Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa
File: b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa (raw, json)
Hash identifier: KhLoD8R4qu4eKovU06VLnFwXNA8XczYUGuWuoivSFi0=
Subject key identifier: 61:FF:07:1B:60:16:95:E6:9C:D6:76:98:5C:AF:E7:89:18:E8:B7:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6B1CBB3212FEAEE721D9F7D1531AF1A71EDC3B29
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa
Signing time: Mon 01 Sep 2025 21:01:25 +0000
ROA not before: Mon 01 Sep 2025 21:01:25 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1c:bb:32:12:fe:ae:e7:21:d9:f7:d1:53:1a:f1:a7:1e:dc:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:01:25 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=e5eaf27ac27c9bf8cc22de41fd264a6638b862e3d4f5d0b894a265dff3bde51f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:b7:c4:12:00:11:33:20:f4:c0:ab:d3:24:
1c:c9:4e:9f:35:08:d8:e0:cd:bf:29:9f:2a:77:7c:
39:35:f9:7d:d3:2e:35:08:03:df:0c:99:0b:16:4f:
79:aa:1b:57:96:88:c1:e4:f8:85:27:c3:4a:9a:5c:
5f:4c:c8:1b:ae:df:c7:08:39:aa:3c:e7:91:ca:f1:
fc:9c:fc:5c:13:2f:d2:d8:1f:a5:08:48:dc:69:da:
7b:0c:1a:c7:4c:ce:63:b8:e1:f0:28:a7:92:4f:7d:
9a:89:ac:57:5d:64:f9:b1:b8:34:6c:42:30:bf:b0:
91:ec:a7:82:d0:35:09:85:c7:a1:66:cb:93:63:ff:
65:7e:47:90:2f:ac:10:3d:c2:bc:3e:cf:9b:74:31:
57:dd:a7:20:52:d2:b7:e2:fb:6d:63:cd:55:77:6f:
4b:13:e9:2d:2f:b4:76:52:69:67:e2:71:03:a4:fa:
97:b5:53:e9:26:9a:bd:4b:66:0a:67:36:26:4a:f9:
34:f5:43:e5:24:63:22:f4:53:6f:02:cc:c6:bb:6a:
bc:0c:a5:1a:84:7e:ec:bd:03:e9:f1:89:69:ac:8b:
b4:65:dd:83:27:91:8f:01:cb:7f:68:55:e2:a8:0b:
00:3d:9c:c8:7f:01:68:10:37:10:da:e4:6a:6d:11:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:07:1B:60:16:95:E6:9C:D6:76:98:5C:AF:E7:89:18:E8:B7:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b76683fb-d41f-4bfd-ba78-b4b2492acd1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e:800::/38
Signature Algorithm: sha256WithRSAEncryption
04:d1:42:5a:23:5e:34:5b:8c:ce:d4:36:07:e6:61:e3:07:1f:
84:03:ba:b4:79:ff:b1:33:6d:1e:c5:8a:e1:d7:10:c1:5d:76:
62:37:3c:04:26:d4:89:22:93:70:f1:34:84:10:86:65:bf:bb:
94:80:3a:a2:7b:30:48:7b:6c:70:5e:5c:28:28:bf:5b:53:a5:
41:62:a6:c5:de:a3:61:d7:0f:27:94:ec:b4:3b:c0:45:10:3b:
8e:db:98:50:11:79:55:59:da:40:90:22:7c:1e:66:1c:7d:cf:
82:53:eb:d5:3c:8c:56:5c:01:2d:59:69:4e:7e:88:35:8f:3b:
e3:00:f6:62:f8:89:83:0d:4e:8f:27:6a:e1:31:05:5f:90:28:
b7:8f:bd:f5:5a:bf:3e:a7:a1:3f:a6:f5:d3:e7:0e:ea:02:20:
e1:a6:31:43:ef:7d:99:c0:0c:1d:de:e0:6a:f8:29:e7:b4:7b:
e7:5f:cf:f0:cf:18:d2:97:92:f4:ce:40:14:13:11:d5:07:dc:
f1:c7:a8:1a:84:57:94:c4:a3:ba:d2:59:85:e7:42:e5:4f:82:
ac:29:ab:ad:c0:0d:32:4c:fa:7f:45:0c:76:8f:a9:60:69:f8:
1b:9b:43:a5:0c:1b:d9:92:28:88:8f:be:31:41:d3:e3:87:cc:
44:3e:47:5f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaxy7MhL+ruch2ffRUxrxpx7cOykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMTAxMjVaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGU1ZWFmMjdhYzI3YzliZjhjYzIyZGU0MWZkMjY0YTY2MzhiODYyZTNkNGY1
ZDBiODk0YTI2NWRmZjNiZGU1MWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALprt8QSABEzIPTAq9MkHMlOnzUI2ODNvymfKnd8OTX5fdMuNQgD3wyZCxZP
eaobV5aIweT4hSfDSppcX0zIG67fxwg5qjznkcrx/Jz8XBMv0tgfpQhI3Gnaewwa
x0zOY7jh8Cinkk99momsV11k+bG4NGxCML+wkeyngtA1CYXHoWbLk2P/ZX5HkC+s
ED3CvD7Pm3QxV92nIFLSt+L7bWPNVXdvSxPpLS+0dlJpZ+JxA6T6l7VT6SaavUtm
Cmc2Jkr5NPVD5SRjIvRTbwLMxrtqvAylGoR+7L0D6fGJaayLtGXdgyeRjwHLf2hV
4qgLAD2cyH8BaBA3ENrkam0R7JMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRh/wcb
YBaV5pzWdphcr+eJGOi3lzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Yjc2NjgzZmItZDQxZi00YmZkLWJhNzgtYjRiMjQ5MmFjZDFlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0B4I
MA0GCSqGSIb3DQEBCwUAA4IBAQAE0UJaI140W4zO1DYH5mHjBx+EA7q0ef+xM20e
xYrh1xDBXXZiNzwEJtSJIpNw8TSEEIZlv7uUgDqiezBIe2xwXlwoKL9bU6VBYqbF
3qNh1w8nlOy0O8BFEDuO25hQEXlVWdpAkCJ8HmYcfc+CU+vVPIxWXAEtWWlOfog1
jzvjAPZi+ImDDU6PJ2rhMQVfkCi3j731Wr8+p6E/pvXT5w7qAiDhpjFD732ZwAwd
3uBq+CnntHvnX8/wzxjSl5L0zkAUExHVB9zxx6gahFeUxKO60lmF50LlT4KsKaut
wA0yTPp/RQx2j6lgafgbm0OlDBvZkiiIj74xQdPjh8xEPkdf
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:46 2025 by rpki-client