Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: qnpbI29XcznF9ef5c4IuirQs/f2EKyyyudniix1S6X4=
Subject key identifier: EB:F1:AC:B8:F2:2C:C9:58:4A:EA:72:32:0E:CC:BB:A1:58:60:86:F3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 743E59C40E1FA0A8F5B3A22F101DF3F25D77E310
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Tue 21 Oct 2025 14:00:13 +0000
ROA not before: Tue 21 Oct 2025 14:00:13 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3e:59:c4:0e:1f:a0:a8:f5:b3:a2:2f:10:1d:f3:f2:5d:77:e3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:13 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=35fd543a4dff705093bf8ebf4a8cff80f8f969cfda9fbc3ac992efc6cd835e4f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:73:e7:6a:1f:c6:a4:b0:be:2a:87:b6:fb:
f9:52:f1:fb:15:29:53:a5:02:48:55:4c:9b:97:6f:
31:a5:b2:0a:64:06:cc:9a:3d:cb:dd:36:db:92:bb:
0f:40:b3:19:62:06:f2:0b:b0:6b:04:95:6b:80:3e:
ba:83:51:e6:16:26:9b:f7:b3:63:91:98:32:6c:79:
32:43:63:5f:41:a7:9d:96:7e:67:d3:a0:1a:ab:15:
00:27:a7:40:e4:b1:2c:70:a4:41:b4:2e:5b:51:1b:
8d:ce:9b:5f:f8:5e:03:7f:1b:d7:d6:64:36:5b:73:
89:8e:74:8d:6d:cc:0f:83:84:4f:91:c0:be:72:2a:
2f:1f:37:4d:51:81:6a:b9:19:b7:8b:60:9b:51:98:
24:63:11:1a:d7:a4:66:82:1a:0d:2a:c1:41:f2:e7:
6e:50:ab:f7:20:a3:1f:76:7d:e4:ae:d9:7a:2f:31:
a4:95:bc:98:6f:51:d2:a3:c3:48:ca:52:f6:ec:9f:
c0:b3:2d:a3:ed:d7:00:7f:7a:1b:dd:e7:ba:03:28:
d9:37:1f:f7:45:35:fc:7f:0e:a0:0c:09:c2:5f:8e:
17:80:da:0e:8c:79:d9:c8:78:f5:7a:e8:14:5f:89:
23:ed:e3:5f:80:af:46:5c:ee:5d:39:56:b8:8e:c2:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:AC:B8:F2:2C:C9:58:4A:EA:72:32:0E:CC:BB:A1:58:60:86:F3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
6d:87:d8:74:8a:18:99:b5:4b:9e:df:38:1a:57:c5:1e:cc:dc:
94:0a:1d:b4:23:f7:a6:92:e9:7e:f7:39:d2:87:b1:b8:f1:93:
b4:a0:67:04:94:8e:5c:c0:e1:f1:0f:9c:3c:6f:30:0f:79:d7:
ff:c9:18:e0:35:b1:0b:8d:10:92:fa:cc:23:1a:eb:7f:03:28:
6c:d2:af:5d:28:30:51:45:d0:76:b3:80:38:60:79:ea:09:d0:
ae:05:78:b8:0a:d9:1f:96:24:1c:23:45:66:03:35:8c:89:98:
a4:33:14:ec:64:dc:28:bc:53:6f:af:9e:ae:ad:53:ac:32:5e:
43:cf:c2:72:48:29:9d:1e:ec:0b:52:bc:6c:35:82:d2:da:37:
bc:84:2f:7c:b9:c0:45:86:ea:f6:3e:11:27:d9:ee:26:f1:e0:
0e:84:07:41:2c:50:09:97:7c:1d:78:56:6a:11:09:ca:73:d1:
dd:72:4a:3c:37:59:d2:6d:62:ca:f1:09:e6:82:92:98:02:45:
71:87:09:73:3a:46:0d:c3:e7:e2:41:19:9a:65:69:1b:16:a8:
b3:14:21:a0:5a:f3:b6:ce:92:d4:3e:a0:27:2a:b3:58:b1:a8:
f5:b8:c1:da:d6:6f:c9:49:48:f5:7a:5e:4d:3f:1b:a6:36:ea:
04:bd:e9:0b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUdD5ZxA4foKj1s6IvEB3z8l134xAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDAwMTNaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDM1ZmQ1NDNhNGRmZjcwNTA5M2JmOGViZjRhOGNmZjgwZjhmOTY5Y2ZkYTlm
YmMzYWM5OTJlZmM2Y2Q4MzVlNGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ5dc+dqH8aksL4qh7b7+VLx+xUpU6UCSFVMm5dvMaWyCmQGzJo9y90225K7
D0CzGWIG8guwawSVa4A+uoNR5hYmm/ezY5GYMmx5MkNjX0GnnZZ+Z9OgGqsVACen
QOSxLHCkQbQuW1Ebjc6bX/heA38b19ZkNltziY50jW3MD4OET5HAvnIqLx83TVGB
arkZt4tgm1GYJGMRGtekZoIaDSrBQfLnblCr9yCjH3Z95K7Zei8xpJW8mG9R0qPD
SMpS9uyfwLMto+3XAH96G93nugMo2Tcf90U1/H8OoAwJwl+OF4DaDox52ch49Xro
FF+JI+3jX4CvRlzuXTlWuI7C0a0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTr8ay4
8izJWErqcjIOzLuhWGCG8zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTRlMDhkOGQtMTNmYS00MDYwLThjZTAtMGEyNzU3YTFmYTVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9g
QDANBgkqhkiG9w0BAQsFAAOCAQEAbYfYdIoYmbVLnt84GlfFHszclAodtCP3ppLp
fvc50oexuPGTtKBnBJSOXMDh8Q+cPG8wD3nX/8kY4DWxC40QkvrMIxrrfwMobNKv
XSgwUUXQdrOAOGB56gnQrgV4uArZH5YkHCNFZgM1jImYpDMU7GTcKLxTb6+erq1T
rDJeQ8/CckgpnR7sC1K8bDWC0to3vIQvfLnARYbq9j4RJ9nuJvHgDoQHQSxQCZd8
HXhWahEJynPR3XJKPDdZ0m1iyvEJ5oKSmAJFcYcJczpGDcPn4kEZmmVpGxaosxQh
oFrzts6S1D6gJyqzWLGo9bjB2tZvyUlI9XpeTT8bpjbqBL3pCw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:09:11 2025 by rpki-client