Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
File: 599e0695-4b67-4a37-994a-8c71d61260b3.roa (raw, json)
Hash identifier: VFeQRztP/3Tn+CvfZ7zRfiwrxxZ7PDCpdh1PnzhZ2kc=
Subject key identifier: 2F:8B:20:CC:BC:E8:8C:B0:B4:25:86:31:EC:5C:36:DB:27:28:CE:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F044F0B85F0B96FEAD5BB16ADEEC1B9FEB9DFBE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
Signing time: Mon 01 Sep 2025 20:11:00 +0000
ROA not before: Mon 01 Sep 2025 20:11:00 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:04:4f:0b:85:f0:b9:6f:ea:d5:bb:16:ad:ee:c1:b9:fe:b9:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:11:00 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=63053e7f5896f5fb3aabb5da6314f65c61076bf1877ded800fc685d96422f302, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:24:d1:8d:83:bc:7f:84:34:71:6e:47:e3:
91:86:86:ef:68:25:a2:fb:c3:f7:a2:4d:0e:64:53:
13:71:93:9c:05:ce:b0:8a:2b:2d:1d:3f:13:cc:f2:
80:ed:89:66:a6:ef:ae:5c:19:94:3f:62:73:de:be:
1b:20:1b:31:36:68:9d:bd:ba:ba:80:11:b0:56:b5:
8d:ae:5d:a6:6e:6b:b1:d2:a7:a4:84:d7:79:1f:43:
89:14:b3:67:64:87:71:3d:7d:86:2e:d3:6c:9d:57:
24:5d:b2:27:14:71:ed:4f:47:56:1c:07:0b:8c:b5:
51:a4:8a:2c:ba:a5:a4:1e:46:6b:cc:1b:cc:53:dc:
1f:9e:87:da:f8:69:06:ea:3f:3c:8b:a4:ba:ae:9c:
32:e1:58:4f:f5:71:e5:98:63:ce:58:17:c8:ac:95:
57:31:3f:bc:12:a8:24:5f:3a:10:86:a9:5d:09:ae:
2a:6e:e9:f6:cf:15:7b:89:67:bd:cc:40:2b:f5:47:
a2:59:27:a8:40:37:f0:63:6f:10:6f:db:e8:6a:25:
29:18:3d:0f:f5:68:b8:40:22:1d:33:1e:50:f3:6e:
6a:3b:b3:46:96:27:df:3d:2c:7b:7d:98:59:16:0d:
15:a9:a2:3a:c6:33:a1:bd:83:50:f5:32:7f:5a:ce:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:20:CC:BC:E8:8C:B0:B4:25:86:31:EC:5C:36:DB:27:28:CE:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/599e0695-4b67-4a37-994a-8c71d61260b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
29:28:47:eb:82:89:af:e3:a2:53:dd:d5:7e:20:91:57:27:ec:
33:52:e8:21:f3:e6:78:96:a1:61:d6:43:76:0e:63:a5:6b:3d:
fa:83:ee:14:9f:1f:ca:44:c0:b3:99:60:d6:5f:a7:e8:48:ea:
8f:70:9e:92:67:a3:12:51:5d:f1:d9:f4:24:dd:1d:32:50:d0:
04:2d:01:ec:64:b1:0d:a0:6a:e8:3e:72:4f:ef:e9:e7:8d:54:
a4:66:6c:8b:2a:e8:02:84:c2:c7:91:1d:de:4c:89:e3:46:f1:
90:65:38:e8:c6:20:d3:dd:17:95:13:91:b1:21:2d:d5:e1:27:
65:55:91:5c:87:67:49:0c:26:3b:6b:f2:b6:45:38:84:fa:27:
7e:43:b8:7e:7b:76:d0:64:20:2e:66:d9:f6:4a:72:a1:33:48:
96:46:23:c0:e6:a5:13:04:65:dd:23:a9:48:3d:65:4f:61:6f:
15:00:21:ab:86:56:ba:1d:88:df:5b:16:5e:11:e0:72:8f:72:
d3:ef:aa:51:2c:57:37:c4:bb:3e:b7:24:65:9d:00:69:50:d5:
19:ed:46:1c:af:28:5e:49:cb:15:7b:7f:91:0e:55:18:21:fb:
70:58:3c:f3:a5:69:aa:70:df:61:15:11:34:7c:90:9a:b5:7b:
a8:c3:f7:0e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfwRPC4XwuW/q1bsWre7Buf65374wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMDExMDBaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDYzMDUzZTdmNTg5NmY1ZmIzYWFiYjVkYTYzMTRmNjVjNjEwNzZiZjE4Nzdk
ZWQ4MDBmYzY4NWQ5NjQyMmYzMDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKfHJNGNg7x/hDRxbkfjkYaG72glovvD96JNDmRTE3GTnAXOsIorLR0/E8zy
gO2JZqbvrlwZlD9ic96+GyAbMTZonb26uoARsFa1ja5dpm5rsdKnpITXeR9DiRSz
Z2SHcT19hi7TbJ1XJF2yJxRx7U9HVhwHC4y1UaSKLLqlpB5Ga8wbzFPcH56H2vhp
Buo/PIukuq6cMuFYT/Vx5ZhjzlgXyKyVVzE/vBKoJF86EIapXQmuKm7p9s8Ve4ln
vcxAK/VHolknqEA38GNvEG/b6GolKRg9D/VouEAiHTMeUPNuajuzRpYn3z0se32Y
WRYNFamiOsYzob2DUPUyf1rODtkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQviyDM
vOiMsLQlhjHsXDbbJyjOijAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTk5ZTA2OTUtNGI2Ny00YTM3LTk5NGEtOGM3MWQ2MTI2MGIzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACg
wDANBgkqhkiG9w0BAQsFAAOCAQEAKShH64KJr+OiU93VfiCRVyfsM1LoIfPmeJah
YdZDdg5jpWs9+oPuFJ8fykTAs5lg1l+n6Ejqj3CekmejElFd8dn0JN0dMlDQBC0B
7GSxDaBq6D5yT+/p541UpGZsiyroAoTCx5Ed3kyJ40bxkGU46MYg090XlRORsSEt
1eEnZVWRXIdnSQwmO2vytkU4hPonfkO4fnt20GQgLmbZ9kpyoTNIlkYjwOalEwRl
3SOpSD1lT2FvFQAhq4ZWuh2I31sWXhHgco9y0++qUSxXN8S7PrckZZ0AaVDVGe1G
HK8oXknLFXt/kQ5VGCH7cFg886VpqnDfYRURNHyQmrV7qMP3Dg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:28 2025 by rpki-client