Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
File: 62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa (raw, json)
Hash identifier: qzM+gx0XiZHvV8qKiFwv51nmyZMukOj8r5lJR6+7SWI=
Subject key identifier: B6:EF:ED:7A:72:A9:DB:48:2C:F6:54:52:14:0B:39:8B:EE:7E:30:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09AD54B6D1B56CA231406C7E4329DE1EEDD2CEA6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
Signing time: Tue 21 Oct 2025 13:50:59 +0000
ROA not before: Tue 21 Oct 2025 13:50:59 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ad:54:b6:d1:b5:6c:a2:31:40:6c:7e:43:29:de:1e:ed:d2:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:50:59 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c67467b3b159d25ee03a1a454b884942d61771735791bba23e658dc080ea1f7c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:47:ce:0c:2b:ee:ec:62:8f:8d:c7:7f:67:
ac:ff:d4:31:b0:e8:5b:eb:48:61:e8:21:49:a1:9b:
d7:1b:90:40:be:ee:1e:73:4f:9e:ca:b0:36:72:9d:
c0:ca:d3:c5:96:cb:2e:c7:b2:98:75:16:7b:1f:b7:
13:5e:42:f0:7e:ed:a1:be:2f:e3:06:53:43:74:12:
e6:89:ce:27:f7:b4:7f:bb:be:88:cb:63:04:5d:cc:
5c:9e:5a:2e:24:f8:c2:e4:b0:92:53:c5:bd:df:47:
cf:a5:ee:f5:3e:a5:38:14:bb:31:e8:ea:64:97:8a:
c4:dd:46:c7:2e:83:0b:c9:e6:2a:20:15:64:a6:fc:
be:4a:06:99:99:f3:85:6b:49:9e:0b:a7:fa:4a:5e:
23:ef:46:49:fb:ca:85:b9:ad:e3:bb:cf:48:79:17:
65:a9:f6:5e:d2:50:1d:17:7b:0c:80:71:71:a1:da:
82:3c:cf:7e:49:7e:46:05:82:d6:b1:7a:fa:53:56:
27:ce:c0:8a:2e:9b:c8:fe:e2:53:6e:28:aa:95:8c:
c5:3f:16:a3:1d:c5:f4:5d:05:3a:6b:a0:2e:03:7f:
4a:f9:8e:f7:49:bc:c6:ba:32:91:84:cc:97:6f:02:
6f:c0:19:dd:87:6e:3d:00:ff:5c:4d:b9:54:83:d1:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:ED:7A:72:A9:DB:48:2C:F6:54:52:14:0B:39:8B:EE:7E:30:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1080::/48
Signature Algorithm: sha256WithRSAEncryption
88:37:b3:44:7e:cd:74:96:87:c2:89:30:02:d3:25:a4:ba:c6:
12:2b:13:28:1f:8a:d9:ec:5c:7e:e6:e1:c9:c9:a2:3d:86:e0:
12:4a:e4:f3:a1:1d:7d:5f:38:f5:a2:fc:7e:9c:cf:28:fd:be:
0c:50:de:a1:91:26:1b:5a:b7:17:8a:1f:01:5b:83:e0:02:8f:
df:e2:18:21:f8:3a:29:af:d8:5f:61:74:ee:80:75:da:b4:2e:
3c:e4:4b:dc:c3:62:07:6e:af:4b:99:ac:70:61:7d:a8:ef:6b:
d7:77:d5:99:08:e6:ef:8d:71:b6:32:26:ca:40:19:d7:1d:c6:
79:7a:fe:d4:60:5a:a0:f6:98:5e:a3:e7:7b:16:b5:e7:97:e9:
b9:e3:a9:05:8d:4c:90:9b:12:94:2b:c5:7c:63:bd:96:61:2e:
1b:53:c6:ea:58:96:c6:13:aa:22:68:e1:5d:8d:dd:b2:4d:0b:
d5:09:3d:5e:89:3f:c5:c6:85:54:cb:61:7b:81:03:fb:b6:a5:
de:11:cb:de:38:09:b0:ed:8f:80:f8:c4:0b:a6:8d:37:d8:0e:
95:26:58:30:47:40:e6:4d:8d:d0:f7:6b:c0:ee:b9:c8:e2:7e:
51:06:80:c6:23:d7:ed:9d:62:b4:5d:5e:29:87:3a:93:11:ca:
e7:6d:f8:ad
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCa1UttG1bKIxQGx+QyneHu3SzqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzUwNTlaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGM2NzQ2N2IzYjE1OWQyNWVlMDNhMWE0NTRiODg0OTQyZDYxNzcxNzM1Nzkx
YmJhMjNlNjU4ZGMwODBlYTFmN2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXSR84MK+7sYo+Nx39nrP/UMbDoW+tIYeghSaGb1xuQQL7uHnNPnsqwNnKd
wMrTxZbLLseymHUWex+3E15C8H7tob4v4wZTQ3QS5onOJ/e0f7u+iMtjBF3MXJ5a
LiT4wuSwklPFvd9Hz6Xu9T6lOBS7MejqZJeKxN1Gxy6DC8nmKiAVZKb8vkoGmZnz
hWtJngun+kpeI+9GSfvKhbmt47vPSHkXZan2XtJQHRd7DIBxcaHagjzPfkl+RgWC
1rF6+lNWJ87Aii6byP7iU24oqpWMxT8Wox3F9F0FOmugLgN/SvmO90m8xroykYTM
l28Cb8AZ3YduPQD/XE25VIPRr1cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS27+16
cqnbSCz2VFIUCzmL7n4wHjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjJmZjRlNWUtOWU2NS00NGZjLWFmN2YtNGU0NDkzNWNlYjQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAiDezRH7NdJaHwokwAtMlpLrGEisTKB+K2exc
fubhycmiPYbgEkrk86EdfV849aL8fpzPKP2+DFDeoZEmG1q3F4ofAVuD4AKP3+IY
Ifg6Ka/YX2F07oB12rQuPORL3MNiB26vS5mscGF9qO9r13fVmQjm741xtjImykAZ
1x3GeXr+1GBaoPaYXqPnexa155fpueOpBY1MkJsSlCvFfGO9lmEuG1PG6liWxhOq
ImjhXY3dsk0L1Qk9Xok/xcaFVMthe4ED+7al3hHL3jgJsO2PgPjEC6aNN9gOlSZY
MEdA5k2N0PdrwO65yOJ+UQaAxiPX7Z1itF1eKYc6kxHK5234rQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:17 2025 by rpki-client