Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
File: 4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa (raw, json)
Hash identifier: E7gudXqNJgA+CGWZ7DWAvTvenmAvez3jIsnY8GbbW2o=
Subject key identifier: 24:2B:90:23:FE:FF:09:D8:2C:3C:2F:5B:DA:23:3D:D7:82:F9:96:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F6DE930B7D3E79317D7689919FC3396CDC983DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
Signing time: Mon 01 Sep 2025 19:51:39 +0000
ROA not before: Mon 01 Sep 2025 19:51:39 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6d:e9:30:b7:d3:e7:93:17:d7:68:99:19:fc:33:96:cd:c9:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:51:39 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=d6de53859b9ec4b79901c02704e6512292076490cbc2a7733265846bc2909cac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:e5:0c:90:86:48:75:3d:b9:1d:05:da:33:
e4:9b:11:87:35:f4:bf:5f:48:33:54:d8:ec:33:58:
ef:10:f0:dd:65:64:bf:c0:61:bc:4f:1d:8b:3a:31:
5d:f8:e7:7d:dd:9f:d3:6c:37:c1:6c:20:f1:de:e5:
f3:70:b7:b2:55:7c:78:5b:41:3c:8b:51:0a:47:ca:
9f:33:6a:39:61:4b:60:71:ba:d3:c2:4b:49:ae:6d:
4b:63:53:8e:34:e5:c4:6e:ad:f4:e2:d2:c9:78:fb:
6b:8a:98:17:37:ae:e3:89:32:8e:60:6c:fc:bf:50:
95:bd:f3:a4:51:9b:92:bc:48:6c:f0:6b:36:f9:7e:
0c:ec:ae:e2:23:bb:f5:bb:45:db:30:04:60:f5:be:
68:c6:6f:e4:a6:3c:66:06:d2:d4:e2:b5:a0:86:a2:
d7:cc:09:ca:48:0b:f0:61:28:f3:6a:ff:71:6b:62:
b3:17:7e:2c:c2:9c:ab:03:c5:ce:83:39:97:5e:33:
9b:87:f1:f1:49:29:d2:84:64:77:f4:64:f4:93:b1:
0b:0d:d1:de:68:8c:a7:03:79:d9:04:a0:85:32:28:
ca:c0:be:fa:43:11:e4:c2:37:ed:a8:4a:17:7e:56:
85:59:af:34:68:0c:3c:e8:0a:fc:86:9c:c6:5f:56:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:90:23:FE:FF:09:D8:2C:3C:2F:5B:DA:23:3D:D7:82:F9:96:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:48:41:a0:0c:35:82:2d:71:98:d6:51:43:52:0b:90:90:fd:
26:7b:dd:f4:6e:bd:ff:0a:d5:36:a0:3c:b7:51:67:04:3f:06:
c5:01:71:8a:68:c0:e0:96:6f:85:76:28:bd:de:84:d4:60:3d:
53:83:f5:ca:78:2f:64:aa:c5:76:ce:f5:5c:34:e6:79:b2:b4:
d0:d8:13:46:fc:a1:2e:73:c1:dc:90:97:ec:5f:20:de:3b:4f:
2a:7c:0d:c1:68:7b:02:8d:c3:98:1e:00:dc:47:a4:3f:b0:4e:
56:a0:83:9e:e4:52:5b:c9:b9:c5:1b:57:e9:39:1d:8f:79:14:
5a:83:2c:85:9c:97:2b:2f:bd:d9:57:90:d6:2f:9d:a7:59:bc:
c5:ca:5a:cf:bb:04:ac:b3:ee:dc:dd:c2:31:dc:f8:de:93:c1:
13:f0:12:1e:0d:02:93:23:09:47:c7:c1:14:00:a6:af:c2:e0:
ae:6b:4b:a4:cf:0d:9e:33:3c:a2:7d:70:b4:8a:14:ca:5d:22:
eb:dd:c4:b7:7c:11:cd:34:b1:bd:44:40:99:70:4f:63:42:93:
65:e7:12:fc:79:cb:04:7e:0b:70:59:b4:c2:42:bc:c7:0a:24:
b2:cf:a0:99:f2:08:e4:6e:e9:71:5e:1e:f5:70:df:f5:e7:ef:
37:ee:99:c7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUT23pMLfT55MX12iZGfwzls3Jg94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTUxMzlaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ2ZGU1Mzg1OWI5ZWM0Yjc5OTAxYzAyNzA0ZTY1MTIyOTIwNzY0OTBjYmMy
YTc3MzMyNjU4NDZiYzI5MDljYWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvX5QyQhkh1PbkdBdoz5JsRhzX0v19IM1TY7DNY7xDw3WVkv8BhvE8dizox
Xfjnfd2f02w3wWwg8d7l83C3slV8eFtBPItRCkfKnzNqOWFLYHG608JLSa5tS2NT
jjTlxG6t9OLSyXj7a4qYFzeu44kyjmBs/L9Qlb3zpFGbkrxIbPBrNvl+DOyu4iO7
9btF2zAEYPW+aMZv5KY8ZgbS1OK1oIai18wJykgL8GEo82r/cWtisxd+LMKcqwPF
zoM5l14zm4fx8Ukp0oRkd/Rk9JOxCw3R3miMpwN52QSghTIoysC++kMR5MI37ahK
F35WhVmvNGgMPOgK/Iacxl9WexUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQkK5Aj
/v8J2Cw8L1vaIz3XgvmWgjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGM1NzgzZWUtZGRlYS00Y2FlLWI2ZjQtM2QyNmQzMjhiMzZjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGg
wDANBgkqhkiG9w0BAQsFAAOCAQEAG0hBoAw1gi1xmNZRQ1ILkJD9Jnvd9G69/wrV
NqA8t1FnBD8GxQFximjA4JZvhXYovd6E1GA9U4P1yngvZKrFds71XDTmebK00NgT
RvyhLnPB3JCX7F8g3jtPKnwNwWh7Ao3DmB4A3EekP7BOVqCDnuRSW8m5xRtX6Tkd
j3kUWoMshZyXKy+92VeQ1i+dp1m8xcpaz7sErLPu3N3CMdz43pPBE/ASHg0CkyMJ
R8fBFACmr8LgrmtLpM8NnjM8on1wtIoUyl0i693Et3wRzTSxvURAmXBPY0KTZecS
/HnLBH4LcFm0wkK8xwokss+gmfII5G7pcV4e9XDf9efvN+6Zxw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:49 2025 by rpki-client