Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
File: 546828d4-9f43-44c2-bff8-aafeddca4e25.roa (raw, json)
Hash identifier: ItZ/Kweu5NPKAFhvsgdiAFEeADBmJlw2PtL6N3oShk4=
Subject key identifier: 97:97:23:3B:55:11:79:C0:31:7A:8E:A2:1F:AE:A1:1B:6C:6B:1B:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CAB9F9A2E4EC5640B6875AF1D00470458F312DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
Signing time: Tue 21 Oct 2025 14:30:53 +0000
ROA not before: Tue 21 Oct 2025 14:30:53 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ab:9f:9a:2e:4e:c5:64:0b:68:75:af:1d:00:47:04:58:f3:12:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:30:53 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=f6156b3d26715ffde7bee2bbac05ab5d07d38187ed9be5d628a3dd5ee6d337ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:33:dd:28:fe:66:76:30:1e:78:c9:c5:99:
65:cc:f9:fa:6c:d9:0c:24:49:4d:dd:1e:a4:d5:be:
5e:11:9c:67:16:18:05:55:45:72:e5:c0:05:54:22:
60:c0:83:5f:8b:88:cb:5a:00:fe:8e:65:27:c2:40:
cf:b7:25:1d:18:c0:33:31:30:c7:aa:59:00:1d:b3:
a8:13:f0:61:57:6e:96:c1:01:a6:58:8b:6c:ed:15:
d4:46:82:5f:e3:93:a8:0b:3f:45:ac:a4:39:da:d2:
b2:db:a1:8b:3e:f6:7d:c3:e3:ea:99:02:12:37:0f:
22:b4:46:09:0e:a7:c7:22:d3:2c:af:48:33:86:50:
21:ff:7d:f3:8a:3e:03:99:70:78:0e:e2:04:02:5e:
4e:69:ca:0e:e9:3f:c2:eb:65:af:9e:a1:96:7b:be:
6c:70:1d:71:41:e8:c7:85:38:89:cf:15:5d:09:e5:
99:b5:5a:bb:2d:65:71:de:8a:cc:49:1b:b9:29:fe:
b7:66:bb:ad:30:2e:e4:36:ca:b1:c6:33:20:bc:d8:
ed:6b:0f:0d:7f:ab:f2:0e:9e:35:8e:8c:00:64:12:
65:cc:90:62:a8:de:d8:7e:48:fb:ad:4c:48:ce:e5:
5c:88:14:8a:d6:e9:89:40:c0:c2:7e:fd:11:77:07:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:23:3B:55:11:79:C0:31:7A:8E:A2:1F:AE:A1:1B:6C:6B:1B:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/546828d4-9f43-44c2-bff8-aafeddca4e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e040::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ff:c3:91:0b:4c:04:0d:0c:4a:23:6b:4d:33:cf:e2:70:7c:
b0:5d:d2:81:95:67:52:51:d6:16:32:9f:b4:c9:ef:a6:ea:a6:
7f:c9:2b:50:cd:f0:51:53:7e:88:13:a2:bd:ce:66:40:38:b8:
dc:e7:e6:5a:a3:b9:cd:ef:c3:b6:20:cf:d5:f0:4d:c2:ee:4f:
ea:a6:32:f8:31:c0:ea:c3:56:83:f5:6e:23:46:80:38:51:b9:
a4:ab:18:d0:1c:42:f8:09:73:17:22:fe:37:df:7f:35:9a:76:
85:33:bf:5e:d1:90:4c:7d:9a:f4:d3:6d:b6:79:cd:3e:07:f4:
b8:8c:5c:8c:c8:9d:5c:a2:41:97:3e:84:8b:11:ef:ab:37:97:
ff:1d:3c:a1:93:0b:47:1a:62:b5:5e:0d:f7:34:ed:c7:73:e2:
89:0c:05:f1:e1:98:0d:ff:5c:34:fa:35:7d:b4:75:1b:3a:9c:
2d:1e:db:d2:92:9f:c7:73:7d:62:12:86:0f:fb:94:07:4f:a9:
f6:1b:af:d8:e0:06:d8:e7:69:a9:14:8a:b4:b2:8a:88:bb:3c:
77:7a:f4:ff:3e:18:91:dd:a4:89:2e:68:c8:a8:cb:d2:36:80:
2c:8c:c3:1d:7d:7e:2c:3a:ce:d7:2e:95:e0:91:78:ba:35:ef:
33:07:8b:61
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbKufmi5OxWQLaHWvHQBHBFjzEt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDMwNTNaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGY2MTU2YjNkMjY3MTVmZmRlN2JlZTJiYmFjMDVhYjVkMDdkMzgxODdlZDli
ZTVkNjI4YTNkZDVlZTZkMzM3ZWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK97M90o/mZ2MB54ycWZZcz5+mzZDCRJTd0epNW+XhGcZxYYBVVFcuXABVQi
YMCDX4uIy1oA/o5lJ8JAz7clHRjAMzEwx6pZAB2zqBPwYVdulsEBpliLbO0V1EaC
X+OTqAs/RaykOdrSstuhiz72fcPj6pkCEjcPIrRGCQ6nxyLTLK9IM4ZQIf9984o+
A5lweA7iBAJeTmnKDuk/wutlr56hlnu+bHAdcUHox4U4ic8VXQnlmbVauy1lcd6K
zEkbuSn+t2a7rTAu5DbKscYzILzY7WsPDX+r8g6eNY6MAGQSZcyQYqje2H5I+61M
SM7lXIgUitbpiUDAwn79EXcH3tsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSXlyM7
VRF5wDF6jqIfrqEbbGsb4TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQ2ODI4ZDQtOWY0My00NGMyLWJmZjgtYWFmZWRkY2E0ZTI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ADg
QDANBgkqhkiG9w0BAQsFAAOCAQEAf//DkQtMBA0MSiNrTTPP4nB8sF3SgZVnUlHW
FjKftMnvpuqmf8krUM3wUVN+iBOivc5mQDi43OfmWqO5ze/DtiDP1fBNwu5P6qYy
+DHA6sNWg/VuI0aAOFG5pKsY0BxC+AlzFyL+N99/NZp2hTO/XtGQTH2a9NNttnnN
Pgf0uIxcjMidXKJBlz6EixHvqzeX/x08oZMLRxpitV4N9zTtx3PiiQwF8eGYDf9c
NPo1fbR1GzqcLR7b0pKfx3N9YhKGD/uUB0+p9huv2OAG2OdpqRSKtLKKiLs8d3r0
/z4Ykd2kiS5oyKjL0jaALIzDHX1+LDrO1y6V4JF4ujXvMweLYQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:36 2025 by rpki-client