Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
File: 2c6881bd-10fc-4994-83fe-43244d2b078a.roa (raw, json)
Hash identifier: oRuqHvITUlX7xF65riiF8nF4OKc5q7IImmkV/MKDGTA=
Subject key identifier: 83:30:B0:5E:32:15:27:BC:4E:A2:3B:AE:45:72:6D:66:78:64:DF:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74D56C4640B0E6FDB38F0C1CFA530365CA419C3E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
Signing time: Tue 19 Aug 2025 17:00:06 +0000
ROA not before: Tue 19 Aug 2025 17:00:06 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d5:6c:46:40:b0:e6:fd:b3:8f:0c:1c:fa:53:03:65:ca:41:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:00:06 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=c5459f647bf492740263998d935b6086b2775019100aeaf24e074b258e3a42b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:3d:88:32:4c:07:1c:e5:f2:a3:40:8f:3a:
7b:57:51:9c:13:cf:9f:b9:c9:b2:ac:df:e6:ec:58:
7b:33:d4:ac:33:cd:75:18:fc:fe:e3:ff:39:51:7c:
44:7f:45:f1:d3:1e:8a:ff:40:5e:86:68:5b:67:2e:
c7:15:11:dd:7c:67:92:16:d5:be:ca:20:4a:1f:ef:
71:7e:01:30:1b:d4:8a:9b:17:68:ef:ed:84:1e:e5:
55:19:ed:f4:54:fd:87:ac:01:ae:96:d4:fb:21:9f:
31:d1:f4:b0:70:10:d9:b8:8d:a3:48:d1:c1:c3:8a:
15:7e:1e:7c:7c:31:79:f7:a4:0b:e7:4d:48:32:92:
67:98:03:5f:4f:20:1c:6a:0d:43:76:c2:d7:cc:a3:
f1:d0:ca:8c:e4:3c:a9:d0:bc:9c:b8:5e:b0:88:ef:
12:e3:6a:d3:26:cf:fe:1b:5b:93:f3:32:8c:f1:79:
aa:71:e4:16:55:cc:dd:48:f6:ce:57:ff:5c:e4:b8:
65:52:67:89:21:26:df:cb:32:04:eb:e6:c4:fd:cf:
59:f1:c0:87:3c:6e:8e:d0:09:0e:bf:41:28:b5:86:
fc:ea:d4:47:b0:86:72:22:b4:74:05:1d:14:f3:9f:
91:5b:94:c9:e8:b8:d1:1f:cf:96:db:07:75:71:8d:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:B0:5E:32:15:27:BC:4E:A2:3B:AE:45:72:6D:66:78:64:DF:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2c6881bd-10fc-4994-83fe-43244d2b078a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.80.0/20
Signature Algorithm: sha256WithRSAEncryption
09:e7:ac:e7:fc:de:08:6a:cf:4e:37:dd:ae:91:97:a3:3f:c3:
1d:22:a8:ba:12:a9:3e:29:68:4a:8d:89:df:96:ae:c1:fe:65:
d6:28:53:a8:b8:24:3b:ea:21:81:d9:c7:57:7e:45:8f:31:72:
08:74:a4:32:36:f9:de:e8:ff:47:fb:ad:5f:0a:f4:8b:b1:32:
81:ec:ac:70:a2:54:13:7a:fc:51:1d:1a:80:9d:fa:95:47:eb:
bd:eb:a1:a8:53:e8:f3:4e:9b:48:93:0b:b9:a8:b0:f9:20:69:
63:a1:71:57:c5:88:4b:19:c3:93:6b:dd:18:ac:ff:5f:13:9d:
77:90:dd:df:a6:15:1c:10:7e:ae:84:f2:47:76:09:28:ff:e6:
e4:06:95:f2:1c:f9:ad:7a:55:52:07:f2:17:6f:f6:1c:34:04:
7b:d3:24:03:c5:6b:ab:05:a3:02:81:bc:f9:99:8d:b9:1a:da:
c7:8f:67:a7:a9:d9:38:6d:a1:87:8b:1e:d2:ed:7f:87:1a:56:
54:b0:cd:54:f3:25:c0:f9:13:90:f2:55:9a:46:df:de:d1:fd:
37:0c:3d:cc:aa:36:04:8b:55:b5:da:71:39:a8:90:d4:5a:76:
81:78:b9:00:43:03:a0:22:c3:d7:7e:76:dc:07:26:36:47:4c:
28:0a:6b:d2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUdNVsRkCw5v2zjwwc+lMDZcpBnD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MTkxNzAwMDZaFw0yNTA5MjMyMzU5NTlaMHoxSTBHBgNV
BAUTQGM1NDU5ZjY0N2JmNDkyNzQwMjYzOTk4ZDkzNWI2MDg2YjI3NzUwMTkxMDBh
ZWFmMjRlMDc0YjI1OGUzYTQyYjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJi0PYgyTAcc5fKjQI86e1dRnBPPn7nJsqzf5uxYezPUrDPNdRj8/uP/OVF8
RH9F8dMeiv9AXoZoW2cuxxUR3XxnkhbVvsogSh/vcX4BMBvUipsXaO/thB7lVRnt
9FT9h6wBrpbU+yGfMdH0sHAQ2biNo0jRwcOKFX4efHwxefekC+dNSDKSZ5gDX08g
HGoNQ3bC18yj8dDKjOQ8qdC8nLhesIjvEuNq0ybP/htbk/MyjPF5qnHkFlXM3Uj2
zlf/XOS4ZVJniSEm38syBOvmxP3PWfHAhzxujtAJDr9BKLWG/OrUR7CGciK0dAUd
FPOfkVuUyei40R/PltsHdXGNGT0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSDMLBe
MhUnvE6iO65Fcm1meGTflTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmM2ODgxYmQtMTBmYy00OTk0LTgzZmUtNDMyNDRkMmIwNzhhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6JUDAN
BgkqhkiG9w0BAQsFAAOCAQEACees5/zeCGrPTjfdrpGXoz/DHSKouhKpPiloSo2J
35auwf5l1ihTqLgkO+ohgdnHV35FjzFyCHSkMjb53uj/R/utXwr0i7EygeyscKJU
E3r8UR0agJ36lUfrveuhqFPo806bSJMLuaiw+SBpY6FxV8WISxnDk2vdGKz/XxOd
d5Dd36YVHBB+roTyR3YJKP/m5AaV8hz5rXpVUgfyF2/2HDQEe9MkA8VrqwWjAoG8
+ZmNuRrax49np6nZOG2hh4se0u1/hxpWVLDNVPMlwPkTkPJVmkbf3tH9Nww9zKo2
BItVtdpxOaiQ1Fp2gXi5AEMDoCLD13523AcmNkdMKApr0g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:27 2025 by rpki-client