Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
File: 48b510e0-0d59-48d3-96c5-ddb87c118e43.roa (raw, json)
Hash identifier: SU/9BOTgJjhZEaig0rHMYl3NgdNdjNR88GDoRECaQPo=
Subject key identifier: 60:ED:D1:B7:C1:76:AD:90:99:AA:13:82:ED:DA:69:DD:D3:34:30:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EF29B94D6944F92F4110021AABF04956CA5D42F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
Signing time: Tue 05 Aug 2025 18:41:45 +0000
ROA not before: Tue 05 Aug 2025 18:41:45 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f2:9b:94:d6:94:4f:92:f4:11:00:21:aa:bf:04:95:6c:a5:d4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:41:45 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=7f49d28305f2a9b6d9a4655f03c575168ab5a27eda57fa9dae06301e9336f180, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:c0:ed:d9:ee:d0:dd:35:9d:43:6a:cc:a0:
95:76:17:18:7c:36:b0:e1:d7:4b:89:11:19:00:d0:
ea:62:f1:19:e4:cd:41:a6:fb:a1:3a:42:9e:71:43:
0d:73:72:2b:9a:63:79:98:da:8b:39:6c:22:a0:a9:
68:c4:ea:53:24:3f:19:17:ec:82:f1:d1:49:6e:5c:
fe:49:4f:64:e6:6e:56:fd:5b:f9:e8:a6:aa:84:de:
2c:9e:72:46:ce:dc:52:a7:e0:9d:e7:ac:ec:aa:9d:
39:57:79:f6:84:4f:f2:fe:4d:a7:8d:a4:49:ca:91:
18:05:e5:f6:20:bb:f1:14:db:71:ae:8b:5f:08:b5:
a7:69:aa:53:90:f1:e0:9b:6b:40:32:fb:f1:6c:f6:
8a:1d:c7:0e:f6:9a:82:f6:e5:e1:bd:9c:e8:52:40:
c9:1e:24:94:07:b8:a1:73:42:a1:d1:ef:09:48:83:
b4:7c:84:93:9e:95:a6:ea:c0:a8:f9:d2:2a:cf:bc:
d0:c3:8b:7e:42:5c:ac:87:83:4a:49:40:9b:78:d3:
76:46:73:27:1f:85:d1:58:db:a1:36:68:0a:06:9e:
ce:95:7e:49:84:b8:56:af:6f:51:bb:86:69:d7:8b:
5a:c2:4a:75:d2:06:13:58:e6:b6:06:ee:40:0e:2a:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:D1:B7:C1:76:AD:90:99:AA:13:82:ED:DA:69:DD:D3:34:30:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4020::/48
Signature Algorithm: sha256WithRSAEncryption
58:4a:5c:0d:4d:02:a0:a8:ba:4c:cb:fc:d5:d1:ef:f6:4c:e1:
35:cf:dd:38:c9:e3:3b:2a:70:18:99:ee:31:28:3b:be:bf:19:
75:5b:de:75:e5:c0:a1:5b:f4:e9:4f:89:a8:4b:6c:4c:cf:10:
b5:47:fc:3a:cd:f1:c0:81:fc:c6:b0:1f:18:15:da:27:0e:57:
5e:fe:8b:a2:c7:4a:75:bb:00:43:cb:c3:58:0a:2a:f9:42:c9:
95:72:23:89:9a:3c:3c:17:02:ba:86:31:55:58:d6:a9:1e:bb:
95:df:0e:d1:59:8b:36:a3:d8:f0:8f:e4:39:0e:a4:30:e4:40:
d0:a4:f1:31:0d:d7:b4:df:cf:2b:cb:db:26:39:91:1a:4d:29:
4d:7b:b3:06:fa:dd:be:94:84:08:7c:a6:41:d5:20:98:da:4e:
be:c0:bd:14:a4:87:af:6d:d7:38:77:62:bc:a7:54:3d:15:b8:
30:43:ef:29:85:8d:d0:3f:bd:3a:a9:ea:6e:6c:3d:54:51:00:
88:20:5a:87:d5:eb:18:f2:73:5f:66:f5:72:f8:e8:db:4f:1a:
20:a9:57:01:9d:0e:4e:f7:7b:c1:e5:27:1c:6a:fd:22:50:3c:
85:f7:ec:e0:e8:69:6c:d7:7a:8b:2c:88:76:56:1b:e3:f8:b6:
57:07:f3:09
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHvKblNaUT5L0EQAhqr8ElWyl1C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDUxODQxNDVaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDdmNDlkMjgzMDVmMmE5YjZkOWE0NjU1ZjAzYzU3NTE2OGFiNWEyN2VkYTU3
ZmE5ZGFlMDYzMDFlOTMzNmYxODAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMSQwO3Z7tDdNZ1DasyglXYXGHw2sOHXS4kRGQDQ6mLxGeTNQab7oTpCnnFD
DXNyK5pjeZjaizlsIqCpaMTqUyQ/GRfsgvHRSW5c/klPZOZuVv1b+eimqoTeLJ5y
Rs7cUqfgnees7KqdOVd59oRP8v5Np42kScqRGAXl9iC78RTbca6LXwi1p2mqU5Dx
4JtrQDL78Wz2ih3HDvaagvbl4b2c6FJAyR4klAe4oXNCodHvCUiDtHyEk56VpurA
qPnSKs+80MOLfkJcrIeDSklAm3jTdkZzJx+F0VjboTZoCgaezpV+SYS4Vq9vUbuG
adeLWsJKddIGE1jmtgbuQA4qKAUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRg7dG3
wXatkJmqE4Lt2mnd0zQwizAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDhiNTEwZTAtMGQ1OS00OGQzLTk2YzUtZGRiODdjMTE4ZTQzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA
IDANBgkqhkiG9w0BAQsFAAOCAQEAWEpcDU0CoKi6TMv81dHv9kzhNc/dOMnjOypw
GJnuMSg7vr8ZdVvedeXAoVv06U+JqEtsTM8QtUf8Os3xwIH8xrAfGBXaJw5XXv6L
osdKdbsAQ8vDWAoq+ULJlXIjiZo8PBcCuoYxVVjWqR67ld8O0VmLNqPY8I/kOQ6k
MORA0KTxMQ3XtN/PK8vbJjmRGk0pTXuzBvrdvpSECHymQdUgmNpOvsC9FKSHr23X
OHdivKdUPRW4MEPvKYWN0D+9Oqnqbmw9VFEAiCBah9XrGPJzX2b1cvjo208aIKlX
AZ0OTvd7weUnHGr9IlA8hffs4OhpbNd6iyyIdlYb4/i2VwfzCQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:34 2025 by rpki-client