Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
File: a7031a07-12ba-45f8-a53b-6bd5b713c999.roa (raw, json)
Hash identifier: dMuFdpt3sCAkxLPESW/lbL1cb8EV28ZARXia1pjDLVs=
Subject key identifier: C6:56:25:CB:4E:57:57:4F:52:40:6C:60:F6:79:49:E3:25:01:85:84
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1335D3AAFCE49102DED6E2A35A749967DB8634C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
Signing time: Mon 01 Sep 2025 21:01:27 +0000
ROA not before: Mon 01 Sep 2025 21:01:27 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:35:d3:aa:fc:e4:91:02:de:d6:e2:a3:5a:74:99:67:db:86:34:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:01:27 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=7b693448edf5983ab6ea63a10228055d46f359858454dc6506a6fa2d37d8b90f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:91:3e:22:14:51:f3:89:dc:6a:8c:84:04:
ef:f7:c5:20:0d:24:00:80:43:f1:6a:55:74:7a:bb:
fc:0b:a7:2e:18:d6:71:e0:56:ed:8d:99:36:f5:8c:
44:4d:8f:40:56:c2:92:25:e6:eb:e0:c5:33:04:3d:
13:f6:39:b0:21:ca:fa:8c:12:e8:09:b6:60:7c:d4:
69:fb:ba:c0:e6:0d:2a:bf:f9:bd:51:7d:ef:e3:45:
b3:93:1b:fd:0f:6d:4e:3a:f6:ed:46:03:a7:84:67:
ce:aa:21:55:12:4e:2e:d2:8e:5d:e3:6b:4d:6c:e9:
bb:24:ba:45:53:09:71:7f:00:d0:4e:4b:04:cb:1f:
49:91:06:01:52:51:aa:4f:e9:b3:d6:c2:a7:0a:ee:
9f:d2:74:c7:5a:04:e3:97:6e:9c:21:ae:6d:e2:f5:
12:99:2f:d4:6b:b6:69:12:79:56:ae:4b:c2:12:80:
4b:aa:62:bc:fb:f2:96:88:cd:bb:96:f4:4b:ea:56:
8f:3f:8b:89:1d:56:42:1c:64:81:dc:c5:a5:a0:7d:
3e:21:b7:1a:dc:94:a1:06:24:17:24:6e:cc:26:9e:
80:00:a4:a9:e8:a4:71:8b:fe:b3:69:ef:d7:2f:15:
86:dc:c1:23:b1:de:17:ef:1f:bb:8e:d0:08:06:a2:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:25:CB:4E:57:57:4F:52:40:6C:60:F6:79:49:E3:25:01:85:84
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:400::/38
Signature Algorithm: sha256WithRSAEncryption
c8:de:7e:19:5a:83:97:7f:47:c3:64:0f:ee:ff:1a:1d:bc:00:
e9:a0:90:dd:34:05:d9:c9:e6:4f:2f:f2:a1:c0:5b:d2:f7:7e:
99:28:8f:1f:51:6e:1b:df:fb:ae:6f:a9:26:42:60:bb:fb:c3:
d2:71:c8:e5:74:53:bd:e5:b6:33:32:9e:b4:0b:de:4f:8d:f4:
60:0d:5e:ea:2d:1b:4e:e8:d9:ab:e8:6f:d6:5e:44:0c:5b:d6:
c5:2b:b2:bf:08:db:ed:25:4d:69:6f:4a:bb:50:28:1e:8d:00:
5e:24:9c:5c:3a:cf:af:c7:a8:02:da:d5:d4:5b:6f:ab:64:ea:
4e:76:3b:70:4e:ab:73:50:e2:b0:ed:1e:3d:b3:ee:4c:b5:de:
d2:f0:53:00:3d:91:1b:20:e5:14:2a:7a:d3:c4:8a:64:4c:32:
df:02:bd:04:fc:8c:49:a8:3d:2f:46:9f:70:74:e6:a4:26:ec:
21:86:4b:d3:ff:03:df:36:16:eb:09:cd:85:1e:0a:40:3f:21:
00:a8:97:8c:27:5f:de:a5:29:7f:a6:8b:36:26:b6:d0:d6:3a:
ee:92:e9:c1:68:27:11:06:fc:05:2c:21:64:15:83:4d:5d:12:
66:97:5e:84:97:03:8a:21:5b:92:0b:4e:68:8f:8d:86:79:bf:
de:16:c6:97
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEzXTqvzkkQLe1uKjWnSZZ9uGNMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMTAxMjdaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDdiNjkzNDQ4ZWRmNTk4M2FiNmVhNjNhMTAyMjgwNTVkNDZmMzU5ODU4NDU0
ZGM2NTA2YTZmYTJkMzdkOGI5MGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKoykT4iFFHzidxqjIQE7/fFIA0kAIBD8WpVdHq7/AunLhjWceBW7Y2ZNvWM
RE2PQFbCkiXm6+DFMwQ9E/Y5sCHK+owS6Am2YHzUafu6wOYNKr/5vVF97+NFs5Mb
/Q9tTjr27UYDp4RnzqohVRJOLtKOXeNrTWzpuyS6RVMJcX8A0E5LBMsfSZEGAVJR
qk/ps9bCpwrun9J0x1oE45dunCGubeL1Epkv1Gu2aRJ5Vq5LwhKAS6pivPvylojN
u5b0S+pWjz+LiR1WQhxkgdzFpaB9PiG3GtyUoQYkFyRuzCaegACkqeikcYv+s2nv
1y8VhtzBI7HeF+8fu47QCAaiKt8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTGViXL
TldXT1JAbGD2eUnjJQGFhDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTcwMzFhMDctMTJiYS00NWY4LWE1M2ItNmJkNWI3MTNjOTk5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BoE
MA0GCSqGSIb3DQEBCwUAA4IBAQDI3n4ZWoOXf0fDZA/u/xodvADpoJDdNAXZyeZP
L/KhwFvS936ZKI8fUW4b3/uub6kmQmC7+8PSccjldFO95bYzMp60C95PjfRgDV7q
LRtO6Nmr6G/WXkQMW9bFK7K/CNvtJU1pb0q7UCgejQBeJJxcOs+vx6gC2tXUW2+r
ZOpOdjtwTqtzUOKw7R49s+5Mtd7S8FMAPZEbIOUUKnrTxIpkTDLfAr0E/IxJqD0v
Rp9wdOakJuwhhkvT/wPfNhbrCc2FHgpAPyEAqJeMJ1/epSl/pos2JrbQ1jrukunB
aCcRBvwFLCFkFYNNXRJml16ElwOKIVuSC05oj42Geb/eFsaX
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:45 2025 by rpki-client