Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa
File: fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa (raw, json)
Hash identifier: B9XwWzkqYDILwmgxFOjD+ZRc1r0EfiJ3/vP5ZXASgo0=
Subject key identifier: A5:5D:EC:61:2F:60:8B:32:E6:27:89:78:13:06:67:0B:B8:58:CB:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73BCFB7D3371D11246945DF3AD8026506FFE6ED1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa
Signing time: Tue 21 Oct 2025 13:30:13 +0000
ROA not before: Tue 21 Oct 2025 13:30:13 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bc:fb:7d:33:71:d1:12:46:94:5d:f3:ad:80:26:50:6f:fe:6e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:30:13 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=984a2550c3e712d63fd334687e169ef7927d954ee769ad831e9e61f7e7812bac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:60:a7:da:95:5a:ae:1a:79:53:5c:76:2e:
66:ee:f5:97:c0:1c:44:c5:a8:2f:9b:ba:08:97:aa:
8d:57:13:4a:56:eb:dc:fe:79:c2:7f:5a:55:78:10:
01:08:51:ec:1e:5c:43:55:5c:ef:a0:d9:ee:95:af:
63:49:69:95:a0:f2:5d:95:df:00:1c:2a:92:b9:68:
25:d0:0b:23:29:54:0b:48:21:64:08:22:46:d9:e3:
87:33:ec:84:e6:ef:38:b3:20:94:08:ff:cf:3d:2b:
b4:1b:30:24:7e:f4:58:a1:9e:c5:e9:87:13:73:c2:
be:d3:94:0c:4b:9d:1a:09:af:f9:34:ee:2d:6d:ef:
7b:70:6d:e1:03:23:31:16:cc:cc:15:9d:1d:e2:d6:
1c:16:4d:be:54:a5:2e:dc:2d:53:c3:68:46:a4:4e:
73:38:a3:a7:d0:93:79:2a:63:fa:12:eb:71:e5:71:
aa:ad:8c:01:a4:95:4b:51:9f:a9:6b:8a:4d:4e:83:
81:1e:f6:db:65:0e:da:87:de:a7:61:ca:1b:b8:1d:
e0:83:a8:1f:78:cd:9d:cc:4d:54:0a:54:2f:03:a4:
43:ca:5c:0a:d2:58:d3:c8:3e:d0:6e:27:53:e7:ca:
1c:33:8b:57:81:14:b9:c6:c1:4d:26:fe:c5:13:45:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:EC:61:2F:60:8B:32:E6:27:89:78:13:06:67:0B:B8:58:CB:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb455f5d-6ce6-4373-b5bc-1c1e034a148a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4060::/48
Signature Algorithm: sha256WithRSAEncryption
46:1d:60:a0:c2:0e:41:46:16:07:13:99:0e:ad:91:de:00:d5:
d3:f3:7c:61:6a:f9:ca:e5:b8:61:25:c9:16:d7:5c:ec:51:4b:
14:99:ff:8f:de:18:8d:ba:10:90:fb:00:97:ec:94:a6:4c:3c:
9e:07:94:d9:0f:88:ff:d6:5c:53:bb:c0:40:98:b8:0c:01:c6:
eb:19:e0:50:6d:1a:e1:53:b0:bd:97:1d:ce:da:ba:cf:b6:be:
8e:13:0c:02:52:eb:1b:fc:80:36:69:9e:59:9b:d8:0c:29:3e:
5f:40:ba:28:68:23:96:0c:c5:6e:0e:03:ee:33:9b:44:16:c8:
e4:33:67:f1:19:12:40:2c:1f:e9:da:d5:d6:6c:af:a6:f1:d7:
db:cb:86:55:b6:d1:34:6d:0a:81:11:14:5e:6c:f6:95:a6:ff:
16:fd:d1:b5:63:de:be:10:00:fb:1b:b2:31:fe:d3:e4:db:80:
e1:e2:cd:b7:03:ce:54:30:f6:71:62:21:9b:ce:0c:81:44:f1:
1c:c8:fa:8c:52:74:99:23:fa:31:46:1d:d0:a3:b3:c0:0c:37:
c5:9e:2c:00:75:c3:a9:e6:8f:78:74:e5:9a:74:d8:76:d5:2e:
fd:02:34:1c:c6:b1:5e:36:60:a3:f1:a7:92:6a:3d:c0:69:c7:
e9:3a:5a:39
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUc7z7fTNx0RJGlF3zrYAmUG/+btEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzMwMTNaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk4NGEyNTUwYzNlNzEyZDYzZmQzMzQ2ODdlMTY5ZWY3OTI3ZDk1NGVlNzY5
YWQ4MzFlOWU2MWY3ZTc4MTJiYWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAODRYKfalVquGnlTXHYuZu71l8AcRMWoL5u6CJeqjVcTSlbr3P55wn9aVXgQ
AQhR7B5cQ1Vc76DZ7pWvY0lplaDyXZXfABwqkrloJdALIylUC0ghZAgiRtnjhzPs
hObvOLMglAj/zz0rtBswJH70WKGexemHE3PCvtOUDEudGgmv+TTuLW3ve3Bt4QMj
MRbMzBWdHeLWHBZNvlSlLtwtU8NoRqROczijp9CTeSpj+hLrceVxqq2MAaSVS1Gf
qWuKTU6DgR7222UO2ofep2HKG7gd4IOoH3jNncxNVApULwOkQ8pcCtJY08g+0G4n
U+fKHDOLV4EUucbBTSb+xRNFQnsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSlXexh
L2CLMuYniXgTBmcLuFjLfTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmI0NTVmNWQtNmNlNi00MzczLWI1YmMtMWMxZTAzNGExNDhhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA
YDANBgkqhkiG9w0BAQsFAAOCAQEARh1goMIOQUYWBxOZDq2R3gDV0/N8YWr5yuW4
YSXJFtdc7FFLFJn/j94YjboQkPsAl+yUpkw8ngeU2Q+I/9ZcU7vAQJi4DAHG6xng
UG0a4VOwvZcdztq6z7a+jhMMAlLrG/yANmmeWZvYDCk+X0C6KGgjlgzFbg4D7jOb
RBbI5DNn8RkSQCwf6drV1myvpvHX28uGVbbRNG0KgREUXmz2lab/Fv3RtWPevhAA
+xuyMf7T5NuA4eLNtwPOVDD2cWIhm84MgUTxHMj6jFJ0mSP6MUYd0KOzwAw3xZ4s
AHXDqeaPeHTlmnTYdtUu/QI0HMaxXjZgo/Gnkmo9wGnH6TpaOQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:28 2025 by rpki-client