Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa
File: e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa (raw, json)
Hash identifier: ++a+t5jSdOCfgZnfLQ0b/Aktk0hWg8K4jYKoq5N2zCA=
Subject key identifier: 2C:95:3E:82:D1:C7:68:3C:5D:ED:D1:84:EA:61:35:97:05:BF:DA:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46C9D1D7ECE7DA08DE24C2BF9FD3719B109E410E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa
Signing time: Mon 01 Sep 2025 20:40:55 +0000
ROA not before: Mon 01 Sep 2025 20:40:55 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c9:d1:d7:ec:e7:da:08:de:24:c2:bf:9f:d3:71:9b:10:9e:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:40:55 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=df903a1384af870a11ce7ba2b43161ef767813b1c25069870ef392f94425cb5f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:2b:47:60:fa:44:78:60:60:d0:95:b6:63:
2d:f1:eb:46:51:6e:e3:9e:66:23:38:fd:9f:5b:6c:
23:08:ff:75:38:f8:3a:36:6f:e1:58:c0:dd:f1:d5:
12:35:81:52:a0:c3:f1:5a:18:5a:db:5a:cb:a8:4a:
5d:6f:0a:16:0c:42:56:5c:60:97:1c:8a:4c:d1:6e:
d0:e9:ee:1d:b9:e9:ef:8c:3a:d0:57:80:45:95:b7:
64:55:c0:66:15:57:32:e1:04:a5:80:44:1a:b8:5f:
2e:58:1b:f0:cd:dc:9b:c0:c3:bc:fd:a4:f7:ab:93:
de:3b:7a:33:77:a4:d7:e1:85:b0:0d:14:e7:f6:72:
ac:5c:3d:c2:75:27:90:d1:7a:02:19:90:98:4e:06:
94:00:20:2d:e8:90:d1:a3:40:26:d1:f4:24:23:f6:
01:d2:a8:7c:50:8c:b1:52:f2:fd:0c:f0:8a:8d:59:
37:ea:64:cb:a5:a6:66:a3:f5:90:04:db:3e:b4:c2:
ae:98:9e:2a:d1:14:cc:bb:b5:48:e8:11:dd:47:6a:
4e:4f:21:d8:11:c2:99:a4:24:ee:24:c5:b5:26:d9:
6a:03:85:f6:7d:2d:48:d4:de:92:28:d9:a5:17:4e:
46:2e:3f:8c:9f:b7:53:75:52:ac:4f:81:d7:ec:8b:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:3E:82:D1:C7:68:3C:5D:ED:D1:84:EA:61:35:97:05:BF:DA:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e7efd861-8dc6-40c5-8713-0bcfdbed7c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:8000::/40
Signature Algorithm: sha256WithRSAEncryption
41:7e:25:04:2e:cc:b2:62:a9:43:b7:73:c1:79:fd:dd:17:97:
0c:dd:21:61:ac:c5:e9:c8:12:e3:c8:87:82:5a:8d:2b:c7:30:
3e:5a:fb:17:04:c6:65:dd:2e:7f:70:61:17:39:3f:49:ed:45:
ee:cc:08:75:55:28:c6:e1:d3:0b:09:3b:cd:a3:b4:b3:dd:50:
93:cf:7f:19:ea:75:31:de:55:5f:a0:26:c1:db:91:5c:51:92:
61:4c:61:95:0c:33:71:2b:b8:61:29:1d:a8:31:c4:98:ba:a3:
cd:eb:25:ed:41:98:7e:15:6a:cd:9e:25:d3:6d:8b:a9:43:dd:
bc:f5:7b:af:e0:d4:3b:60:45:e5:c0:72:6a:9e:7b:cc:6b:2d:
9e:dd:f6:d6:fa:b6:3e:e8:7e:fd:90:35:0d:69:c7:1f:49:7b:
33:c0:b2:a2:cd:44:6e:45:29:c8:67:8d:7e:69:55:f6:c4:f1:
06:4f:9b:15:28:e2:ef:6c:bc:a9:24:42:34:27:45:9c:e2:aa:
4f:d9:6c:c8:99:87:30:43:43:7b:af:76:48:bb:03:41:f9:17:
25:eb:eb:da:49:8e:64:ee:06:55:1d:29:fa:24:45:fa:f9:40:
bb:9f:6f:a9:67:90:a0:15:4d:a6:c0:9f:1b:a8:f8:ca:37:d8:
83:17:b2:88
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURsnR1+zn2gjeJMK/n9NxmxCeQQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMDQwNTVaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGRmOTAzYTEzODRhZjg3MGExMWNlN2JhMmI0MzE2MWVmNzY3ODEzYjFjMjUw
Njk4NzBlZjM5MmY5NDQyNWNiNWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiTK0dg+kR4YGDQlbZjLfHrRlFu455mIzj9n1tsIwj/dTj4OjZv4VjA3fHV
EjWBUqDD8VoYWttay6hKXW8KFgxCVlxglxyKTNFu0OnuHbnp74w60FeARZW3ZFXA
ZhVXMuEEpYBEGrhfLlgb8M3cm8DDvP2k96uT3jt6M3ek1+GFsA0U5/ZyrFw9wnUn
kNF6AhmQmE4GlAAgLeiQ0aNAJtH0JCP2AdKofFCMsVLy/Qzwio1ZN+pky6WmZqP1
kATbPrTCrpieKtEUzLu1SOgR3UdqTk8h2BHCmaQk7iTFtSbZagOF9n0tSNTekijZ
pRdORi4/jJ+3U3VSrE+B1+yLu6sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQslT6C
0cdoPF3t0YTqYTWXBb/aUjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTdlZmQ4NjEtOGRjNi00MGM1LTg3MTMtMGJjZmRiZWQ3YzJlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DqA
MA0GCSqGSIb3DQEBCwUAA4IBAQBBfiUELsyyYqlDt3PBef3dF5cM3SFhrMXpyBLj
yIeCWo0rxzA+WvsXBMZl3S5/cGEXOT9J7UXuzAh1VSjG4dMLCTvNo7Sz3VCTz38Z
6nUx3lVfoCbB25FcUZJhTGGVDDNxK7hhKR2oMcSYuqPN6yXtQZh+FWrNniXTbYup
Q9289Xuv4NQ7YEXlwHJqnnvMay2e3fbW+rY+6H79kDUNaccfSXszwLKizURuRSnI
Z41+aVX2xPEGT5sVKOLvbLypJEI0J0Wc4qpP2WzImYcwQ0N7r3ZIuwNB+Rcl6+va
SY5k7gZVHSn6JEX6+UC7n2+pZ5CgFU2mwJ8bqPjKN9iDF7KI
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:17:06 2025 by rpki-client