Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
File: e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa (raw, json)
Hash identifier: Zkh3t4kZ/shJJKOf1gKnMN2RZ41qFQQcXEfctHrK8IA=
Subject key identifier: E6:2E:0D:E6:11:04:4E:E6:C9:F5:F5:27:97:73:2A:72:5C:4F:77:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32C515320C583CF928CAB379660A066B965302AB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
Signing time: Tue 21 Oct 2025 14:00:35 +0000
ROA not before: Tue 21 Oct 2025 14:00:35 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c5:15:32:0c:58:3c:f9:28:ca:b3:79:66:0a:06:6b:96:53:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:00:35 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a66f4d586f36df62401ce0ac88b0358ca09e9337a8f84e3a78c8d6ce688f32f7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:9a:16:a7:6c:c5:9e:9b:3c:e1:b3:5c:15:
dc:f2:d5:95:19:b2:bf:6f:17:78:d7:6f:52:09:2f:
ad:d1:3f:c5:40:ba:52:54:15:e7:bf:8c:10:a4:20:
1e:5f:55:69:8e:2a:dc:12:b0:46:a5:79:8d:58:c0:
fe:a7:34:ce:f2:60:a0:75:d9:8f:32:bb:f3:23:03:
b5:98:66:0f:ad:ef:a6:f6:d2:e9:a6:b4:4c:0f:52:
19:8b:6d:40:2a:c7:d2:fe:bb:b0:40:8f:f0:32:6f:
99:c7:2f:a4:b0:02:39:dc:0d:bf:70:60:70:d1:08:
1d:9f:af:34:f7:61:8f:01:e3:7e:22:c3:13:2e:bf:
bb:b0:bc:ef:14:19:09:e4:29:64:f7:68:f4:65:35:
3b:86:70:ea:79:2b:51:2e:1d:31:35:ae:df:0f:d8:
58:7d:59:c6:a5:d1:d2:78:bb:76:20:80:d1:cb:1b:
e8:18:0e:00:02:4a:59:3a:7a:b1:d2:28:26:fa:08:
df:7f:52:e3:fc:e4:91:de:e8:88:5d:81:ec:54:e9:
fa:2a:ec:5a:3b:60:0d:fc:4a:43:f9:42:6c:0a:7a:
70:4f:7e:a1:c1:20:ea:f6:e5:1e:f3:c1:af:2c:4c:
e7:ff:32:dd:8a:ca:c4:af:07:3a:7a:f3:d7:02:e2:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:0D:E6:11:04:4E:E6:C9:F5:F5:27:97:73:2A:72:5C:4F:77:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e05048c0-7751-4ec4-b891-a3583dbdc9fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/35
Signature Algorithm: sha256WithRSAEncryption
20:4d:70:16:57:5a:ca:14:dc:02:34:b5:66:3b:a6:1f:3a:e0:
8a:9d:93:3c:9a:86:9a:b8:bb:ad:ed:dd:f8:32:3c:48:15:eb:
37:da:9d:14:c0:ff:a6:67:6b:5c:23:4c:d6:49:16:97:07:df:
7b:a0:19:c9:e9:d4:c7:12:a2:d4:97:3f:4f:cc:6d:b3:81:07:
77:f4:74:4b:78:f8:4a:e2:48:0f:67:06:5d:7d:2d:c7:91:15:
46:d8:04:d9:16:e9:56:10:b8:73:fc:b8:93:de:01:8a:4a:b7:
cc:c1:8d:4d:9c:32:c0:86:5f:1b:62:9b:93:82:27:2c:d5:41:
67:23:aa:67:b9:28:0f:e5:62:ce:a7:92:9f:08:ed:72:81:29:
e4:6b:90:e1:a1:18:28:e6:45:76:8d:69:f4:1b:63:5a:6f:d0:
f5:33:8b:3a:e4:c6:6e:0a:ed:b2:74:70:c9:09:14:08:2c:b8:
c9:dc:40:c2:45:02:d4:a3:2d:09:c5:04:28:8f:5e:ae:05:d0:
7f:53:be:9b:0b:f6:24:80:48:25:7f:b5:29:b1:4b:15:63:00:
e1:03:db:87:1f:22:cd:7e:91:2d:c7:29:a6:5e:aa:f5:3d:59:
ef:32:bf:04:5f:68:68:ee:48:67:36:9a:75:ab:7c:9d:3c:58:
49:7f:92:c2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMsUVMgxYPPkoyrN5ZgoGa5ZTAqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDAwMzVaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGE2NmY0ZDU4NmYzNmRmNjI0MDFjZTBhYzg4YjAzNThjYTA5ZTkzMzdhOGY4
NGUzYTc4YzhkNmNlNjg4ZjMyZjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFdmhanbMWemzzhs1wV3PLVlRmyv28XeNdvUgkvrdE/xUC6UlQV57+MEKQg
Hl9VaY4q3BKwRqV5jVjA/qc0zvJgoHXZjzK78yMDtZhmD63vpvbS6aa0TA9SGYtt
QCrH0v67sECP8DJvmccvpLACOdwNv3BgcNEIHZ+vNPdhjwHjfiLDEy6/u7C87xQZ
CeQpZPdo9GU1O4Zw6nkrUS4dMTWu3w/YWH1ZxqXR0ni7diCA0csb6BgOAAJKWTp6
sdIoJvoI339S4/zkkd7oiF2B7FTp+irsWjtgDfxKQ/lCbAp6cE9+ocEg6vblHvPB
ryxM5/8y3YrKxK8HOnrz1wLiSV8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTmLg3m
EQRO5sn19SeXcypyXE93zjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTA1MDQ4YzAtNzc1MS00ZWM0LWI4OTEtYTM1ODNkYmRjOWZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSoF0BgA
MA0GCSqGSIb3DQEBCwUAA4IBAQAgTXAWV1rKFNwCNLVmO6YfOuCKnZM8moaauLut
7d34MjxIFes32p0UwP+mZ2tcI0zWSRaXB997oBnJ6dTHEqLUlz9PzG2zgQd39HRL
ePhK4kgPZwZdfS3HkRVG2ATZFulWELhz/LiT3gGKSrfMwY1NnDLAhl8bYpuTgics
1UFnI6pnuSgP5WLOp5KfCO1ygSnka5DhoRgo5kV2jWn0G2Nab9D1M4s65MZuCu2y
dHDJCRQILLjJ3EDCRQLUoy0JxQQoj16uBdB/U76bC/YkgEglf7UpsUsVYwDhA9uH
HyLNfpEtxymmXqr1PVnvMr8EX2ho7khnNpp1q3ydPFhJf5LC
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:19:30 2025 by rpki-client