Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
File: 356f05f3-9814-4715-9f58-bf044bf5d10f.roa (raw, json)
Hash identifier: Isfe4OeJc9NTzVUeFTEtdx9+oQCwg/soa6eK+aG1fzI=
Subject key identifier: 83:8A:26:04:6C:B1:CE:A6:94:A7:AE:F8:5F:88:65:AE:11:7D:82:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 723443D4B8D282B5ADEC8C36B67CB81EFB342D43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
Signing time: Mon 06 Oct 2025 18:00:55 +0000
ROA not before: Mon 06 Oct 2025 18:00:55 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:34:43:d4:b8:d2:82:b5:ad:ec:8c:36:b6:7c:b8:1e:fb:34:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:55 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=051898c1ee8acc372bfb006e7369f3548bc2f9b54bdb00f7c653102becea62a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:14:77:08:f1:98:6d:6c:a9:55:9e:88:9c:
e6:95:0b:1c:ff:a4:fc:68:e4:5f:3c:c9:1f:f9:81:
71:ba:0b:ea:2d:75:00:2d:b4:24:a9:d6:ad:95:71:
75:45:93:48:dd:86:4c:d6:d6:50:5d:09:01:0b:87:
f7:e3:98:f5:bb:8f:9f:70:c3:34:ab:bd:d9:b9:83:
02:db:31:99:14:09:f0:73:27:fb:fe:58:d7:e1:cb:
fa:e6:00:00:14:cd:02:77:4e:4d:fb:c0:4c:7c:e1:
c6:b0:2b:1c:8f:d4:94:4a:50:f7:93:80:67:a1:e2:
3b:df:ae:f8:16:00:98:78:5d:9a:ec:e8:d5:d3:d2:
23:9c:96:55:a3:85:0a:d3:79:18:f9:29:55:1e:b3:
0d:96:f9:ba:81:fd:8e:53:e8:a4:d4:53:3f:6f:72:
a7:6a:11:09:8f:05:7b:12:35:57:39:3e:29:3d:17:
70:cd:3c:6b:0a:4c:bf:f2:e3:09:80:2c:b9:e3:ba:
f1:73:9d:ba:14:25:0e:83:b1:8b:50:bc:d2:f4:ee:
0a:e9:f3:e6:6f:86:41:6e:03:a4:11:4a:ae:d2:66:
e2:46:73:8c:24:45:c7:8f:73:c0:2c:9a:db:73:76:
04:dd:a1:eb:9e:3a:d7:18:5f:25:91:61:7e:a4:02:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:26:04:6C:B1:CE:A6:94:A7:AE:F8:5F:88:65:AE:11:7D:82:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/356f05f3-9814-4715-9f58-bf044bf5d10f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:880::/46
Signature Algorithm: sha256WithRSAEncryption
33:0a:d6:99:4e:79:c6:b3:5c:47:ca:97:0c:91:d0:d5:5d:71:
73:32:7a:f4:52:c5:eb:19:4a:b4:51:5d:ec:30:76:25:0f:c5:
74:54:8f:01:9f:e9:3c:a1:82:89:10:32:25:0b:27:df:93:04:
9c:aa:44:b1:1f:bb:93:7a:05:1e:49:00:e9:0c:25:fe:5e:0a:
21:e6:25:68:11:ce:99:c5:b0:2b:f6:a2:06:08:eb:2a:91:f8:
7a:52:b1:76:ec:c9:cd:5b:46:39:c1:0f:bf:98:03:ed:8a:d6:
08:bc:3a:06:46:51:1f:87:06:83:93:03:4d:35:68:52:23:91:
cb:46:2a:dc:2d:3c:1e:e9:fd:6d:18:07:55:46:52:b3:58:16:
b6:7a:ce:7e:61:05:c5:a1:93:24:ff:9e:95:c0:8d:0c:33:fa:
3c:54:fa:2f:c9:31:21:24:9c:4b:62:ef:de:29:99:4b:4f:2f:
4d:0c:8d:3f:46:36:43:33:05:20:ac:01:0d:3f:34:eb:96:be:
23:72:98:bb:50:58:21:fe:0e:35:cc:0d:f2:d4:74:d6:33:18:
da:c3:11:b8:b2:cf:43:b7:9f:cc:4a:13:e1:bd:ea:49:5a:c5:
ac:98:d1:7e:f0:83:f1:1b:ee:a3:b8:d8:e3:cf:29:73:0a:fa:
9e:6f:88:9a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcjRD1LjSgrWt7Iw2tny4Hvs0LUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxODAwNTVaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDA1MTg5OGMxZWU4YWNjMzcyYmZiMDA2ZTczNjlmMzU0OGJjMmY5YjU0YmRi
MDBmN2M2NTMxMDJiZWNlYTYyYTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFiFHcI8ZhtbKlVnoic5pULHP+k/GjkXzzJH/mBcboL6i11AC20JKnWrZVx
dUWTSN2GTNbWUF0JAQuH9+OY9buPn3DDNKu92bmDAtsxmRQJ8HMn+/5Y1+HL+uYA
ABTNAndOTfvATHzhxrArHI/UlEpQ95OAZ6HiO9+u+BYAmHhdmuzo1dPSI5yWVaOF
CtN5GPkpVR6zDZb5uoH9jlPopNRTP29yp2oRCY8FexI1Vzk+KT0XcM08awpMv/Lj
CYAsueO68XOduhQlDoOxi1C80vTuCunz5m+GQW4DpBFKrtJm4kZzjCRFx49zwCya
23N2BN2h65461xhfJZFhfqQCkqsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSDiiYE
bLHOppSnrvhfiGWuEX2C8DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzU2ZjA1ZjMtOTgxNC00NzE1LTlmNTgtYmYwNDRiZjVkMTBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HMI
gDANBgkqhkiG9w0BAQsFAAOCAQEAMwrWmU55xrNcR8qXDJHQ1V1xczJ69FLF6xlK
tFFd7DB2JQ/FdFSPAZ/pPKGCiRAyJQsn35MEnKpEsR+7k3oFHkkA6Qwl/l4KIeYl
aBHOmcWwK/aiBgjrKpH4elKxduzJzVtGOcEPv5gD7YrWCLw6BkZRH4cGg5MDTTVo
UiORy0Yq3C08Hun9bRgHVUZSs1gWtnrOfmEFxaGTJP+elcCNDDP6PFT6L8kxISSc
S2Lv3imZS08vTQyNP0Y2QzMFIKwBDT8065a+I3KYu1BYIf4ONcwN8tR01jMY2sMR
uLLPQ7efzEoT4b3qSVrFrJjRfvCD8Rvuo7jY488pcwr6nm+Img==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:27 2025 by rpki-client