Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
File: 7665346b-5715-4d4a-9ee7-32affc669e92.roa (raw, json)
Hash identifier: D0gW/70GEmf0eHP/N0wP1oU86lIULz4vgD396c1n/Aw=
Subject key identifier: 49:6E:F4:C0:23:C1:65:E4:D3:F5:A1:64:C0:34:CB:CF:71:24:69:1F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 66A50A086942E978C5D1105DFBF6D410B347A051
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
Signing time: Tue 21 Oct 2025 12:30:09 +0000
ROA not before: Tue 21 Oct 2025 12:30:09 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a5:0a:08:69:42:e9:78:c5:d1:10:5d:fb:f6:d4:10:b3:47:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 12:30:09 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=beb0b46281e0105722ede63b53a923ccca57753e00e9ca66e27354f2892323a7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:32:42:7d:b5:97:f5:aa:16:ad:7b:0c:0b:
96:8e:c5:de:41:ed:54:8d:d3:9e:e0:36:7b:c4:2a:
eb:89:43:47:50:18:dd:b0:ed:50:f9:c5:00:d3:e5:
38:e9:5d:42:97:c6:04:4c:10:38:78:46:64:f8:88:
41:ea:d4:eb:7a:21:99:86:ed:25:ca:29:6a:70:cb:
59:ad:cd:45:e1:40:b0:0a:6b:0d:56:bf:76:4a:fc:
96:c4:e0:29:3f:53:dc:e0:ed:35:32:01:b3:b2:1a:
cb:76:ab:5e:81:02:fd:2a:fa:95:75:76:fa:9c:0a:
3f:33:98:78:d3:f4:13:08:25:fa:b1:db:d3:ef:6b:
03:fb:49:4b:b1:c0:70:7f:7c:5c:bc:6a:69:8c:bf:
60:3a:ee:4d:27:c2:24:c5:4c:01:25:cf:d6:a5:3d:
77:81:b5:fb:f1:97:d1:ec:c9:10:99:23:b7:ca:4a:
59:eb:2b:24:85:e2:12:85:8e:2e:c1:d4:a4:8a:61:
74:9a:e3:7a:1b:72:12:ff:0b:d0:42:3e:c4:47:5b:
01:c9:95:ba:5f:00:02:dc:45:51:2a:89:69:b2:a0:
6a:a5:76:9f:9e:f3:c0:66:a2:2b:76:5c:82:ca:86:
bb:74:1b:a8:03:4b:39:fe:d4:c0:eb:25:0d:3a:ec:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:F4:C0:23:C1:65:E4:D3:F5:A1:64:C0:34:CB:CF:71:24:69:1F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2040::/48
Signature Algorithm: sha256WithRSAEncryption
7a:19:0c:e7:7f:95:2a:4b:e9:59:b9:94:70:cb:cf:26:48:c0:
a8:37:72:31:8e:44:ce:38:85:69:64:5b:5f:aa:97:1c:8d:bc:
85:f7:88:d5:b1:45:1b:72:ae:38:b1:23:ef:0c:3c:79:34:4e:
30:bf:89:0b:54:4b:a4:da:4a:dd:b8:e1:bb:3b:9c:b6:9d:be:
95:74:a0:f5:d9:eb:cf:d8:49:69:6b:0a:90:42:b7:6e:2f:7b:
bc:91:54:74:ea:84:6d:49:a8:05:38:a4:37:44:25:cb:e9:c0:
0d:ef:47:e4:ec:82:db:cf:6e:8e:9d:f7:03:67:3c:f3:f7:93:
16:18:0a:5d:c8:ca:88:71:51:3c:a2:30:4a:9e:db:13:35:7a:
da:81:0d:49:a0:27:04:b9:7b:21:8e:a3:58:ff:41:bd:db:fa:
3a:34:4d:a4:bc:41:b5:09:aa:f4:04:bd:e2:f0:b6:a3:02:fd:
e3:18:d5:71:03:ed:9d:e4:8e:68:3f:5c:74:f9:f2:f4:32:35:
e2:36:ef:05:e8:fc:00:6c:0e:e2:d9:0d:1b:b8:84:5e:3f:4d:
df:c0:48:89:4a:f5:98:08:52:70:8b:db:d2:a8:1b:ba:32:dc:
75:65:f3:c0:00:dc:1b:6c:16:d6:a1:6d:c8:c7:59:2f:50:3a:
70:a5:90:a6
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZqUKCGlC6XjF0RBd+/bUELNHoFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMjMwMDlaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGJlYjBiNDYyODFlMDEwNTcyMmVkZTYzYjUzYTkyM2NjY2E1Nzc1M2UwMGU5
Y2E2NmUyNzM1NGYyODkyMzIzYTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKHiMkJ9tZf1qhatewwLlo7F3kHtVI3TnuA2e8Qq64lDR1AY3bDtUPnFANPl
OOldQpfGBEwQOHhGZPiIQerU63ohmYbtJcopanDLWa3NReFAsAprDVa/dkr8lsTg
KT9T3ODtNTIBs7Iay3arXoEC/Sr6lXV2+pwKPzOYeNP0Ewgl+rHb0+9rA/tJS7HA
cH98XLxqaYy/YDruTSfCJMVMASXP1qU9d4G1+/GX0ezJEJkjt8pKWesrJIXiEoWO
LsHUpIphdJrjehtyEv8L0EI+xEdbAcmVul8AAtxFUSqJabKgaqV2n57zwGaiK3Zc
gsqGu3QbqANLOf7UwOslDTrsUcUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRJbvTA
I8Fl5NP1oWTANMvPcSRpHzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzY2NTM0NmItNTcxNS00ZDRhLTllZTctMzJhZmZjNjY5ZTkyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAg
QDANBgkqhkiG9w0BAQsFAAOCAQEAehkM53+VKkvpWbmUcMvPJkjAqDdyMY5EzjiF
aWRbX6qXHI28hfeI1bFFG3KuOLEj7ww8eTROML+JC1RLpNpK3bjhuzuctp2+lXSg
9dnrz9hJaWsKkEK3bi97vJFUdOqEbUmoBTikN0Qly+nADe9H5OyC289ujp33A2c8
8/eTFhgKXcjKiHFRPKIwSp7bEzV62oENSaAnBLl7IY6jWP9Bvdv6OjRNpLxBtQmq
9AS94vC2owL94xjVcQPtneSOaD9cdPny9DI14jbvBej8AGwO4tkNG7iEXj9N38BI
iUr1mAhScIvb0qgbujLcdWXzwADcG2wW1qFtyMdZL1A6cKWQpg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:09 2025 by rpki-client