Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
File: 6bd3f603-c189-489c-bdf5-631b47b2cd39.roa (raw, json)
Hash identifier: TbrJ1sORWEbYG5wBdbKKpzU/eUZAFqn4R/rT2r2m+Vg=
Subject key identifier: EE:14:26:E6:04:A5:22:9F:55:17:E9:B1:CD:93:CA:E1:F6:D4:9D:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47A03BBB3EDF0342F59845F133CFD65B27B733A2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
Signing time: Mon 01 Sep 2025 19:30:14 +0000
ROA not before: Mon 01 Sep 2025 19:30:14 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a0:3b:bb:3e:df:03:42:f5:98:45:f1:33:cf:d6:5b:27:b7:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:30:14 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=45c0ee2e5dfac54d353a7a1fbdb375ffbe9a067358cd81c3e8c956836a32fcba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:9c:1e:3c:77:74:e1:eb:ff:45:db:c4:5d:
e5:4a:9e:37:38:74:6d:b8:96:73:3e:2a:0f:36:5c:
d7:5a:ae:17:ee:03:63:74:a6:b8:de:3b:88:33:95:
ce:c6:84:6d:ed:a0:b4:9b:03:e2:04:a1:36:98:76:
10:b3:df:ab:b2:23:a7:33:65:20:a1:b0:e6:b9:2b:
32:fa:41:79:25:35:09:57:ea:2a:84:e0:da:77:15:
b0:74:77:d6:6e:4a:1a:c1:dc:61:41:c7:5f:8d:2f:
4c:6f:2e:bf:b0:15:52:29:14:07:3d:32:5e:87:aa:
f6:3a:3f:0b:94:c6:68:60:3d:d5:4c:20:df:e4:2d:
4c:c9:bd:d6:9c:da:94:01:9e:1d:0a:98:b5:31:81:
30:3f:f9:5d:ec:9d:97:3b:aa:2f:30:e4:98:8e:94:
f5:eb:9f:50:49:94:ce:f5:eb:26:3b:46:a2:6c:40:
8e:49:55:b5:51:a3:11:4a:51:3e:0a:e2:d4:25:ac:
15:c8:7c:89:ba:49:b4:15:de:0a:bd:de:e6:07:2e:
bf:c9:6f:b3:d6:d5:20:e4:80:0d:fc:27:83:01:7d:
57:1c:a5:26:f6:d9:41:d6:7b:43:10:69:77:cb:f8:
db:ac:bf:79:71:09:77:d2:33:f6:2b:22:3a:31:f8:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:26:E6:04:A5:22:9F:55:17:E9:B1:CD:93:CA:E1:F6:D4:9D:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bd3f603-c189-489c-bdf5-631b47b2cd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:42:79:f8:88:0c:9a:67:3f:59:32:e8:c6:1e:3a:fd:ac:3d:
b9:1f:6c:fc:fa:37:64:6e:38:d5:39:57:a6:98:4c:ad:44:1a:
48:31:d7:bf:93:a2:c2:cf:89:5e:98:c5:eb:4f:eb:8f:ca:49:
fa:79:79:bd:39:b9:4b:08:30:8e:ee:61:b1:4f:40:83:0f:b5:
cb:9b:17:cd:ea:ff:a2:fa:1b:7d:71:d4:4e:39:1e:70:63:56:
3e:88:cb:32:9a:d5:87:6f:40:00:13:6e:0b:9f:c2:4a:8f:4d:
63:70:e3:85:6f:2f:a1:8b:81:1e:fb:9d:53:7f:9a:13:d9:c1:
5c:38:36:81:c5:17:51:83:a7:72:8f:45:11:2d:14:19:28:0e:
10:5c:39:20:e8:b9:1a:42:2c:11:29:f8:8e:00:40:8b:27:59:
42:de:b0:a3:c2:7a:be:7d:97:af:03:f8:2b:96:95:fc:bf:fe:
2b:dc:4e:be:65:84:04:93:0a:6f:8f:ed:16:5e:af:52:74:9f:
66:b9:60:b1:4e:8f:bc:46:aa:10:3e:1c:2d:99:35:c3:a4:b2:
0d:f2:f9:13:f9:3e:d9:05:99:39:28:4c:a3:ff:aa:d7:ef:e9:
17:9f:6f:19:08:d9:b9:9b:39:4f:0f:ee:46:81:2f:af:0b:21:
0c:01:14:15
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUR6A7uz7fA0L1mEXxM8/WWye3M6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTMwMTRaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ1YzBlZTJlNWRmYWM1NGQzNTNhN2ExZmJkYjM3NWZmYmU5YTA2NzM1OGNk
ODFjM2U4Yzk1NjgzNmEzMmZjYmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDenB48d3Th6/9F28Rd5UqeNzh0bbiWcz4qDzZc11quF+4DY3SmuN47iDOV
zsaEbe2gtJsD4gShNph2ELPfq7IjpzNlIKGw5rkrMvpBeSU1CVfqKoTg2ncVsHR3
1m5KGsHcYUHHX40vTG8uv7AVUikUBz0yXoeq9jo/C5TGaGA91Uwg3+QtTMm91pza
lAGeHQqYtTGBMD/5XeydlzuqLzDkmI6U9eufUEmUzvXrJjtGomxAjklVtVGjEUpR
Pgri1CWsFch8ibpJtBXeCr3e5gcuv8lvs9bVIOSADfwngwF9VxylJvbZQdZ7QxBp
d8v426y/eXEJd9Iz9isiOjH4oB8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTuFCbm
BKUin1UX6bHNk8rh9tSdRzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmJkM2Y2MDMtYzE4OS00ODljLWJkZjUtNjMxYjQ3YjJjZDM5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGA
wDANBgkqhkiG9w0BAQsFAAOCAQEAsEJ5+IgMmmc/WTLoxh46/aw9uR9s/Po3ZG44
1TlXpphMrUQaSDHXv5Oiws+JXpjF60/rj8pJ+nl5vTm5Swgwju5hsU9Agw+1y5sX
zer/ovobfXHUTjkecGNWPojLMprVh29AABNuC5/CSo9NY3DjhW8voYuBHvudU3+a
E9nBXDg2gcUXUYOnco9FES0UGSgOEFw5IOi5GkIsESn4jgBAiydZQt6wo8J6vn2X
rwP4K5aV/L/+K9xOvmWEBJMKb4/tFl6vUnSfZrlgsU6PvEaqED4cLZk1w6SyDfL5
E/k+2QWZOShMo/+q1+/pF59vGQjZuZs5Tw/uRoEvrwshDAEUFQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:01 2025 by rpki-client