Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
File: a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json)
Hash identifier: YT1PJ9lCrUDPTSjw/jj11pxdus7vRMZzM2QuKw7ZXUA=
Subject key identifier: A2:0A:6B:9D:33:33:B6:67:14:50:B3:8B:74:3D:C4:6E:96:4E:30:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D4606E9054C69E3D98D43DE227A918AC8357320
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
Signing time: Mon 01 Sep 2025 21:20:12 +0000
ROA not before: Mon 01 Sep 2025 21:20:12 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:46:06:e9:05:4c:69:e3:d9:8d:43:de:22:7a:91:8a:c8:35:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:20:12 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=dccb148f92d33f5bbc04b69975e2b81a9e7daf53cf131f53b3784725a4b16aac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:00:96:5a:0b:12:90:d5:f4:b5:d5:02:38:
94:d9:79:0b:3f:1c:99:32:a0:7d:9b:fa:5d:3c:6d:
8f:c6:71:ea:8c:53:c5:3c:3b:b9:40:02:34:97:80:
44:81:47:eb:73:1d:72:34:92:d1:35:11:53:ee:10:
4b:a2:46:70:2b:64:a5:b3:4f:c1:32:ff:54:9c:c2:
96:5c:10:7a:e3:14:7a:a5:24:a4:0d:83:d5:c8:bc:
3d:f4:73:e5:ff:f2:7e:b0:27:a6:1f:b8:10:d8:b0:
2c:96:cd:5c:89:ae:4f:6b:68:f7:4c:1d:32:27:da:
35:42:55:c2:b9:f8:ed:bc:38:da:c0:94:8c:78:41:
85:7f:b1:70:36:df:4a:31:a4:98:95:41:65:ff:4a:
a6:a3:af:da:28:0d:a5:2e:0f:c7:93:2b:76:76:ee:
68:c1:29:be:c7:26:0b:4d:8d:56:17:42:15:c3:a7:
52:e3:8e:8e:66:2d:66:7d:bb:eb:91:2d:19:b8:5a:
65:d4:da:e0:03:ff:5b:72:5d:16:d4:a2:b6:16:cb:
48:dd:c6:e4:7c:7e:e6:48:93:63:04:40:ce:da:ed:
55:4d:7d:2d:65:96:78:e5:b7:c1:06:a9:ce:8a:5c:
5b:9c:34:96:9f:b7:a8:b9:42:d5:6a:40:5a:9a:22:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:6B:9D:33:33:B6:67:14:50:B3:8B:74:3D:C4:6E:96:4E:30:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
41:6c:00:ca:d5:d9:44:b2:56:81:07:22:b8:7c:ff:b8:f0:b2:
89:c3:7a:48:c1:a6:a9:10:23:30:fd:c2:d4:87:96:c2:bb:af:
e0:29:0a:11:7e:07:26:63:61:14:45:93:fc:79:31:72:47:b0:
4c:f5:30:2b:c2:c7:91:dc:5b:86:05:d5:10:f5:4d:cf:5f:51:
c4:8e:a9:2e:82:04:5c:8f:92:28:e7:66:f6:8d:d9:b6:a7:d8:
1b:62:4a:0f:1d:b3:93:8e:e6:33:1b:9e:66:1d:57:9c:9e:99:
79:3f:34:a4:4a:e1:8c:6e:76:e8:df:46:03:cf:4f:e7:9d:54:
e5:3b:96:ba:c3:9d:0b:bd:8b:27:d3:98:52:fc:01:dc:a2:9a:
b2:5b:f8:47:ac:3e:e6:c8:a2:f1:7e:5b:54:dc:4b:9b:12:7d:
b9:fb:61:ec:3e:fb:e0:ea:c3:52:13:26:e7:eb:92:1b:22:60:
d1:49:9b:4b:90:08:56:cb:89:bb:a0:91:b6:20:db:45:c7:72:
6d:a3:49:7c:64:5b:f7:73:1e:ef:f9:f8:94:10:11:e1:0d:82:
bd:73:64:b5:98:cc:4b:f4:02:63:3d:d7:3b:72:75:b0:e0:8c:
5f:54:98:0a:a8:9c:ab:38:8d:79:e6:06:96:dd:dc:8a:eb:17:
59:3b:2d:a2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfUYG6QVMaePZjUPeInqRisg1cyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMTIwMTJaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGRjY2IxNDhmOTJkMzNmNWJiYzA0YjY5OTc1ZTJiODFhOWU3ZGFmNTNjZjEz
MWY1M2IzNzg0NzI1YTRiMTZhYWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKMIAJZaCxKQ1fS11QI4lNl5Cz8cmTKgfZv6XTxtj8Zx6oxTxTw7uUACNJeA
RIFH63MdcjSS0TURU+4QS6JGcCtkpbNPwTL/VJzCllwQeuMUeqUkpA2D1ci8PfRz
5f/yfrAnph+4ENiwLJbNXImuT2to90wdMifaNUJVwrn47bw42sCUjHhBhX+xcDbf
SjGkmJVBZf9KpqOv2igNpS4Px5MrdnbuaMEpvscmC02NVhdCFcOnUuOOjmYtZn27
65EtGbhaZdTa4AP/W3JdFtSithbLSN3G5Hx+5kiTYwRAztrtVU19LWWWeOW3wQap
zopcW5w0lp+3qLlC1WpAWpoiqScCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSiCmud
MzO2ZxRQs4t0PcRulk4w9DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTlhNGYzY2QtNjAzYS00ZmRjLWJkNjUtOGQ5NDg4ZDRmZDA5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BCM
MA0GCSqGSIb3DQEBCwUAA4IBAQBBbADK1dlEslaBByK4fP+48LKJw3pIwaapECMw
/cLUh5bCu6/gKQoRfgcmY2EURZP8eTFyR7BM9TArwseR3FuGBdUQ9U3PX1HEjqku
ggRcj5Io52b2jdm2p9gbYkoPHbOTjuYzG55mHVecnpl5PzSkSuGMbnbo30YDz0/n
nVTlO5a6w50LvYsn05hS/AHcopqyW/hHrD7myKLxfltU3EubEn25+2HsPvvg6sNS
Eybn65IbImDRSZtLkAhWy4m7oJG2INtFx3Jto0l8ZFv3cx7v+fiUEBHhDYK9c2S1
mMxL9AJjPdc7cnWw4IxfVJgKqJyrOI155gaW3dyK6xdZOy2i
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:17:08 2025 by rpki-client