Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa
File: b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa (raw, json)
Hash identifier: d4U1O2lAmqXyjoVkZBSq06TRmsWRQ/hLcX263c7crLo=
Subject key identifier: DD:BF:F0:3C:1C:D5:08:89:7B:CB:57:1B:FB:83:DD:FC:3A:AC:38:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 398DD389117400AB484CDED688291CEE0BBBDFAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa
Signing time: Mon 01 Sep 2025 20:10:56 +0000
ROA not before: Mon 01 Sep 2025 20:10:56 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8d:d3:89:11:74:00:ab:48:4c:de:d6:88:29:1c:ee:0b:bb:df:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:56 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=48a927d42dc1b3913a71526331540feb34b921c5d13d77a5f0113e09a9846fcb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:4e:32:d0:00:f5:ff:95:dd:0e:00:4c:93:
ae:72:35:19:93:a1:a5:57:98:a3:e1:a0:c0:03:a3:
c9:2f:63:ad:7d:2d:5d:02:5d:3c:8a:c8:89:4b:77:
4d:da:12:70:bc:ca:a3:b9:13:18:5b:76:ff:f7:22:
e5:77:51:ac:d2:fa:fb:b1:b0:4e:d9:89:02:ca:07:
c4:ac:48:b8:55:5e:a7:ce:c8:bc:06:e0:a7:2f:23:
e0:fd:a0:a6:1e:71:a4:48:2e:4f:cf:64:7a:a9:bf:
c1:81:1b:da:af:2b:ed:85:b7:3d:9b:ea:12:69:d2:
e9:d5:f7:a5:e4:14:df:32:0c:c0:0c:f2:66:32:2b:
65:42:6a:0b:93:a6:6a:fb:eb:ce:c7:56:8a:d3:cf:
60:d3:b4:fb:48:bb:4f:33:1e:9e:f2:cb:63:99:65:
5c:ad:dc:4c:4d:54:97:1e:27:0c:fd:e3:7f:d1:da:
b7:3f:a7:a1:b5:ee:e2:6a:10:ae:14:da:9c:a5:d1:
7b:0d:1d:29:e4:b4:4d:e5:b0:1e:b2:19:98:d1:b5:
66:40:c9:ec:56:46:59:5d:a6:e8:73:41:ac:7b:69:
a3:24:b7:a2:42:db:db:b9:cb:41:0e:f6:7a:e7:75:
fb:f3:93:36:e0:13:55:c6:e1:2d:a6:ed:19:85:09:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:F0:3C:1C:D5:08:89:7B:CB:57:1B:FB:83:DD:FC:3A:AC:38:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0cb661c-43c3-4c2a-86e3-cc88642d6314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:75:78:38:30:e6:a0:26:0c:0f:07:f8:b6:df:4c:e0:a0:9c:
c6:41:f0:ad:a0:0a:58:bf:20:bb:8f:cf:36:b2:75:5d:1a:9a:
9f:a7:c8:df:e1:fb:ef:77:0a:77:2a:3b:d7:49:d5:30:05:de:
ed:9b:54:ce:41:4c:62:91:cb:f5:3d:b7:75:c5:e5:34:af:b4:
41:3e:32:21:1d:30:04:70:0b:fc:83:d6:0e:59:1b:61:a5:fd:
fa:a3:4d:cf:f1:d4:a0:45:eb:27:56:e8:e3:96:e7:55:b5:c8:
73:03:51:36:cb:ce:8d:0f:55:71:8d:0b:5a:0f:08:74:da:3e:
1e:20:c9:2e:8f:30:dd:78:cb:7e:44:ab:fc:b2:70:cb:9f:c8:
44:77:b7:18:17:65:55:a9:43:3e:10:f0:62:ac:d8:cf:1d:12:
79:47:28:7a:c8:0e:7e:c3:07:0b:1c:c9:75:22:84:53:8a:9c:
04:76:ca:02:4f:60:02:b3:8d:e0:81:9f:cc:13:86:af:f8:1d:
48:67:67:ce:2a:6a:88:8c:58:44:b2:c4:fe:31:67:8d:51:d4:
25:b1:ee:de:e0:a1:2d:45:68:4c:a6:12:07:d5:f4:f7:70:0e:
71:4a:6a:24:5e:bd:52:06:ae:8b:09:a8:82:04:2d:66:ad:48:
62:29:55:bc
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOY3TiRF0AKtITN7WiCkc7gu7360wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMDEwNTZaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4YTkyN2Q0MmRjMWIzOTEzYTcxNTI2MzMxNTQwZmViMzRiOTIxYzVkMTNk
NzdhNWYwMTEzZTA5YTk4NDZmY2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ4TTjLQAPX/ld0OAEyTrnI1GZOhpVeYo+GgwAOjyS9jrX0tXQJdPIrIiUt3
TdoScLzKo7kTGFt2//ci5XdRrNL6+7GwTtmJAsoHxKxIuFVep87IvAbgpy8j4P2g
ph5xpEguT89keqm/wYEb2q8r7YW3PZvqEmnS6dX3peQU3zIMwAzyZjIrZUJqC5Om
avvrzsdWitPPYNO0+0i7TzMenvLLY5llXK3cTE1Ulx4nDP3jf9Hatz+nobXu4moQ
rhTanKXRew0dKeS0TeWwHrIZmNG1ZkDJ7FZGWV2m6HNBrHtpoyS3okLb27nLQQ72
eud1+/OTNuATVcbhLabtGYUJ+T0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTdv/A8
HNUIiXvLVxv7g938Oqw46jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjBjYjY2MWMtNDNjMy00YzJhLTg2ZTMtY2M4ODY0MmQ2MzE0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEg
wDANBgkqhkiG9w0BAQsFAAOCAQEAOXV4ODDmoCYMDwf4tt9M4KCcxkHwraAKWL8g
u4/PNrJ1XRqan6fI3+H773cKdyo710nVMAXe7ZtUzkFMYpHL9T23dcXlNK+0QT4y
IR0wBHAL/IPWDlkbYaX9+qNNz/HUoEXrJ1bo45bnVbXIcwNRNsvOjQ9VcY0LWg8I
dNo+HiDJLo8w3XjLfkSr/LJwy5/IRHe3GBdlValDPhDwYqzYzx0SeUcoesgOfsMH
CxzJdSKEU4qcBHbKAk9gArON4IGfzBOGr/gdSGdnzipqiIxYRLLE/jFnjVHUJbHu
3uChLUVoTKYSB9X093AOcUpqJF69UgauiwmoggQtZq1IYilVvA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:16 2025 by rpki-client