Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
File: 7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa (raw, json)
Hash identifier: oRkI5YNDUgdUB5DyuxoJEeJB1Xm89uPMf/fr8XdmeFo=
Subject key identifier: FF:20:D2:A0:24:C1:D9:CE:BC:BF:75:EE:C8:5F:EB:B8:C5:1D:58:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7EA43CB149C9D88864DAD8A67F3072D0F5A01ECE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
Signing time: Mon 01 Sep 2025 19:40:46 +0000
ROA not before: Mon 01 Sep 2025 19:40:46 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a4:3c:b1:49:c9:d8:88:64:da:d8:a6:7f:30:72:d0:f5:a0:1e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:46 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=050f460042be4d64a3e1726f4d670ab210ba04bae0ea4b42be4f2a63ab395b01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:ea:13:7b:98:49:12:b6:5f:44:11:fb:6b:
b3:44:5d:9d:e0:83:50:fe:c6:f3:46:1b:70:78:c0:
86:ad:ef:29:3d:00:2a:42:1b:53:48:59:ae:25:25:
d3:c2:13:a8:01:97:32:01:09:a4:1f:5a:87:a6:56:
e7:31:99:c0:56:86:ca:62:95:fb:29:c4:bb:39:77:
14:40:4b:72:8e:0a:70:ff:96:b5:68:84:bb:81:08:
f3:ab:27:7f:d5:4c:12:f5:a9:28:95:f7:5d:86:5c:
51:0f:ec:e5:fd:33:d8:7c:e9:87:33:c5:55:df:e9:
4c:82:45:5d:c3:e4:ad:c9:c6:d1:a7:43:f9:fa:f5:
58:23:15:49:02:e5:8b:57:2e:14:bb:50:5b:a2:c1:
1e:fd:7d:36:67:6b:4b:c5:e2:08:39:08:50:ee:36:
cd:98:62:59:bb:14:33:97:db:55:3a:f9:b4:b3:11:
c1:ae:60:ae:e4:f8:4b:ff:44:f7:c0:73:f7:49:3c:
4c:73:ca:8a:a3:35:98:61:f7:1f:d7:22:25:25:a9:
28:62:77:d5:cd:73:09:c3:b5:66:50:c5:da:6c:94:
92:23:50:b6:12:cc:f1:de:bf:cd:7c:c1:b9:c5:d6:
34:1e:97:26:74:1b:82:17:ed:0f:11:96:85:6e:02:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:D2:A0:24:C1:D9:CE:BC:BF:75:EE:C8:5F:EB:B8:C5:1D:58:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:e080::/48
Signature Algorithm: sha256WithRSAEncryption
33:8c:23:a0:f2:56:5e:8b:02:94:1c:27:01:cd:86:a1:55:59:
35:b6:98:ab:0f:5e:4a:56:e8:6a:72:73:9d:ad:ea:72:e2:78:
6f:b6:68:7d:0f:6c:b5:1f:f2:96:2a:71:b3:f2:cd:c5:8a:fe:
d6:53:42:38:bd:2f:34:eb:4f:09:34:83:00:1f:72:7f:27:c1:
9e:20:76:bf:03:7d:3c:6d:5a:f0:1f:9b:9b:43:82:6e:df:ae:
26:a6:76:4b:01:6a:22:53:94:0a:64:ab:f6:78:93:fa:e9:50:
f2:c7:2c:32:98:16:52:f3:6f:48:8c:a7:11:fc:cd:43:fe:c0:
64:b1:6a:33:9d:f8:7b:e7:23:2f:ca:f2:5f:88:61:10:46:22:
e6:26:31:c4:74:88:d0:75:1f:bc:50:c5:b0:03:93:8d:1f:f1:
42:cd:8f:73:37:f7:b5:33:c5:78:64:86:07:38:b7:75:db:11:
e7:ab:83:af:ad:b9:27:09:71:c6:87:f1:93:43:20:0c:d4:40:
60:85:9b:89:3b:79:9f:e9:72:0e:db:07:41:ad:9b:f0:9c:23:
d0:fe:ff:b6:3a:1f:42:3d:50:1e:f2:a3:e0:e1:0d:76:2f:cf:
31:fc:54:71:de:d8:0f:66:ea:04:3e:ea:b1:5f:28:54:25:39:
45:a8:4d:a1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfqQ8sUnJ2Ihk2timfzBy0PWgHs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTQwNDZaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDA1MGY0NjAwNDJiZTRkNjRhM2UxNzI2ZjRkNjcwYWIyMTBiYTA0YmFlMGVh
NGI0MmJlNGYyYTYzYWIzOTViMDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKmE6hN7mEkStl9EEftrs0RdneCDUP7G80YbcHjAhq3vKT0AKkIbU0hZriUl
08ITqAGXMgEJpB9ah6ZW5zGZwFaGymKV+ynEuzl3FEBLco4KcP+WtWiEu4EI86sn
f9VMEvWpKJX3XYZcUQ/s5f0z2HzphzPFVd/pTIJFXcPkrcnG0adD+fr1WCMVSQLl
i1cuFLtQW6LBHv19NmdrS8XiCDkIUO42zZhiWbsUM5fbVTr5tLMRwa5gruT4S/9E
98Bz90k8THPKiqM1mGH3H9ciJSWpKGJ31c1zCcO1ZlDF2myUkiNQthLM8d6/zXzB
ucXWNB6XJnQbghftDxGWhW4CHzcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT/INKg
JMHZzry/de7IX+u4xR1Y/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2I1ZjQ1YTItYWI3OS00YWQzLWEwOWUtODdiMzU1Zjc2NzMyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HLg
gDANBgkqhkiG9w0BAQsFAAOCAQEAM4wjoPJWXosClBwnAc2GoVVZNbaYqw9eSlbo
anJzna3qcuJ4b7ZofQ9stR/ylipxs/LNxYr+1lNCOL0vNOtPCTSDAB9yfyfBniB2
vwN9PG1a8B+bm0OCbt+uJqZ2SwFqIlOUCmSr9niT+ulQ8scsMpgWUvNvSIynEfzN
Q/7AZLFqM534e+cjL8ryX4hhEEYi5iYxxHSI0HUfvFDFsAOTjR/xQs2Pczf3tTPF
eGSGBzi3ddsR56uDr625Jwlxxofxk0MgDNRAYIWbiTt5n+lyDtsHQa2b8Jwj0P7/
tjofQj1QHvKj4OENdi/PMfxUcd7YD2bqBD7qsV8oVCU5RahNoQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:49 2025 by rpki-client