Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/528c97d8-1890-4c86-9eee-907363f046e1.roa
File: 528c97d8-1890-4c86-9eee-907363f046e1.roa (raw, json)
Hash identifier: 30iUoU/MKC6j7aRgXXM1av85LhaKgkXe/IAM8sT90b8=
Subject key identifier: BC:8B:B1:3C:EC:C5:44:B2:B0:C7:FA:4D:94:DA:72:5B:CF:CD:63:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F804F8DB049B19AA04E878142B48A0E166A0D81
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/528c97d8-1890-4c86-9eee-907363f046e1.roa
Signing time: Fri 15 Aug 2025 15:50:54 +0000
ROA not before: Fri 15 Aug 2025 15:50:54 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:80:4f:8d:b0:49:b1:9a:a0:4e:87:81:42:b4:8a:0e:16:6a:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:50:54 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=7137adf180083d400d8ab3f4e61422ec885b0ba3ac6b7e01b84da62181f131fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:67:32:5a:1f:3f:97:e9:aa:bc:3d:9e:74:
e7:a9:37:3d:9c:06:f0:34:da:8e:32:26:23:f7:a8:
6b:d1:0c:d3:8e:fd:37:3b:f3:60:b4:87:1d:54:0a:
16:e2:99:45:24:65:0c:19:e1:4e:a0:9b:d7:90:81:
44:62:f0:84:76:35:de:af:62:c6:80:59:c0:34:8a:
5e:1a:17:59:25:05:3f:e8:5f:56:ac:01:1b:9a:d9:
f3:c9:df:a5:ef:ed:a2:a8:1d:11:37:b1:4c:e3:8a:
35:19:90:f7:6a:e4:ef:91:b0:19:39:fe:86:69:a1:
3e:a5:f9:f3:26:3d:cb:77:96:4a:cb:74:67:87:d6:
f5:2e:b5:b1:8d:cb:9d:b0:6e:e9:5d:f1:78:ce:1c:
6a:1d:b6:37:2b:84:cc:a6:58:b9:67:83:7f:99:d5:
e5:b8:47:c2:e0:bf:cb:4f:49:d0:0d:bf:4d:38:eb:
4d:7b:35:17:5d:03:63:aa:14:52:f2:24:88:ef:f9:
80:11:56:69:71:5e:45:67:9d:54:bc:04:5c:87:41:
a5:4f:32:28:b1:2f:5c:4d:d9:6a:38:11:38:fe:03:
ed:80:9a:cc:b1:99:9a:d3:d5:62:4f:83:6d:ef:4b:
08:dc:f1:e2:b1:ff:39:62:38:85:33:8d:0c:4d:5e:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:B1:3C:EC:C5:44:B2:B0:C7:FA:4D:94:DA:72:5B:CF:CD:63:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/528c97d8-1890-4c86-9eee-907363f046e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:6000::/40
Signature Algorithm: sha256WithRSAEncryption
12:16:44:b0:d7:ac:90:15:44:30:f5:da:68:0d:98:bb:29:c9:
66:b4:12:01:1c:09:e6:8f:88:9c:1a:bb:55:ab:4b:b1:b8:60:
3d:c8:df:81:6a:73:4d:af:6e:51:40:10:a4:36:0d:61:a8:08:
15:4a:1c:5e:06:93:d1:f2:ea:59:53:28:5d:2e:2b:40:8f:9a:
4f:f9:5b:2c:57:7b:a6:0d:e7:db:c9:d8:4f:bc:14:56:f7:40:
1f:25:63:62:a4:b4:ce:6d:9b:c0:56:4f:9e:70:4c:d5:0d:70:
be:bf:a0:c3:ec:8c:a5:b0:9c:1c:d4:f5:d0:ae:7b:97:fe:0b:
2f:74:32:af:5a:45:c8:5a:92:0b:3e:e5:63:08:10:a5:68:e0:
1a:33:cd:65:3e:f0:7b:21:93:e3:83:82:92:dc:a5:64:02:3e:
3b:6d:06:ac:d3:5f:19:b4:28:04:e0:dd:e5:1d:f9:92:45:26:
98:14:48:d9:39:fb:71:11:e8:55:c1:51:f0:94:b4:99:92:50:
67:13:02:f0:9d:d8:5a:37:7a:62:b6:85:be:e6:de:26:fd:6b:
55:bd:b8:a7:76:27:b6:6a:e4:43:cb:fd:15:fe:76:73:ff:75:
44:53:e6:e8:b1:21:be:0e:f4:43:fa:fe:88:03:9f:b4:b9:35:
ff:15:ba:4c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUL4BPjbBJsZqgToeBQrSKDhZqDYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MTUxNTUwNTRaFw0yNTA5MTkyMzU5NTlaMHoxSTBHBgNV
BAUTQDcxMzdhZGYxODAwODNkNDAwZDhhYjNmNGU2MTQyMmVjODg1YjBiYTNhYzZi
N2UwMWI4NGRhNjIxODFmMTMxZmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMelZzJaHz+X6aq8PZ5056k3PZwG8DTajjImI/eoa9EM0479NzvzYLSHHVQK
FuKZRSRlDBnhTqCb15CBRGLwhHY13q9ixoBZwDSKXhoXWSUFP+hfVqwBG5rZ88nf
pe/toqgdETexTOOKNRmQ92rk75GwGTn+hmmhPqX58yY9y3eWSst0Z4fW9S61sY3L
nbBu6V3xeM4cah22NyuEzKZYuWeDf5nV5bhHwuC/y09J0A2/TTjrTXs1F10DY6oU
UvIkiO/5gBFWaXFeRWedVLwEXIdBpU8yKLEvXE3ZajgROP4D7YCazLGZmtPVYk+D
be9LCNzx4rH/OWI4hTONDE1eUzUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS8i7E8
7MVEsrDH+k2U2nJbz81jiDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTI4Yzk3ZDgtMTg5MC00Yzg2LTllZWUtOTA3MzYzZjA0NmUxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HNg
MA0GCSqGSIb3DQEBCwUAA4IBAQASFkSw16yQFUQw9dpoDZi7KclmtBIBHAnmj4ic
GrtVq0uxuGA9yN+BanNNr25RQBCkNg1hqAgVShxeBpPR8upZUyhdLitAj5pP+Vss
V3umDefbydhPvBRW90AfJWNipLTObZvAVk+ecEzVDXC+v6DD7IylsJwc1PXQrnuX
/gsvdDKvWkXIWpILPuVjCBClaOAaM81lPvB7IZPjg4KS3KVkAj47bQas018ZtCgE
4N3lHfmSRSaYFEjZOftxEehVwVHwlLSZklBnEwLwndhaN3pitoW+5t4m/WtVvbin
die2auRDy/0V/nZz/3VEU+bosSG+DvRD+v6IA5+0uTX/FbpM
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:58 2025 by rpki-client