Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
File: 4a799a36-6e8c-4ca7-be23-5388518d8f95.roa (raw, json)
Hash identifier: VAxcuVq9JL1UPgEzsUN6LgWGTb3V8dnM20v+RljnhnA=
Subject key identifier: EA:CC:B6:A3:70:B5:83:33:FE:88:EE:2F:92:8E:71:14:C5:76:12:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62EAC489CBAF37C5C43401FD1B114053D8A1EE82
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
Signing time: Mon 29 Sep 2025 15:24:41 +0000
ROA not before: Mon 29 Sep 2025 15:24:41 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ea:c4:89:cb:af:37:c5:c4:34:01:fd:1b:11:40:53:d8:a1:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:41 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=a569d7be2e396e9689b28751e630ff87c55a5fadf8ec4fd821659fb8ed571dc9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:45:06:b0:ff:c0:a4:31:71:b6:db:86:f2:
3f:4c:ed:f0:d9:4b:15:f2:00:23:da:36:34:1d:b3:
bc:a4:84:7b:38:d5:25:9c:b6:06:40:83:d5:fc:4d:
d3:30:3d:b3:b7:48:1e:ca:4a:53:53:2f:3e:f6:1b:
fd:f6:97:22:e0:6e:08:69:b0:da:0e:7f:9b:d1:70:
ff:7b:d7:3a:65:46:a7:32:75:13:7a:83:be:47:79:
b4:35:8e:8c:a9:ab:a5:b0:0e:cf:ca:5d:2c:23:27:
77:ee:04:44:cc:4f:91:48:fb:85:3d:63:6c:ef:99:
ce:85:93:4e:eb:b1:bb:5e:3b:f1:2a:b7:f2:ef:0c:
81:fd:9b:3d:11:61:37:53:7b:c1:e9:4f:92:11:5d:
9b:a9:ab:ec:b8:c5:fc:d0:d8:87:1a:1f:34:82:71:
51:3b:0a:1d:42:2e:80:c6:24:76:0b:74:ae:83:73:
8d:6a:40:95:bb:a1:69:e9:b6:51:18:83:b8:1c:f3:
70:8b:b7:93:64:5f:14:38:9e:0b:36:47:72:69:ba:
1f:88:5f:7a:8a:fc:ac:4c:a6:7a:55:73:a0:20:0c:
de:cc:12:66:47:63:7a:bd:ad:2f:c1:8e:07:2f:8c:
ff:e5:72:b5:4b:08:ac:55:57:9c:ec:ba:58:6d:e0:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:B6:A3:70:B5:83:33:FE:88:EE:2F:92:8E:71:14:C5:76:12:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f::/36
Signature Algorithm: sha256WithRSAEncryption
0c:70:09:91:37:27:8e:29:c1:1b:f8:10:90:78:bd:3c:f3:06:
05:23:a1:54:d2:a7:84:6f:79:9b:01:3f:57:c7:04:05:95:93:
44:de:b5:01:75:26:66:c8:c1:b6:56:3e:bd:c2:c8:c7:b5:1e:
c9:16:a5:19:ea:ca:fb:25:01:a4:47:d3:63:91:2e:87:72:3f:
ec:6c:59:43:0e:11:38:c7:4f:88:c0:42:5e:1a:9d:6e:2f:8d:
22:85:8f:6b:aa:53:35:66:ba:a5:56:b4:73:88:7b:01:b9:32:
07:04:62:ab:f7:b3:fc:0d:58:fe:f6:96:c7:28:d8:5a:b2:83:
31:e2:52:2f:4f:ba:c4:25:bd:bd:20:8c:92:1b:30:6a:23:9f:
c8:8a:0f:1d:e6:2f:f5:ff:59:0e:6e:e2:67:21:64:e2:51:42:
fc:4e:07:e1:3e:c2:4c:c6:bb:ca:b0:5b:39:03:a2:4a:e7:bf:
bc:4c:6e:fc:fb:d3:e3:1c:ae:38:c4:ae:e8:9d:e7:1e:b4:eb:
02:94:8f:0d:45:91:6a:30:07:23:06:6f:66:34:34:f9:b0:12:
ba:2a:ab:f2:63:4f:8e:83:2d:4e:57:d8:8f:51:c5:4c:32:57:
68:24:00:5f:58:a1:21:e5:0f:55:9a:16:86:04:4b:cd:1e:a0:
fa:da:d3:88
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYurEicuvN8XENAH9GxFAU9ih7oIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjkxNTI0NDFaFw0yNTExMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGE1NjlkN2JlMmUzOTZlOTY4OWIyODc1MWU2MzBmZjg3YzU1YTVmYWRmOGVj
NGZkODIxNjU5ZmI4ZWQ1NzFkYzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKCVRQaw/8CkMXG224byP0zt8NlLFfIAI9o2NB2zvKSEezjVJZy2BkCD1fxN
0zA9s7dIHspKU1MvPvYb/faXIuBuCGmw2g5/m9Fw/3vXOmVGpzJ1E3qDvkd5tDWO
jKmrpbAOz8pdLCMnd+4ERMxPkUj7hT1jbO+ZzoWTTuuxu1478Sq38u8Mgf2bPRFh
N1N7welPkhFdm6mr7LjF/NDYhxofNIJxUTsKHUIugMYkdgt0roNzjWpAlbuhaem2
URiDuBzzcIu3k2RfFDieCzZHcmm6H4hfeor8rEymelVzoCAM3swSZkdjer2tL8GO
By+M/+VytUsIrFVXnOy6WG3g5ksCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTqzLaj
cLWDM/6I7i+SjnEUxXYS6jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGE3OTlhMzYtNmU4Yy00Y2E3LWJlMjMtNTM4ODUxOGQ4Zjk1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0B8A
MA0GCSqGSIb3DQEBCwUAA4IBAQAMcAmRNyeOKcEb+BCQeL088wYFI6FU0qeEb3mb
AT9XxwQFlZNE3rUBdSZmyMG2Vj69wsjHtR7JFqUZ6sr7JQGkR9NjkS6Hcj/sbFlD
DhE4x0+IwEJeGp1uL40ihY9rqlM1ZrqlVrRziHsBuTIHBGKr97P8DVj+9pbHKNha
soMx4lIvT7rEJb29IIySGzBqI5/Iig8d5i/1/1kObuJnIWTiUUL8TgfhPsJMxrvK
sFs5A6JK57+8TG78+9PjHK44xK7onecetOsClI8NRZFqMAcjBm9mNDT5sBK6Kqvy
Y0+Ogy1OV9iPUcVMMldoJABfWKEh5Q9VmhaGBEvNHqD62tOI
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:03 2025 by rpki-client