Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa
File: 773f4606-0d98-4350-9ccd-3aba599136ef.roa (raw, json)
Hash identifier: sFKZPEUHz65McX0IZl8fgClwoyoXc7gjcj5Xuz+E0Xo=
Subject key identifier: 64:47:21:DC:FF:08:90:80:8C:34:DF:0A:AD:7B:7E:7E:A6:D2:5A:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3169B1D7F8BEAACDBD66FF2DC87D686F1967440C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa
Signing time: Tue 26 Aug 2025 17:11:12 +0000
ROA not before: Tue 26 Aug 2025 17:11:12 +0000
ROA not after: Tue 30 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:69:b1:d7:f8:be:aa:cd:bd:66:ff:2d:c8:7d:68:6f:19:67:44:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 26 17:11:12 2025 GMT
Not After : Sep 30 23:59:59 2025 GMT
Subject: serialNumber=d7891effe6eac728333959a4717806395c833817a8ef24c83818b186cb2da853, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:8c:5d:31:b3:8d:aa:55:b9:c8:71:0c:f3:
54:6f:4c:a2:44:cd:f6:4d:3e:d9:9e:ac:db:d0:06:
09:ef:96:bf:37:79:b4:30:b4:61:59:36:b0:3c:5d:
89:a4:df:cd:b2:51:fe:80:1c:33:ed:fd:2f:26:aa:
f9:b0:aa:72:cb:f5:ac:c1:ed:fd:59:7e:b3:ee:fe:
44:37:17:16:c4:1c:b3:8e:5e:2b:45:e2:87:e0:c8:
1c:57:d3:78:0c:73:27:ae:66:96:c7:dc:5e:12:c8:
79:9f:d2:aa:da:17:22:02:39:47:e2:47:6e:36:23:
8b:7d:38:54:60:93:ae:d3:8a:33:78:a6:b1:3e:17:
61:a7:f0:a6:be:75:65:05:f2:55:14:ea:eb:a9:f5:
90:90:3e:bf:6a:a6:e3:3a:79:06:11:e1:9b:63:6f:
13:a4:1f:a7:23:7a:9d:87:86:0a:84:4d:7a:dc:a2:
51:2f:63:d6:f1:f5:db:76:e1:cc:fb:07:c0:bb:15:
18:6b:cd:70:05:57:fa:1c:5c:58:fb:04:ba:40:72:
a8:86:37:8b:a5:9c:50:a3:9d:17:f6:0e:26:3d:0d:
db:61:73:bc:08:7f:a7:13:05:dd:f7:d2:3d:04:f6:
e0:b4:f0:0a:1b:7f:d2:71:99:74:74:f3:5c:62:b3:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:21:DC:FF:08:90:80:8C:34:DF:0A:AD:7B:7E:7E:A6:D2:5A:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:800::/40
Signature Algorithm: sha256WithRSAEncryption
11:cd:33:a4:3e:2a:b5:60:e6:93:d9:eb:1c:98:6b:91:d0:94:
69:ca:19:91:e6:86:1b:f1:84:91:e0:02:18:49:f5:25:bc:05:
7e:96:37:ef:d7:69:9a:ae:62:fb:7f:3d:18:fb:eb:1e:6d:9a:
c3:41:e9:2c:51:64:6c:16:07:6a:23:69:3c:79:ee:ee:44:32:
cd:32:32:85:c9:a8:2c:64:72:ab:cc:0c:89:4d:21:79:c9:d8:
b9:3e:5e:03:03:0a:54:be:06:da:c3:f4:83:c2:bf:f5:27:09:
3b:c5:c5:8b:9b:ca:06:d1:60:e2:a3:91:25:49:0c:11:8e:6f:
9c:21:c3:c6:82:7a:40:9c:5e:df:30:d4:0a:39:4a:12:30:70:
53:30:15:4e:7e:77:e5:18:94:ce:71:6e:ae:93:c2:c3:04:7b:
25:96:8f:9f:d8:32:84:16:3a:bd:b1:0f:91:0b:67:08:dd:07:
18:34:4b:c6:7a:d4:17:d1:dd:3a:c9:60:02:ea:b4:42:ec:ea:
bc:1d:1f:fc:00:b1:b5:8a:2a:ed:db:a0:08:f1:1e:e1:9a:a5:
f7:2b:2b:4e:c7:4f:a5:9a:83:a6:1e:60:60:44:26:7e:c6:75:
8d:a2:de:9c:0a:ba:c0:3c:39:30:ca:1e:bb:b2:a3:23:32:6e:
f5:5a:30:2a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMWmx1/i+qs29Zv8tyH1obxlnRAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MjYxNzExMTJaFw0yNTA5MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ3ODkxZWZmZTZlYWM3MjgzMzM5NTlhNDcxNzgwNjM5NWM4MzM4MTdhOGVm
MjRjODM4MThiMTg2Y2IyZGE4NTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANncjF0xs42qVbnIcQzzVG9MokTN9k0+2Z6s29AGCe+Wvzd5tDC0YVk2sDxd
iaTfzbJR/oAcM+39Lyaq+bCqcsv1rMHt/Vl+s+7+RDcXFsQcs45eK0Xih+DIHFfT
eAxzJ65mlsfcXhLIeZ/SqtoXIgI5R+JHbjYji304VGCTrtOKM3imsT4XYafwpr51
ZQXyVRTq66n1kJA+v2qm4zp5BhHhm2NvE6QfpyN6nYeGCoRNetyiUS9j1vH123bh
zPsHwLsVGGvNcAVX+hxcWPsEukByqIY3i6WcUKOdF/YOJj0N22FzvAh/pxMF3ffS
PQT24LTwCht/0nGZdHTzXGKzxUkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRkRyHc
/wiQgIw03wqte35+ptJaujAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzczZjQ2MDYtMGQ5OC00MzUwLTljY2QtM2FiYTU5OTEzNmVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DgI
MA0GCSqGSIb3DQEBCwUAA4IBAQARzTOkPiq1YOaT2escmGuR0JRpyhmR5oYb8YSR
4AIYSfUlvAV+ljfv12marmL7fz0Y++sebZrDQeksUWRsFgdqI2k8ee7uRDLNMjKF
yagsZHKrzAyJTSF5ydi5Pl4DAwpUvgbaw/SDwr/1Jwk7xcWLm8oG0WDio5ElSQwR
jm+cIcPGgnpAnF7fMNQKOUoSMHBTMBVOfnflGJTOcW6uk8LDBHsllo+f2DKEFjq9
sQ+RC2cI3QcYNEvGetQX0d06yWAC6rRC7Oq8HR/8ALG1iirt26AI8R7hmqX3KytO
x0+lmoOmHmBgRCZ+xnWNot6cCrrAPDkwyh67sqMjMm71WjAq
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:27 2025 by rpki-client