Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
File: fbd3a3af-f307-4148-9e34-70199540a838.roa (raw, json)
Hash identifier: etP9AXSIM6bxtLahze3AMW5NnvXOl2U0+DvpVUoGbUQ=
Subject key identifier: AB:4F:CA:BE:0D:1B:37:B2:57:7E:5C:84:51:1F:AB:7A:6F:A6:47:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 58D96796C42863ACD54912AED31B22577FE6A489
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
Signing time: Tue 21 Oct 2025 14:40:03 +0000
ROA not before: Tue 21 Oct 2025 14:40:03 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:67:96:c4:28:63:ac:d5:49:12:ae:d3:1b:22:57:7f:e6:a4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:40:03 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=9a7c37824d5037098fa26efdb33226efd13b12b822fed29c1ac8d12ff7f7f1d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:39:35:c7:45:6d:16:e0:ed:5d:6c:25:a4:
4b:0d:00:a2:14:bb:b4:fe:cf:99:be:98:82:9c:48:
c1:53:3c:01:61:eb:98:5b:9e:a4:3d:c8:be:d5:f1:
61:d7:e6:07:c2:97:4a:37:73:2e:88:cb:c7:b7:d0:
60:a9:5a:80:21:37:0a:11:cc:84:86:8d:b2:15:a9:
8c:4b:80:41:f0:17:98:3e:7b:51:36:fe:9b:61:26:
64:20:d8:da:a9:f8:7d:f8:e9:35:7c:0f:73:a6:ad:
a4:cd:e5:c2:da:be:0c:03:18:a9:58:1c:af:b2:be:
e9:68:55:09:33:a9:a7:7f:31:c5:8f:7f:27:2a:67:
a5:8c:46:22:e6:e7:4c:75:99:84:35:c1:d1:c7:ec:
a6:c1:c4:e5:8c:5f:da:4b:c3:1c:0c:11:e6:c3:50:
8c:c2:1d:52:62:b8:9f:97:bb:57:b4:8c:6f:0b:f6:
8f:31:e3:b0:64:17:4c:3c:4a:6a:81:f3:e9:c6:a3:
56:d0:14:ba:a8:48:58:d5:85:4e:d3:34:08:24:a8:
a0:b8:5a:0a:8d:fd:c3:70:cf:bd:c0:09:af:b4:99:
59:0d:15:e6:35:a3:a2:af:45:dc:ae:e7:db:e1:37:
f4:34:ad:7a:21:89:e8:72:37:b9:5c:3b:e2:a9:da:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4F:CA:BE:0D:1B:37:B2:57:7E:5C:84:51:1F:AB:7A:6F:A6:47:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:86:db:6f:9b:57:3d:51:78:7f:2c:0b:d3:e8:b8:65:ca:26:
a3:f2:24:3f:8a:ef:9c:6d:27:bb:82:ff:f6:0e:71:71:04:cc:
4d:12:74:40:c8:30:f2:46:40:e3:02:44:95:80:14:5c:ea:97:
e9:24:cc:57:de:cf:d4:93:91:de:d7:8e:dc:d8:25:45:fc:3c:
78:e9:b7:8c:de:30:03:bd:a9:bc:d3:1c:a3:a6:29:90:94:82:
c5:7b:93:7d:a7:8d:86:c7:a9:10:f7:78:cd:2c:85:df:02:32:
b7:45:e9:0d:86:9b:57:41:59:43:0f:76:7c:b9:86:c1:24:99:
ee:6e:97:4f:fa:c7:d3:ca:1a:f7:d7:67:e1:92:a7:f3:90:c9:
43:d6:2e:ec:d5:fa:ae:b3:40:9b:fd:fa:e2:78:69:d7:18:ec:
67:49:c9:80:e0:c8:a5:54:49:4c:a1:02:d2:c3:73:dd:23:06:
79:bd:0c:55:29:f1:a6:8f:a5:a2:d1:63:13:29:95:0e:a8:5b:
bd:b4:05:7c:08:be:50:b6:0c:15:58:77:1f:4d:40:6a:6b:0d:
4d:8d:08:8d:13:4e:2c:48:ab:33:75:03:b7:41:fa:85:7d:b4:
66:85:a9:06:7e:43:35:c2:9b:9c:53:dd:4d:fc:40:5e:f8:51:
2d:28:22:d1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWNlnlsQoY6zVSRKu0xsiV3/mpIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExNDQwMDNaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDlhN2MzNzgyNGQ1MDM3MDk4ZmEyNmVmZGIzMzIyNmVmZDEzYjEyYjgyMmZl
ZDI5YzFhYzhkMTJmZjdmN2YxZDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKnyOTXHRW0W4O1dbCWkSw0AohS7tP7Pmb6YgpxIwVM8AWHrmFuepD3IvtXx
YdfmB8KXSjdzLojLx7fQYKlagCE3ChHMhIaNshWpjEuAQfAXmD57UTb+m2EmZCDY
2qn4ffjpNXwPc6atpM3lwtq+DAMYqVgcr7K+6WhVCTOpp38xxY9/JypnpYxGIubn
THWZhDXB0cfspsHE5Yxf2kvDHAwR5sNQjMIdUmK4n5e7V7SMbwv2jzHjsGQXTDxK
aoHz6cajVtAUuqhIWNWFTtM0CCSooLhaCo39w3DPvcAJr7SZWQ0V5jWjoq9F3K7n
2+E39DSteiGJ6HI3uVw74qnammcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSrT8q+
DRs3sld+XIRRH6t6b6ZHGjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmJkM2EzYWYtZjMwNy00MTQ4LTllMzQtNzAxOTk1NDBhODM4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Diw
MA0GCSqGSIb3DQEBCwUAA4IBAQBchttvm1c9UXh/LAvT6Lhlyiaj8iQ/iu+cbSe7
gv/2DnFxBMxNEnRAyDDyRkDjAkSVgBRc6pfpJMxX3s/Uk5He147c2CVF/Dx46beM
3jADvam80xyjpimQlILFe5N9p42Gx6kQ93jNLIXfAjK3RekNhptXQVlDD3Z8uYbB
JJnubpdP+sfTyhr312fhkqfzkMlD1i7s1fqus0Cb/frieGnXGOxnScmA4MilVElM
oQLSw3PdIwZ5vQxVKfGmj6Wi0WMTKZUOqFu9tAV8CL5QtgwVWHcfTUBqaw1NjQiN
E04sSKszdQO3QfqFfbRmhakGfkM1wpucU91N/EBe+FEtKCLR
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:20 2025 by rpki-client