Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/699ed05f-92ce-48c3-8186-6564a7373323.roa
File: 699ed05f-92ce-48c3-8186-6564a7373323.roa (raw, json)
Hash identifier: U3S6Oy9F8dfL9nViLbbtFF5DtB08/mOJ7drU00OwcZM=
Subject key identifier: 55:9A:39:8A:11:E4:99:AE:EF:6A:54:D9:50:36:CB:E4:52:F6:45:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B002C97CA0F228ADC4390C4AEFD328618BEF3EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/699ed05f-92ce-48c3-8186-6564a7373323.roa
Signing time: Mon 01 Sep 2025 19:40:41 +0000
ROA not before: Mon 01 Sep 2025 19:40:41 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:00:2c:97:ca:0f:22:8a:dc:43:90:c4:ae:fd:32:86:18:be:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:41 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=2e8f662dc3b2406ff2f396842b8b685e001f81d4aa8808147ec12c4da5df0ba9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:e1:47:43:92:e1:6d:9e:b1:c5:7a:8b:cd:
95:e4:de:8e:43:1e:b7:a4:88:6a:5e:89:df:5d:d4:
3b:92:96:20:72:c9:99:05:43:af:2f:71:36:81:19:
e4:74:9d:a0:88:c7:1a:1f:ff:ad:38:58:21:e4:46:
d7:2c:ff:66:bb:41:69:72:44:6d:35:6a:0e:e1:07:
21:f2:df:f4:53:09:ee:d1:72:a4:60:ec:e8:45:7a:
13:e5:c3:67:8b:69:b3:87:82:1f:8d:a6:0c:76:a5:
96:14:3b:33:4c:0e:0a:1b:1a:3b:4f:12:f9:4c:94:
0a:03:e9:5b:31:29:35:15:ef:bb:8a:ff:1d:71:08:
fc:9c:eb:3c:2b:e6:bf:77:0f:d0:08:b3:69:07:ec:
54:ad:77:11:aa:6c:9b:cb:ec:43:27:63:26:f5:1c:
32:71:a8:8a:59:bf:f3:9e:e3:0b:e4:09:c7:31:34:
f9:7c:a7:9f:22:be:71:2d:5e:1c:9b:14:7d:e9:3e:
20:30:d6:5c:aa:59:ed:82:6e:f8:14:0c:1b:73:a2:
b9:4b:6b:c6:fa:05:c5:25:b1:de:56:87:68:5f:c5:
d9:be:fa:57:79:f0:35:5d:09:0d:35:f0:89:36:17:
9e:7f:7c:59:db:b3:25:8e:01:50:65:9e:9f:d9:a5:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:39:8A:11:E4:99:AE:EF:6A:54:D9:50:36:CB:E4:52:F6:45:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/699ed05f-92ce-48c3-8186-6564a7373323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c040::/48
Signature Algorithm: sha256WithRSAEncryption
a2:82:13:d4:72:32:02:3f:70:c5:3a:07:0c:b4:36:68:b6:30:
da:42:31:f2:0e:52:71:80:0f:6e:bc:d3:73:72:b2:76:cf:f6:
26:de:93:17:63:99:51:a9:7e:80:5e:46:c0:d5:cd:2a:c6:4a:
ac:a5:11:21:fe:54:64:23:88:8d:16:ec:03:2b:a2:ab:9e:6d:
c3:1b:6c:32:0b:fd:3f:47:66:9e:d6:87:7b:c0:d3:46:d5:8e:
74:5a:7f:99:9a:59:52:77:5d:30:47:11:92:25:eb:f8:50:1c:
d0:ea:d1:74:d8:5c:c0:c8:5c:60:af:1b:7b:7c:ba:7b:12:6d:
f9:5d:33:59:39:06:97:8e:0c:08:1a:8b:ea:a2:cc:5c:b2:65:
4e:dc:90:6c:69:94:5a:45:d8:69:28:1f:70:c1:aa:7f:11:2d:
d7:55:c0:c6:f7:ec:b8:d6:ee:71:48:c1:4b:f6:88:34:b9:7e:
c4:38:1a:ca:fd:5e:e3:a7:41:a1:9a:70:ca:47:13:54:8b:4d:
4c:aa:38:13:12:eb:6d:10:17:54:5e:8a:e9:12:6c:bc:ad:e0:
6e:fe:7a:ff:26:21:16:81:b6:c7:ad:ba:69:b8:55:da:69:05:
76:3c:8e:50:bc:6a:b2:58:bd:02:bc:a6:f0:1f:22:23:e9:c7:
fc:8a:53:ea
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGwAsl8oPIorcQ5DErv0yhhi+8+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTQwNDFaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDJlOGY2NjJkYzNiMjQwNmZmMmYzOTY4NDJiOGI2ODVlMDAxZjgxZDRhYTg4
MDgxNDdlYzEyYzRkYTVkZjBiYTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ1M4UdDkuFtnrHFeovNleTejkMet6SIal6J313UO5KWIHLJmQVDry9xNoEZ
5HSdoIjHGh//rThYIeRG1yz/ZrtBaXJEbTVqDuEHIfLf9FMJ7tFypGDs6EV6E+XD
Z4tps4eCH42mDHallhQ7M0wOChsaO08S+UyUCgPpWzEpNRXvu4r/HXEI/JzrPCvm
v3cP0AizaQfsVK13Eapsm8vsQydjJvUcMnGoilm/857jC+QJxzE0+XynnyK+cS1e
HJsUfek+IDDWXKpZ7YJu+BQMG3OiuUtrxvoFxSWx3laHaF/F2b76V3nwNV0JDTXw
iTYXnn98WduzJY4BUGWen9ml00kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRVmjmK
EeSZru9qVNlQNsvkUvZFpzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Njk5ZWQwNWYtOTJjZS00OGMzLTgxODYtNjU2NGE3MzczMzIzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DHA
QDANBgkqhkiG9w0BAQsFAAOCAQEAooIT1HIyAj9wxToHDLQ2aLYw2kIx8g5ScYAP
brzTc3Kyds/2Jt6TF2OZUal+gF5GwNXNKsZKrKURIf5UZCOIjRbsAyuiq55twxts
Mgv9P0dmntaHe8DTRtWOdFp/mZpZUnddMEcRkiXr+FAc0OrRdNhcwMhcYK8be3y6
exJt+V0zWTkGl44MCBqL6qLMXLJlTtyQbGmUWkXYaSgfcMGqfxEt11XAxvfsuNbu
cUjBS/aINLl+xDgayv1e46dBoZpwykcTVItNTKo4ExLrbRAXVF6K6RJsvK3gbv56
/yYhFoG2x626abhV2mkFdjyOULxqsli9Arym8B8iI+nH/IpT6g==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:24 2025 by rpki-client