK6yOLyRZWVTuhC+p7ybOMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTiiHkx
zyh3QT2hLlWe+lq8g2u1lzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGI0M2YxODMtY2QwYS00ODYyLWE3ZjAtYmY3MTIyMTAwZWRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BQM
MA0GCSqGSIb3DQEBCwUAA4IBAQCTFSBCd1AIm5TBWAIbGOUN9HSwKgcq7MR2Y2tH
FA8EQPF9Kp+L5Zj7FVZf0yT6BU3A61vLQZZ7iYa8FgVl5Uk8CvQ371EvPb7xXFAZ
BYTaw9Wcs1omuOsNhvmKjHiIFIRncFu2lVd3+9Gnd3dIarQNUPcfvdbaNy3Aurk9
VlE6jSYUmkUoUnS1OTsWThdJ/6oNMFavFu5gBJhiVnWg+buAn6jhFu2pjc8CZW9q
Nhpw4JRrZg7mCk27fIliSWrristkTVEN4M5SP+y7DynsdQ4XriPF7tg9IkgB4BXg
vFhgwXd9g8RXB8FVoRsEL306v1oWP6wrXIatL6q6UmsCDsbn
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:35 2025 by rpki-client