Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df59e31f-1e32-4e7a-a595-74adb3f93176.roa
File: df59e31f-1e32-4e7a-a595-74adb3f93176.roa (raw, json)
Hash identifier: eGfv2N2l3XR/AI3b0fgE0ru49ECo1AiXRzm1L3ODrys=
Subject key identifier: A0:C2:2F:F9:0C:5C:60:9B:AB:B5:B5:F7:12:9A:4D:C6:1D:58:C6:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6100B74C893B10059443FEC317B957FF74153486
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df59e31f-1e32-4e7a-a595-74adb3f93176.roa
Signing time: Mon 01 Sep 2025 20:10:21 +0000
ROA not before: Mon 01 Sep 2025 20:10:21 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:00:b7:4c:89:3b:10:05:94:43:fe:c3:17:b9:57:ff:74:15:34:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:21 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=c2fcd3f479ba9217e38e55ae34e2406346100fcaf43f3a8fc7609f8f0c453bd6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:86:59:2b:98:c7:92:70:07:32:e4:8b:43:
af:35:8a:d6:e9:7c:49:ed:87:8f:be:3c:33:6d:fb:
0f:07:4b:05:76:21:68:d1:af:47:e4:29:70:be:89:
2b:d1:20:d5:1e:9b:b7:fb:5c:1a:b5:6a:fc:c7:25:
c8:69:fd:a1:39:42:4d:85:64:e4:5a:77:6d:d0:91:
3e:1d:09:2b:86:a0:52:1b:26:8d:e7:91:32:02:58:
eb:5c:f8:1c:5f:2d:3d:e8:40:42:73:e9:28:df:42:
fb:26:8e:bd:5c:59:6b:81:51:de:c9:45:ab:88:df:
06:79:91:54:4c:fa:80:1b:6b:0a:a2:09:85:39:f3:
ae:e1:0b:5b:d5:ad:a1:1e:90:3e:a0:11:51:26:7b:
73:42:fa:48:a7:a2:81:23:b6:59:14:af:8d:8b:88:
31:b3:06:5e:97:15:d4:38:c8:a7:24:85:3d:55:2b:
98:29:02:5a:ce:3f:12:f0:4a:c4:18:ae:12:4f:c1:
85:1b:69:00:39:a1:35:0f:83:57:ba:d4:1e:2f:3b:
71:64:72:04:57:3f:c4:72:f9:47:6d:5d:1e:09:1d:
6a:9c:22:24:af:d3:3f:7f:90:63:24:8f:50:bd:f9:
a9:86:db:32:35:02:0a:15:4a:f7:f9:1b:60:31:3d:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:2F:F9:0C:5C:60:9B:AB:B5:B5:F7:12:9A:4D:C6:1D:58:C6:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/df59e31f-1e32-4e7a-a595-74adb3f93176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:88:70:31:f9:2b:b8:65:47:86:cf:2c:f3:b6:0e:bc:fd:e3:
af:59:35:15:3a:41:54:ab:b8:09:78:ef:63:07:fc:5c:d3:3e:
7f:f4:6b:60:c1:6c:0b:3a:05:8b:54:49:75:56:4c:fe:0d:8c:
19:5c:b2:fd:6a:c0:90:13:41:14:a8:88:80:16:ba:76:7b:2a:
cb:58:d3:a5:26:c4:13:c9:d7:7c:ef:39:78:2f:be:54:a5:72:
ab:45:4d:ab:66:b6:32:d2:a7:a6:86:fd:7d:24:db:a1:8a:33:
96:f4:ef:26:46:9c:65:3e:72:4e:53:a3:ce:30:86:52:f2:e0:
32:9f:cc:ee:f7:c5:ed:a6:f6:e8:f5:18:dc:3d:0b:98:b5:3c:
de:ef:96:a3:7a:3e:a5:a4:7f:07:f0:d4:6f:a5:fb:cc:e6:8e:
e9:22:1e:4c:0d:26:c4:6f:87:66:41:99:0b:bc:b9:6b:ed:35:
d0:9c:8e:fb:28:b7:76:ba:3f:11:ab:3e:67:a0:e7:02:1b:a0:
8d:78:b3:2d:50:8f:45:7e:fb:55:33:25:3f:7a:55:85:ab:f8:
06:be:8e:c1:1b:1e:f1:f0:d5:1b:b4:c7:44:f1:4c:e1:0a:43:
4c:fa:47:48:51:dd:08:cc:29:12:45:e8:c0:fe:3e:45:f8:7e:
d9:c9:fb:9a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYQC3TIk7EAWUQ/7DF7lX/3QVNIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMDEwMjFaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGMyZmNkM2Y0NzliYTkyMTdlMzhlNTVhZTM0ZTI0MDYzNDYxMDBmY2FmNDNm
M2E4ZmM3NjA5ZjhmMGM0NTNiZDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK7fhlkrmMeScAcy5ItDrzWK1ul8Se2Hj748M237DwdLBXYhaNGvR+QpcL6J
K9Eg1R6bt/tcGrVq/MclyGn9oTlCTYVk5Fp3bdCRPh0JK4agUhsmjeeRMgJY61z4
HF8tPehAQnPpKN9C+yaOvVxZa4FR3slFq4jfBnmRVEz6gBtrCqIJhTnzruELW9Wt
oR6QPqARUSZ7c0L6SKeigSO2WRSvjYuIMbMGXpcV1DjIpySFPVUrmCkCWs4/EvBK
xBiuEk/BhRtpADmhNQ+DV7rUHi87cWRyBFc/xHL5R21dHgkdapwiJK/TP3+QYySP
UL35qYbbMjUCChVK9/kbYDE9TZcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSgwi/5
DFxgm6u1tfcSmk3GHVjGtzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGY1OWUzMWYtMWUzMi00ZTdhLWE1OTUtNzRhZGIzZjkzMTc2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DHg
MA0GCSqGSIb3DQEBCwUAA4IBAQB/iHAx+Su4ZUeGzyzztg68/eOvWTUVOkFUq7gJ
eO9jB/xc0z5/9GtgwWwLOgWLVEl1Vkz+DYwZXLL9asCQE0EUqIiAFrp2eyrLWNOl
JsQTydd87zl4L75UpXKrRU2rZrYy0qemhv19JNuhijOW9O8mRpxlPnJOU6POMIZS
8uAyn8zu98Xtpvbo9RjcPQuYtTze75ajej6lpH8H8NRvpfvM5o7pIh5MDSbEb4dm
QZkLvLlr7TXQnI77KLd2uj8Rqz5noOcCG6CNeLMtUI9FfvtVMyU/elWFq/gGvo7B
Gx7x8NUbtMdE8UzhCkNM+kdIUd0IzCkSRejA/j5F+H7Zyfua
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:07 2025 by rpki-client