Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
File: decd4459-2e9b-442e-a3bd-6633fdd0250b.roa (raw, json)
Hash identifier: pj9gs/8K672lJ24WS/D3z7UVygE2Hla7L4syvCtPcio=
Subject key identifier: 65:92:14:17:57:1C:8E:42:FA:C8:7E:54:D5:09:72:0C:6A:95:1C:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FA579E969A22A5563D2E710E459C979C267A696
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
Signing time: Mon 01 Sep 2025 19:51:39 +0000
ROA not before: Mon 01 Sep 2025 19:51:39 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a5:79:e9:69:a2:2a:55:63:d2:e7:10:e4:59:c9:79:c2:67:a6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:51:39 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=55d3cc2c7905b8ab84279b516bd65f33e0ae84bd33a2830bf9a8f21b59615c6c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:b4:46:2c:0f:6e:79:dc:b3:5d:3f:5d:8e:
b8:88:a0:36:37:c9:a8:e7:dc:d1:98:a1:d1:7a:c2:
46:2f:1e:2d:32:1e:64:32:4a:7c:b4:cc:00:71:db:
fd:a2:6e:36:1c:ba:8c:fa:29:79:c0:c9:40:b6:e3:
db:a3:b7:14:9e:ec:60:c2:57:de:7b:38:9d:30:f6:
6f:a9:60:2c:8a:99:f6:36:8a:d2:98:01:a2:ae:f0:
99:7d:ef:bd:ec:17:3f:b9:a5:1d:39:63:69:fe:56:
81:6c:89:17:d3:75:51:79:df:28:93:a4:67:7e:e1:
c3:73:79:7e:f8:ed:b1:83:42:b0:62:53:8b:6e:30:
40:c0:61:d0:e2:32:ef:4d:58:1f:e8:67:e0:6c:0a:
8b:ac:8e:49:94:20:82:3a:17:e6:16:48:77:fe:74:
6b:29:8f:1d:6f:de:bc:e0:da:3a:d8:04:91:04:35:
83:d1:14:54:81:66:15:44:ce:02:ef:0e:80:7c:59:
59:53:4d:9b:ad:36:98:c3:23:ee:8d:c3:4b:8f:05:
47:ad:c2:f7:72:dc:a7:78:87:49:2a:6e:b3:ce:65:
94:c0:98:79:31:b9:5d:85:3e:48:a0:fe:3c:32:21:
c7:7b:0a:39:ac:91:b7:64:4a:35:0c:34:f0:29:db:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:14:17:57:1C:8E:42:FA:C8:7E:54:D5:09:72:0C:6A:95:1C:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a000::/40
Signature Algorithm: sha256WithRSAEncryption
71:3f:de:2a:92:b1:52:64:75:f5:e5:ec:e1:35:67:66:b8:18:
8b:aa:bb:66:c6:1a:48:53:81:eb:e7:70:c1:73:f4:68:9a:d3:
16:59:ff:05:35:9b:08:f9:59:53:56:aa:5a:d5:a5:c2:53:46:
62:d6:10:9c:30:d2:21:9d:19:c4:4d:89:64:c8:2f:84:15:93:
58:97:64:98:3b:e4:8d:ad:13:21:87:2a:22:79:36:ca:d5:b8:
3c:e8:3b:80:e6:31:9b:73:d2:21:a0:4b:9d:a2:6f:cb:07:ea:
80:53:62:b8:d2:b5:d3:ba:a1:93:f9:67:6c:ce:41:02:25:8b:
5c:8d:9a:2d:dd:bb:df:3d:2e:37:12:ee:64:05:66:9f:77:e6:
2b:16:b4:25:d7:f1:1d:30:de:ba:7d:fe:b7:35:a3:a2:9d:ef:
25:83:46:72:8f:42:c5:6a:8c:04:4f:41:a7:34:92:0a:9b:f7:
2f:d3:6c:21:96:58:aa:f9:92:f9:1f:3a:49:f3:fc:b2:7f:84:
53:63:d8:75:e5:ce:65:1f:6c:de:a1:24:f3:3f:00:b4:3b:5e:
05:10:21:a7:58:fa:2a:fa:25:af:0f:a1:a4:24:1b:77:6f:82:
4f:6b:8a:aa:9e:d3:e8:97:0c:97:bd:64:bb:6e:af:5f:8c:70:
05:7b:ab:2a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUH6V56WmiKlVj0ucQ5FnJecJnppYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDExOTUxMzlaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDU1ZDNjYzJjNzkwNWI4YWI4NDI3OWI1MTZiZDY1ZjMzZTBhZTg0YmQzM2Ey
ODMwYmY5YThmMjFiNTk2MTVjNmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVVtEYsD2553LNdP12OuIigNjfJqOfc0Zih0XrCRi8eLTIeZDJKfLTMAHHb
/aJuNhy6jPopecDJQLbj26O3FJ7sYMJX3ns4nTD2b6lgLIqZ9jaK0pgBoq7wmX3v
vewXP7mlHTljaf5WgWyJF9N1UXnfKJOkZ37hw3N5fvjtsYNCsGJTi24wQMBh0OIy
701YH+hn4GwKi6yOSZQggjoX5hZId/50aymPHW/evODaOtgEkQQ1g9EUVIFmFUTO
Au8OgHxZWVNNm602mMMj7o3DS48FR63C93Lcp3iHSSpus85llMCYeTG5XYU+SKD+
PDIhx3sKOayRt2RKNQw08Cnbef0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRlkhQX
VxyOQvrIflTVCXIMapUc9zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVjZDQ0NTktMmU5Yi00NDJlLWEzYmQtNjYzM2ZkZDAyNTBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HKg
MA0GCSqGSIb3DQEBCwUAA4IBAQBxP94qkrFSZHX15ezhNWdmuBiLqrtmxhpIU4Hr
53DBc/RomtMWWf8FNZsI+VlTVqpa1aXCU0Zi1hCcMNIhnRnETYlkyC+EFZNYl2SY
O+SNrRMhhyoieTbK1bg86DuA5jGbc9IhoEudom/LB+qAU2K40rXTuqGT+WdszkEC
JYtcjZot3bvfPS43Eu5kBWafd+YrFrQl1/EdMN66ff63NaOine8lg0Zyj0LFaowE
T0GnNJIKm/cv02whlliq+ZL5HzpJ8/yyf4RTY9h15c5lH2zeoSTzPwC0O14FECGn
WPoq+iWvD6GkJBt3b4JPa4qqntPolwyXvWS7bq9fjHAFe6sq
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:16:55 2025 by rpki-client