Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa
File: 4c78114f-4347-44fe-aef1-32fc688c69b9.roa (raw, json)
Hash identifier: HFCvYtL9Pm0ywwhLOersSZO8gEQ7hWqAKpyCX201AaU=
Subject key identifier: ED:05:DF:40:74:15:04:7E:B9:10:4C:BA:60:BB:27:94:BE:21:74:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1409C6114B4A6A34549D70F40D1C3ABF698B2A39
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa
Signing time: Tue 05 Aug 2025 19:10:43 +0000
ROA not before: Tue 05 Aug 2025 19:10:43 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:09:c6:11:4b:4a:6a:34:54:9d:70:f4:0d:1c:3a:bf:69:8b:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:10:43 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=8008e6554eb98068e6998ab7283e4a27c0c457ad73292897c85519ac078aec49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:98:8a:2e:96:fa:08:38:37:a3:a1:ee:ae:
16:69:22:2f:76:48:ec:c5:e2:e2:58:60:3b:53:ea:
87:dc:2a:30:f7:14:67:ad:11:59:59:24:da:3f:61:
02:6a:9b:bf:82:28:bc:2d:e4:c7:b0:ef:43:85:5d:
94:6b:2b:d7:97:e0:70:60:80:31:b3:1e:b9:f9:ec:
18:76:c0:3f:07:fb:75:a9:fd:65:23:07:52:20:9d:
3d:57:69:dd:d4:1b:5e:4b:ee:da:2e:46:2d:6e:2b:
d6:f1:a9:90:b3:43:00:41:d5:10:aa:cb:75:4c:c1:
ec:0c:89:de:42:c5:0b:23:a3:5e:e2:2e:4d:eb:bd:
20:3c:8c:5a:8b:1e:0e:ea:73:36:bf:f6:ff:a9:f9:
5e:0c:c9:cc:51:e9:0e:80:66:95:8c:4f:1d:dd:90:
db:fd:33:68:42:15:50:3b:b0:63:c0:63:42:64:cc:
1f:14:58:86:7b:c0:c6:a8:0a:39:e8:8d:c8:a9:5c:
6c:78:66:6b:24:04:34:c3:3d:e7:7d:c7:46:d2:5f:
43:04:57:1a:8e:94:48:e5:8f:25:14:a9:db:e8:66:
7e:cd:42:75:1e:12:b3:de:5d:40:ef:7e:27:dd:bd:
33:c3:4e:22:cd:4e:60:a7:f2:e8:ea:d2:32:3f:80:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:DF:40:74:15:04:7E:B9:10:4C:BA:60:BB:27:94:BE:21:74:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c78114f-4347-44fe-aef1-32fc688c69b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8020::/48
Signature Algorithm: sha256WithRSAEncryption
9a:da:c2:13:a6:5c:e4:05:73:e7:fb:ea:c3:77:b3:0b:b1:59:
f3:4c:4d:37:8c:67:04:bf:5a:31:de:9d:e2:dc:b3:5c:57:57:
6a:6d:61:1c:5b:b1:a3:57:43:c4:8c:31:cc:d4:a1:30:04:b0:
9a:76:88:52:50:82:e9:3a:6a:ce:02:4c:c3:64:73:3a:f9:3b:
26:1e:74:5f:b1:fd:22:69:57:a1:e2:6c:84:f8:eb:32:31:65:
e6:a0:a1:68:31:0d:d1:74:b1:b4:80:20:ab:74:8d:52:97:de:
b5:c5:31:90:1c:e9:03:78:b4:aa:3d:55:c2:c2:66:6d:2a:88:
4e:cf:13:63:23:16:cb:c0:8d:79:ae:35:c0:c6:cb:4a:bd:96:
00:8f:62:ec:cf:85:42:40:4d:ed:52:9e:2e:9c:36:76:b3:f5:
a2:78:b9:d3:b0:47:25:b1:42:98:7c:78:ae:4e:ff:d8:2d:b5:
cc:8a:29:32:82:80:54:1e:cc:e1:13:67:fc:05:9e:a6:d5:be:
03:14:f6:df:87:82:c2:72:a5:61:92:85:0d:98:23:03:b4:fb:
3b:52:ae:2e:db:0b:e5:43:80:06:1a:55:cb:34:ab:64:a7:a2:
77:45:a7:7b:e2:a1:5b:ab:16:f2:83:6e:4d:70:9b:2f:3e:8a:
44:44:4b:55
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFAnGEUtKajRUnXD0DRw6v2mLKjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDUxOTEwNDNaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDgwMDhlNjU1NGViOTgwNjhlNjk5OGFiNzI4M2U0YTI3YzBjNDU3YWQ3MzI5
Mjg5N2M4NTUxOWFjMDc4YWVjNDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK0qmIoulvoIODejoe6uFmkiL3ZI7MXi4lhgO1Pqh9wqMPcUZ60RWVkk2j9h
Amqbv4IovC3kx7DvQ4VdlGsr15fgcGCAMbMeufnsGHbAPwf7dan9ZSMHUiCdPVdp
3dQbXkvu2i5GLW4r1vGpkLNDAEHVEKrLdUzB7AyJ3kLFCyOjXuIuTeu9IDyMWose
DupzNr/2/6n5XgzJzFHpDoBmlYxPHd2Q2/0zaEIVUDuwY8BjQmTMHxRYhnvAxqgK
OeiNyKlcbHhmayQENMM9533HRtJfQwRXGo6USOWPJRSp2+hmfs1CdR4Ss95dQO9+
J929M8NOIs1OYKfy6OrSMj+ArE0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTtBd9A
dBUEfrkQTLpguyeUviF0PTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGM3ODExNGYtNDM0Ny00NGZlLWFlZjEtMzJmYzY4OGM2OWI5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
IDANBgkqhkiG9w0BAQsFAAOCAQEAmtrCE6Zc5AVz5/vqw3ezC7FZ80xNN4xnBL9a
Md6d4tyzXFdXam1hHFuxo1dDxIwxzNShMASwmnaIUlCC6TpqzgJMw2RzOvk7Jh50
X7H9ImlXoeJshPjrMjFl5qChaDEN0XSxtIAgq3SNUpfetcUxkBzpA3i0qj1VwsJm
bSqITs8TYyMWy8CNea41wMbLSr2WAI9i7M+FQkBN7VKeLpw2drP1oni507BHJbFC
mHx4rk7/2C21zIopMoKAVB7M4RNn/AWeptW+AxT234eCwnKlYZKFDZgjA7T7O1Ku
LtsL5UOABhpVyzSrZKeid0Wne+KhW6sW8oNuTXCbLz6KRERLVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:06 2025 by rpki-client