Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File: 5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier: xlVUBLj4LMwEjktZikBVmGP/E0tkNhzXMP/3WJB5NWw=
Subject key identifier: 7A:38:E2:83:E4:E6:BD:0D:59:3F:66:5F:B4:80:CF:DD:6B:37:97:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E01627A2A0374FEFC259F3D153DC4858B227272
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time: Mon 01 Sep 2025 20:41:32 +0000
ROA not before: Mon 01 Sep 2025 20:41:32 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:01:62:7a:2a:03:74:fe:fc:25:9f:3d:15:3d:c4:85:8b:22:72:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:41:32 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=72fa5acb0d4c0f80a5d29303dd938f21685a9561bc58e4af19650b45e5bc40d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:0c:27:e9:ef:b2:07:da:cc:28:e4:06:76:
86:7c:f2:d0:58:53:99:1f:f9:8b:ec:cd:1f:2f:1b:
c5:c9:7c:61:15:db:3f:75:4e:eb:23:7d:1a:d6:72:
8a:51:5c:05:04:45:b2:50:e8:5c:2a:ca:3c:a5:aa:
3c:cd:a2:47:8c:18:36:2a:94:c4:0a:ed:f2:e0:aa:
a1:02:96:a6:65:73:81:8c:4f:02:60:9d:80:8b:ab:
24:2f:ae:2f:bb:e6:dc:1e:9c:80:0a:80:19:63:b5:
34:ef:cc:6e:d2:6d:fa:a3:21:47:81:1d:29:69:f4:
f1:4c:19:4d:ca:b1:f3:c1:ff:52:eb:4a:91:d2:af:
c7:66:02:3c:6d:b1:8e:4f:1d:d5:2d:53:9c:3f:19:
3e:cd:7f:7f:a9:71:83:38:ea:9c:dc:08:ef:b3:a4:
25:bc:fd:97:e1:77:be:24:6d:62:28:61:1f:f0:c2:
41:22:d1:5a:2a:ba:4d:3d:58:98:3b:b3:2a:ce:a4:
0e:da:81:82:53:97:1f:b3:16:15:ba:36:a7:32:d1:
fb:d2:27:c8:1f:c0:10:9c:25:e5:b8:0d:94:cb:cc:
f3:df:a5:f5:3d:c2:fe:48:eb:b2:00:22:41:fe:1b:
97:33:08:ea:0e:95:11:c1:d3:4c:52:d2:41:b9:c9:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:38:E2:83:E4:E6:BD:0D:59:3F:66:5F:B4:80:CF:DD:6B:37:97:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:c000::/40
Signature Algorithm: sha256WithRSAEncryption
12:3d:eb:ca:02:2c:d2:2d:c8:3b:76:5d:ab:f4:c7:10:33:c2:
1f:d1:51:35:36:d5:5e:15:73:fd:86:02:28:2c:3d:f0:d0:15:
a1:00:f9:4b:3e:e0:20:62:7b:83:3d:2a:6a:b4:28:d0:28:94:
5d:6c:d8:55:e4:64:1b:c8:f4:55:0a:65:a5:4c:7a:28:b5:5a:
8e:4f:c2:60:aa:44:77:e0:bc:3b:5a:53:78:07:e1:42:57:09:
6b:b9:f5:e2:08:4c:47:4e:f8:a0:94:23:f0:2a:b7:37:7a:e2:
55:1c:a2:fb:52:1c:8b:41:9c:31:fe:8d:64:ea:c9:62:30:44:
11:a2:fe:fb:bf:8e:0c:df:10:1c:81:90:d5:5f:7d:ff:ae:b7:
5a:31:84:6b:33:17:02:a7:db:ef:e7:ef:eb:a4:06:c2:8b:62:
f8:e4:02:24:51:92:6b:14:8d:6a:bb:12:ce:4e:65:f5:95:1d:
15:64:29:b8:23:d3:cc:76:58:4f:12:a1:c0:86:23:18:dc:4f:
50:21:5f:81:80:fd:f3:f3:cd:41:7b:81:4a:cf:b0:79:ba:97:
5d:d3:72:62:7d:6c:27:d1:32:0d:09:48:8a:11:72:38:5d:0f:
87:6c:ff:93:2f:40:24:ba:08:49:1e:95:ca:13:d5:10:f5:20:
aa:a9:65:2b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbgFieioDdP78JZ89FT3EhYsicnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMDQxMzJaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDcyZmE1YWNiMGQ0YzBmODBhNWQyOTMwM2RkOTM4ZjIxNjg1YTk1NjFiYzU4
ZTRhZjE5NjUwYjQ1ZTViYzQwZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzeDCfp77IH2swo5AZ2hnzy0FhTmR/5i+zNHy8bxcl8YRXbP3VO6yN9GtZy
ilFcBQRFslDoXCrKPKWqPM2iR4wYNiqUxArt8uCqoQKWpmVzgYxPAmCdgIurJC+u
L7vm3B6cgAqAGWO1NO/MbtJt+qMhR4EdKWn08UwZTcqx88H/UutKkdKvx2YCPG2x
jk8d1S1TnD8ZPs1/f6lxgzjqnNwI77OkJbz9l+F3viRtYihhH/DCQSLRWiq6TT1Y
mDuzKs6kDtqBglOXH7MWFbo2pzLR+9InyB/AEJwl5bgNlMvM89+l9T3C/kjrsgAi
Qf4blzMI6g6VEcHTTFLSQbnJl6cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR6OOKD
5Oa9DVk/Zl+0gM/dazeX8jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTc2N2UzNTYtMjMxYi00Yjg3LTk4YWItYzQ5NmRjYzJkNTNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DbA
MA0GCSqGSIb3DQEBCwUAA4IBAQASPevKAizSLcg7dl2r9McQM8If0VE1NtVeFXP9
hgIoLD3w0BWhAPlLPuAgYnuDPSpqtCjQKJRdbNhV5GQbyPRVCmWlTHootVqOT8Jg
qkR34Lw7WlN4B+FCVwlrufXiCExHTviglCPwKrc3euJVHKL7UhyLQZwx/o1k6sli
MEQRov77v44M3xAcgZDVX33/rrdaMYRrMxcCp9vv5+/rpAbCi2L45AIkUZJrFI1q
uxLOTmX1lR0VZCm4I9PMdlhPEqHAhiMY3E9QIV+BgP3z881Be4FKz7B5updd03Ji
fWwn0TINCUiKEXI4XQ+HbP+TL0AkughJHpXKE9UQ9SCqqWUr
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:28 2025 by rpki-client