Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
File: a75e35f5-c55c-41e8-b026-54c892c68ea2.roa (raw, json)
Hash identifier: 4zidqS0hk4D9j0WtaunK2h7aKVzl0o/MdXmAgVrPzR4=
Subject key identifier: 3F:3D:DF:EF:84:53:0D:D4:04:B2:64:25:FF:E1:98:91:8B:B0:2D:18
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A8B2A979DFCE775E8C3D81BFED5FB2B96164C3D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
Signing time: Mon 01 Sep 2025 19:40:08 +0000
ROA not before: Mon 01 Sep 2025 19:40:08 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8b:2a:97:9d:fc:e7:75:e8:c3:d8:1b:fe:d5:fb:2b:96:16:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:08 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=22a74edf289776c3599cfa29eefde10e5a53feff3f83d930fb3f750313ada340, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:03:73:90:9c:84:ba:14:05:88:1c:c2:b6:
83:9a:29:80:d6:a7:4c:c0:38:ae:b1:4e:89:94:12:
ce:89:34:f2:8f:76:13:85:68:75:54:d4:a5:b9:ac:
5f:72:3d:ba:9a:3a:13:74:30:9e:72:11:e6:f3:af:
b0:81:cc:49:2d:8e:57:e8:fc:5e:7b:aa:47:0f:cb:
75:d8:21:e2:d0:c5:a5:c3:a1:79:44:40:44:58:db:
78:f7:a2:35:0a:27:9a:81:19:3f:8b:bf:db:73:1a:
4c:3d:96:4c:da:e5:69:3e:c9:c8:b2:35:6b:9d:82:
59:68:68:14:97:fb:27:09:74:31:a5:42:54:5b:3d:
79:d6:f4:3a:c2:a7:ff:eb:b8:e5:bb:2f:35:50:49:
a7:4c:49:9e:71:fe:8f:69:37:5b:f4:2b:35:67:21:
b5:a6:f9:65:3c:af:db:c0:36:e5:9d:a2:02:f3:c0:
f0:1a:39:61:dc:87:7e:be:bc:dd:76:6c:58:be:9f:
03:4e:f9:31:c9:ab:6b:00:c8:05:3e:24:13:2c:17:
4c:61:a6:d7:4c:cc:65:36:6f:53:f5:9e:25:fb:82:
55:1e:ff:d2:e1:11:d3:1d:75:0e:73:02:d5:34:5b:
3d:02:30:bb:54:fc:02:fa:46:59:4e:6c:4b:ab:ff:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:DF:EF:84:53:0D:D4:04:B2:64:25:FF:E1:98:91:8B:B0:2D:18
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75e35f5-c55c-41e8-b026-54c892c68ea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
be:64:29:ed:b5:f2:ad:51:38:54:4f:ff:70:ed:d8:3c:b1:69:
b3:34:9d:fe:28:c4:73:88:6f:18:f0:50:a9:6e:d9:1d:38:00:
29:c9:64:02:04:37:2b:46:e8:78:21:c3:45:a4:f1:d5:5d:11:
a7:2c:61:5f:14:00:ef:03:20:8b:41:d5:46:c8:61:3f:ea:3d:
ce:91:d4:6b:df:90:73:ec:03:e1:af:7f:b3:c2:3c:97:64:29:
f3:2d:c5:98:3d:78:0b:3e:d0:6f:0b:16:f8:73:5e:79:97:ca:
9c:90:31:1c:1e:9e:c1:24:80:3d:14:68:22:de:e2:f9:6d:a8:
10:c9:21:53:10:67:8b:c3:f9:ba:dc:65:cb:76:e4:25:af:2a:
6c:e5:e2:61:b9:d6:98:f9:c1:f3:50:da:cf:89:ed:37:9e:f0:
95:40:ce:50:5f:f1:cb:6d:cc:5e:0f:6c:81:5a:8d:48:27:f1:
4e:09:f5:81:a4:84:f8:1e:5c:6b:d1:cd:d2:a7:03:46:95:96:
60:94:55:94:b4:dd:9c:9c:4b:82:28:c2:c4:31:a6:06:80:2d:
9e:8a:93:7a:87:0e:a6:14:33:5b:2e:6d:90:81:ed:3e:6a:bc:
89:18:1b:1c:b7:d4:ab:f4:e6:06:29:aa:fb:c7:49:db:f6:bb:
e3:f4:f0:6b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGosql53853Xow9gb/tX7K5YWTD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTQwMDhaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDIyYTc0ZWRmMjg5Nzc2YzM1OTljZmEyOWVlZmRlMTBlNWE1M2ZlZmYzZjgz
ZDkzMGZiM2Y3NTAzMTNhZGEzNDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJPhA3OQnIS6FAWIHMK2g5opgNanTMA4rrFOiZQSzok08o92E4VodVTUpbms
X3I9upo6E3QwnnIR5vOvsIHMSS2OV+j8XnuqRw/Lddgh4tDFpcOheURARFjbePei
NQonmoEZP4u/23MaTD2WTNrlaT7JyLI1a52CWWhoFJf7Jwl0MaVCVFs9edb0OsKn
/+u45bsvNVBJp0xJnnH+j2k3W/QrNWchtab5ZTyv28A25Z2iAvPA8Bo5YdyHfr68
3XZsWL6fA075McmrawDIBT4kEywXTGGm10zMZTZvU/WeJfuCVR7/0uER0x11DnMC
1TRbPQIwu1T8AvpGWU5sS6v/6mMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ/Pd/v
hFMN1ASyZCX/4ZiRi7AtGDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTc1ZTM1ZjUtYzU1Yy00MWU4LWIwMjYtNTRjODkyYzY4ZWEyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAvmQp7bXyrVE4VE//cO3YPLFpszSd/ijEc4hv
GPBQqW7ZHTgAKclkAgQ3K0boeCHDRaTx1V0RpyxhXxQA7wMgi0HVRshhP+o9zpHU
a9+Qc+wD4a9/s8I8l2Qp8y3FmD14Cz7QbwsW+HNeeZfKnJAxHB6ewSSAPRRoIt7i
+W2oEMkhUxBni8P5utxly3bkJa8qbOXiYbnWmPnB81Daz4ntN57wlUDOUF/xy23M
Xg9sgVqNSCfxTgn1gaSE+B5ca9HN0qcDRpWWYJRVlLTdnJxLgijCxDGmBoAtnoqT
eocOphQzWy5tkIHtPmq8iRgbHLfUq/TmBimq+8dJ2/a74/Twaw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:12 2025 by rpki-client