Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
File: a8cd111d-bddb-47e0-af43-fc5a8d930376.roa (raw, json)
Hash identifier: 6BPTqfBbiFKHCQ3yaJnk0g1S7Iq0smOYpakUB59zFwQ=
Subject key identifier: E0:2B:D3:ED:E2:BD:BA:30:FF:51:84:92:6A:42:48:D2:70:6A:AB:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19482596F4039F636FA2608528B63FC2B71CA689
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
Signing time: Tue 21 Oct 2025 14:00:06 +0000
ROA not before: Tue 21 Oct 2025 14:00:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:48:25:96:f4:03:9f:63:6f:a2:60:85:28:b6:3f:c2:b7:1c:a6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=ff295e7e2f0438faafc1604e0200ed1cb00f92b133c45823115b6d13c5c47d27, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:e2:8f:7a:74:24:a7:cd:90:1f:01:fb:82:
ab:2d:c7:a1:f4:ea:6c:73:e6:db:61:66:78:27:75:
54:4a:ec:db:70:57:13:3d:52:e7:ce:b4:8f:a2:b8:
7a:a9:6e:58:52:d2:b7:bf:fa:6c:4b:97:6e:d2:9a:
7b:e8:e8:f4:53:d0:4e:c5:6d:a1:11:c5:58:1f:55:
62:52:8a:bb:3c:66:50:2c:07:d4:72:5e:68:da:9e:
80:48:a9:14:b3:5a:90:5e:f2:84:04:2d:89:c3:e0:
82:0a:d7:9a:67:17:d6:70:a3:b5:cd:b5:f0:79:41:
9c:e6:7a:17:f2:46:ab:86:1b:83:69:cd:74:e5:93:
a8:2b:0c:23:50:33:41:bb:d6:90:2d:d2:e1:79:7f:
18:25:d4:a9:a8:19:f9:a6:ef:bc:46:32:03:13:c3:
b5:67:ed:65:56:54:5c:6b:ed:66:07:a4:45:43:ca:
ba:5c:34:bf:79:48:05:98:ac:38:b5:e0:91:8e:e5:
98:fc:c9:5f:50:46:c4:ea:49:46:20:9f:02:c5:5f:
1b:53:7c:23:7e:ef:09:e1:8f:fb:86:60:53:22:04:
70:8f:35:69:2b:cb:e2:b0:37:91:c3:cf:d3:e0:05:
c6:35:7e:fa:46:c5:12:84:35:12:83:61:23:33:2b:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:D3:ED:E2:BD:BA:30:FF:51:84:92:6A:42:48:D2:70:6A:AB:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:1000::/40
Signature Algorithm: sha256WithRSAEncryption
33:c1:e8:72:4a:27:c8:4e:4a:89:64:5b:d9:91:68:45:a8:93:
12:66:cd:98:16:be:80:3c:0b:35:62:c1:96:04:c3:bb:dc:09:
18:cb:8f:e1:0e:a3:61:e1:70:2d:b3:ba:98:66:7a:5c:3b:e4:
35:4d:1a:fd:cc:c6:fd:c4:10:27:95:f8:25:81:88:cb:08:2e:
a8:98:8c:8e:b4:84:be:02:5a:a0:82:03:11:01:e2:e4:37:9b:
7a:8b:b7:c2:61:24:24:da:1b:f5:62:e7:7c:ab:01:54:29:a9:
b8:f5:0a:8d:e0:6b:37:e9:c9:60:30:02:a9:38:31:8d:43:1c:
bc:0f:ce:9a:c2:71:a4:a3:86:15:fa:f5:a8:28:eb:7a:f9:1a:
01:ee:85:24:08:b8:ae:4f:a6:7d:4e:a3:41:82:70:d2:cf:f7:
1f:61:49:46:ae:64:5d:b3:05:09:9c:da:a1:fb:de:19:b7:eb:
a3:b6:cf:82:91:87:26:bc:89:cd:89:03:da:e6:aa:44:08:6b:
f0:28:91:5e:49:94:2f:25:2e:9d:9a:28:c5:00:e3:4b:5f:9f:
39:8f:c6:64:da:27:bd:35:91:d3:af:1f:10:2f:ea:e3:7f:f5:
2a:00:84:14:af:75:82:89:85:26:37:a3:90:62:05:a0:ae:81:
fc:b1:09:f6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGUgllvQDn2NvomCFKLY/wrccpokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDAwMDZaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGZmMjk1ZTdlMmYwNDM4ZmFhZmMxNjA0ZTAyMDBlZDFjYjAwZjkyYjEzM2M0
NTgyMzExNWI2ZDEzYzVjNDdkMjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6U4o96dCSnzZAfAfuCqy3HofTqbHPm22FmeCd1VErs23BXEz1S5860j6K4
eqluWFLSt7/6bEuXbtKae+jo9FPQTsVtoRHFWB9VYlKKuzxmUCwH1HJeaNqegEip
FLNakF7yhAQticPgggrXmmcX1nCjtc218HlBnOZ6F/JGq4Ybg2nNdOWTqCsMI1Az
QbvWkC3S4Xl/GCXUqagZ+abvvEYyAxPDtWftZVZUXGvtZgekRUPKulw0v3lIBZis
OLXgkY7lmPzJX1BGxOpJRiCfAsVfG1N8I37vCeGP+4ZgUyIEcI81aSvL4rA3kcPP
0+AFxjV++kbFEoQ1EoNhIzMrJw0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTgK9Pt
4r26MP9RhJJqQkjScGqrTTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YThjZDExMWQtYmRkYi00N2UwLWFmNDMtZmM1YThkOTMwMzc2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DEQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAzwehySifITkqJZFvZkWhFqJMSZs2YFr6APAs1
YsGWBMO73AkYy4/hDqNh4XAts7qYZnpcO+Q1TRr9zMb9xBAnlfglgYjLCC6omIyO
tIS+AlqgggMRAeLkN5t6i7fCYSQk2hv1Yud8qwFUKam49QqN4Gs36clgMAKpODGN
Qxy8D86awnGko4YV+vWoKOt6+RoB7oUkCLiuT6Z9TqNBgnDSz/cfYUlGrmRdswUJ
nNqh+94Zt+ujts+CkYcmvInNiQPa5qpECGvwKJFeSZQvJS6dmijFAONLX585j8Zk
2ie9NZHTrx8QL+rjf/UqAIQUr3WCiYUmN6OQYgWgroH8sQn2
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:31 2025 by rpki-client