Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
File: a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json)
Hash identifier: snJE3MFq69smH0xMxOnf/SXfZyMlMTr5PJRF7+ExzQw=
Subject key identifier: 5F:A4:E5:B4:1C:8B:03:E2:70:06:76:FA:48:A7:6A:8C:F0:53:91:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BB9C08A7BE20FCB1B19C34971CEDE0E0836E9DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
Signing time: Tue 21 Oct 2025 14:10:05 +0000
ROA not before: Tue 21 Oct 2025 14:10:05 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b9:c0:8a:7b:e2:0f:cb:1b:19:c3:49:71:ce:de:0e:08:36:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:10:05 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=9db404371932af635b5df3d57be6472c438b58110d87a357d0ed7af4660529ed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:f0:2d:2e:84:03:62:6c:85:b8:5e:10:70:
12:ba:29:18:29:9a:ba:15:7d:b7:99:c6:79:1e:a0:
9e:c8:b0:54:fe:b6:e5:f3:36:29:75:e0:e2:f0:08:
51:97:30:65:86:7f:ab:74:48:f5:a3:d0:48:82:9c:
b5:3c:23:e9:b1:37:78:74:1e:ef:af:c6:bf:72:c1:
af:92:b5:5e:90:09:56:f7:d2:20:b9:2e:aa:ac:9f:
ec:3c:d3:fe:65:3b:32:69:46:da:02:57:9c:fe:37:
b4:46:d0:6f:3c:3d:8e:2f:d2:e4:7d:b8:5c:0b:a0:
7d:6d:3c:a1:d7:7e:1c:26:48:16:a8:ef:90:43:2f:
32:99:a7:d4:04:09:62:77:61:6c:22:a1:ea:77:25:
68:e1:c6:1d:14:65:65:f0:9d:83:c8:9b:78:65:5f:
a4:55:36:66:6f:3f:cf:ca:e3:85:af:b0:1f:0d:c2:
b7:ee:cc:fd:c8:71:6e:4e:92:d3:68:a6:e5:d4:e2:
59:92:13:74:34:61:37:c8:b5:86:df:07:81:c3:44:
51:89:d5:43:17:71:28:6e:89:40:56:65:20:34:22:
94:94:ef:bd:b0:37:12:fa:36:26:f9:0b:ed:0e:8f:
99:02:bf:9b:71:0b:d1:e8:6a:43:60:bb:a7:c1:8a:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:E5:B4:1C:8B:03:E2:70:06:76:FA:48:A7:6A:8C:F0:53:91:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
82:db:25:44:0f:e5:d9:ac:64:ed:94:46:46:68:08:ab:02:ad:
83:21:4a:74:b5:e3:e2:5f:e6:a1:a1:46:6e:b0:24:b6:2e:56:
1c:5b:fa:e9:a4:a7:b5:83:76:07:76:50:4c:67:ca:e8:9a:92:
35:61:5e:9d:00:da:b8:d6:af:95:74:25:4a:34:cf:3e:32:a6:
cf:02:64:6d:cb:a9:e5:59:fe:24:f0:85:51:23:91:1f:9a:95:
e2:df:23:36:6a:4f:c8:96:90:e5:c9:3e:9d:3d:2b:83:5e:86:
93:7c:10:25:97:84:2a:b2:88:87:47:2a:f2:86:7a:25:7a:75:
bd:64:93:e2:fa:bc:04:36:a1:f2:af:0f:b9:0f:8c:ae:c3:8a:
1a:b4:a0:60:2a:8d:80:14:d0:82:92:e2:82:ac:a2:92:32:c6:
ca:7f:7e:50:de:c3:28:50:c2:8b:10:4d:04:b1:e0:67:2c:22:
82:6b:64:3c:95:c7:e3:01:96:04:34:dd:eb:e5:db:38:ba:8b:
88:96:28:4b:f8:f6:68:f1:da:f5:46:79:72:53:25:e0:62:45:
7c:ae:8f:f6:6b:82:7d:f3:2e:90:5d:36:c6:fb:3c:a4:68:22:
aa:62:d8:41:36:73:92:32:74:bb:0b:87:d1:6a:ae:56:ce:cc:
19:21:16:a7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUO7nAinviD8sbGcNJcc7eDgg26dswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDEwMDVaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDlkYjQwNDM3MTkzMmFmNjM1YjVkZjNkNTdiZTY0NzJjNDM4YjU4MTEwZDg3
YTM1N2QwZWQ3YWY0NjYwNTI5ZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcO8C0uhANibIW4XhBwEropGCmauhV9t5nGeR6gnsiwVP625fM2KXXg4vAI
UZcwZYZ/q3RI9aPQSIKctTwj6bE3eHQe76/Gv3LBr5K1XpAJVvfSILkuqqyf7DzT
/mU7MmlG2gJXnP43tEbQbzw9ji/S5H24XAugfW08odd+HCZIFqjvkEMvMpmn1AQJ
YndhbCKh6nclaOHGHRRlZfCdg8ibeGVfpFU2Zm8/z8rjha+wHw3Ct+7M/chxbk6S
02im5dTiWZITdDRhN8i1ht8HgcNEUYnVQxdxKG6JQFZlIDQilJTvvbA3Evo2JvkL
7Q6PmQK/m3EL0ehqQ2C7p8GKO8cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRfpOW0
HIsD4nAGdvpIp2qM8FORlTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTlhNGYzY2QtNjAzYS00ZmRjLWJkNjUtOGQ5NDg4ZDRmZDA5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BCM
MA0GCSqGSIb3DQEBCwUAA4IBAQCC2yVED+XZrGTtlEZGaAirAq2DIUp0tePiX+ah
oUZusCS2LlYcW/rppKe1g3YHdlBMZ8rompI1YV6dANq41q+VdCVKNM8+MqbPAmRt
y6nlWf4k8IVRI5EfmpXi3yM2ak/IlpDlyT6dPSuDXoaTfBAll4QqsoiHRyryhnol
enW9ZJPi+rwENqHyrw+5D4yuw4oatKBgKo2AFNCCkuKCrKKSMsbKf35Q3sMoUMKL
EE0EseBnLCKCa2Q8lcfjAZYENN3r5ds4uouIlihL+PZo8dr1RnlyUyXgYkV8ro/2
a4J98y6QXTbG+zykaCKqYthBNnOSMnS7C4fRaq5WzswZIRan
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:55 2025 by rpki-client