Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
File: ef1c587f-7016-4879-9f71-ad8ce780a8da.roa (raw, json)
Hash identifier: R++jlJlWF5pJYUbgzY+BVxLuDzSfRuAqDZglGQbrXn0=
Subject key identifier: 32:89:CE:A3:0E:1F:73:9C:AA:8C:1B:71:36:D7:A6:F3:75:5A:8F:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CF632B5F402DF2C348EE27493516502EEA5D5A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
Signing time: Fri 24 Oct 2025 00:20:35 +0000
ROA not before: Fri 24 Oct 2025 00:20:35 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f6:32:b5:f4:02:df:2c:34:8e:e2:74:93:51:65:02:ee:a5:d5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 24 00:20:35 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=1f4c32be95023e21ffe9e82411672d9cc9666546791fd93aa7cb6f6ff51b3952, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:29:97:02:5f:b8:e8:16:e7:c5:c9:9a:ff:
64:ff:e8:29:75:c1:74:a4:7c:0f:a3:d2:54:1e:45:
6a:7b:aa:e3:2d:7d:df:a9:a8:a5:1c:2b:25:c0:04:
a3:9d:07:09:e8:e6:b1:8e:15:64:2f:b4:bc:fc:f2:
72:5f:96:3f:ff:f5:6f:cc:7c:05:4d:52:b6:c6:49:
10:17:63:8d:e9:09:d2:c3:76:1c:9a:b2:fb:e6:6a:
73:12:72:81:42:fc:4d:5d:9d:5c:89:ff:94:c1:c9:
2d:0c:2a:f2:b2:37:cf:c8:db:3e:7d:7d:ce:b0:18:
d6:92:76:60:91:83:0c:31:8d:2e:1e:52:0d:66:ed:
91:97:5d:c0:79:ed:35:81:56:22:f0:5f:f6:bd:bb:
5f:41:d4:31:b8:d1:93:df:2f:45:69:1a:ee:32:ae:
aa:87:c7:a1:01:04:bc:66:a5:b7:d4:58:35:28:bc:
dd:2f:cf:fa:9a:fc:37:e8:9e:97:9f:d1:b5:c3:5d:
0b:de:08:94:ec:fc:a3:32:b6:98:09:d7:1d:67:20:
d4:a7:73:e2:70:29:ef:65:6f:dd:86:6e:34:28:05:
77:d3:4b:b6:b6:d7:fa:5a:7f:7a:1a:56:de:a2:d9:
af:33:6d:32:8f:66:ae:08:ee:4d:85:cb:a3:8b:10:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:CE:A3:0E:1F:73:9C:AA:8C:1B:71:36:D7:A6:F3:75:5A:8F:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef1c587f-7016-4879-9f71-ad8ce780a8da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
25:e5:7d:cb:b7:db:f7:c2:e2:4e:cc:bd:0c:e9:bd:e8:35:01:
77:8e:54:10:db:5c:dc:8e:7c:d0:5a:a4:7d:a5:0a:2c:25:52:
2d:2a:c6:0e:ab:08:92:b8:21:ae:08:04:db:27:c8:d9:15:25:
85:49:ca:8b:45:bf:9c:80:75:1d:5b:e6:ee:da:6a:74:a7:c3:
09:20:19:73:1d:55:a0:ae:d1:c4:d1:e6:58:4e:fa:86:65:9e:
46:25:1f:cb:7c:26:ac:d9:fc:d5:df:0f:4e:12:61:af:eb:12:
14:fb:f6:94:b8:59:a4:0b:85:69:31:55:a0:5d:c8:d6:4b:78:
b2:09:89:67:cf:59:b0:12:61:8f:99:56:01:0c:a6:d5:66:be:
b4:8b:91:8a:e1:cd:50:db:93:1a:f1:99:62:cd:9d:e7:06:9f:
57:87:85:8b:46:d6:48:e7:42:cf:9d:d6:af:b4:61:13:9a:3b:
a3:0f:43:97:02:e2:9f:74:80:72:53:23:4c:e6:50:57:38:36:
55:ee:4b:26:66:71:37:04:c9:99:93:b2:4a:6c:ec:ff:95:a3:
29:07:83:c9:c8:30:b0:3e:d5:53:43:48:ac:b0:bf:02:93:67:
18:5f:1b:20:15:a7:18:ba:14:b0:61:22:dd:e9:31:a6:d4:e5:
4e:e6:8b:5c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbPYytfQC3yw0juJ0k1FlAu6l1aMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjQwMDIwMzVaFw0yNTExMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQDFmNGMzMmJlOTUwMjNlMjFmZmU5ZTgyNDExNjcyZDljYzk2NjY1NDY3OTFm
ZDkzYWE3Y2I2ZjZmZjUxYjM5NTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIIKZcCX7joFufFyZr/ZP/oKXXBdKR8D6PSVB5Fanuq4y1936mopRwrJcAE
o50HCejmsY4VZC+0vPzycl+WP//1b8x8BU1StsZJEBdjjekJ0sN2HJqy++ZqcxJy
gUL8TV2dXIn/lMHJLQwq8rI3z8jbPn19zrAY1pJ2YJGDDDGNLh5SDWbtkZddwHnt
NYFWIvBf9r27X0HUMbjRk98vRWka7jKuqofHoQEEvGalt9RYNSi83S/P+pr8N+ie
l5/RtcNdC94IlOz8ozK2mAnXHWcg1Kdz4nAp72Vv3YZuNCgFd9NLtrbX+lp/ehpW
3qLZrzNtMo9mrgjuTYXLo4sQiZECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQyic6j
Dh9znKqMG3E216bzdVqPhTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWYxYzU4N2YtNzAxNi00ODc5LTlmNzEtYWQ4Y2U3ODBhOGRhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0G1g
wDANBgkqhkiG9w0BAQsFAAOCAQEAJeV9y7fb98LiTsy9DOm96DUBd45UENtc3I58
0FqkfaUKLCVSLSrGDqsIkrghrggE2yfI2RUlhUnKi0W/nIB1HVvm7tpqdKfDCSAZ
cx1VoK7RxNHmWE76hmWeRiUfy3wmrNn81d8PThJhr+sSFPv2lLhZpAuFaTFVoF3I
1kt4sgmJZ89ZsBJhj5lWAQym1Wa+tIuRiuHNUNuTGvGZYs2d5wafV4eFi0bWSOdC
z53Wr7RhE5o7ow9DlwLin3SAclMjTOZQVzg2Ve5LJmZxNwTJmZOySmzs/5WjKQeD
ycgwsD7VU0NIrLC/ApNnGF8bIBWnGLoUsGEi3ekxptTlTuaLXA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:30 2025 by rpki-client