Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
File: 4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa (raw, json)
Hash identifier: rKOONt1OFlY4Sefsejy74II9Lu6wMZVgz+RoL0yqBN4=
Subject key identifier: DF:64:84:F3:8E:EA:A7:8E:26:AC:3F:2F:1F:CB:96:47:2E:79:E5:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34E575D4C7E4F4E50CBC0F6B432D2428D155386C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
Signing time: Tue 19 Aug 2025 17:01:23 +0000
ROA not before: Tue 19 Aug 2025 17:01:23 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e5:75:d4:c7:e4:f4:e5:0c:bc:0f:6b:43:2d:24:28:d1:55:38:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:01:23 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=29693917381689a50ddb893aa9015869de278959f46a19b68c63fd5bdb70b9b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:2e:f6:52:1c:f6:a3:08:3a:ff:14:33:7b:
4e:af:cb:fb:7f:5f:17:82:97:f7:cb:83:dc:a0:7f:
87:40:de:d7:15:e8:e7:be:08:6f:54:52:d8:d6:68:
05:64:80:b9:d9:67:94:fa:55:9e:75:e3:ca:14:cf:
32:82:82:10:5a:e1:bc:62:73:cb:31:da:1f:b2:4a:
7d:ec:64:3b:29:5c:e1:a7:2f:6b:e3:05:47:7d:ca:
ca:92:2f:6e:e0:e4:21:74:1f:ac:0f:1a:fa:7e:c0:
8b:a5:86:e0:c7:4f:e1:58:14:ae:41:24:d4:5e:4d:
60:3c:de:d5:75:fe:87:a8:90:be:d3:e0:12:f3:55:
34:b4:b9:60:f7:35:4a:5b:c2:d8:5d:0f:78:90:bb:
15:6d:25:28:8f:94:8d:f8:1d:f6:5c:f9:80:15:fc:
e6:34:f5:9f:27:48:e1:6c:69:74:1d:e0:b3:88:e8:
92:cb:b7:6a:77:7e:2a:9e:5a:03:19:c4:19:bf:e3:
8f:74:38:24:0f:ee:b2:b9:1f:88:07:7b:35:be:e5:
fb:5d:6e:c3:3f:74:d3:45:81:7d:36:8a:ff:18:03:
ff:d4:4d:40:3a:47:a9:d7:b7:0e:50:6a:ed:db:65:
69:ad:83:8b:78:0b:45:a4:c8:d9:d0:06:db:97:e1:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:84:F3:8E:EA:A7:8E:26:AC:3F:2F:1F:CB:96:47:2E:79:E5:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4dd31163-2ad7-49f5-a24d-2ea4170bb05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.240.0/20
Signature Algorithm: sha256WithRSAEncryption
15:37:a6:1c:f4:8d:a2:35:ea:4b:d2:75:43:4f:21:c6:88:03:
d5:94:95:79:a2:83:85:8d:89:ba:05:a7:cb:5a:e7:29:6a:2a:
38:bc:ee:6b:05:0b:31:f8:74:d8:3a:14:0e:d0:40:4a:1e:be:
82:74:5e:cc:39:17:a6:aa:df:31:ac:4c:1c:28:95:50:a0:17:
c1:d4:a4:c7:64:6e:72:5a:46:65:ca:40:22:01:06:88:50:d1:
dd:e3:8a:2b:1f:c0:1c:f3:61:72:94:8c:fd:76:ee:5f:97:e2:
ff:28:17:66:95:8a:73:29:f7:13:36:4e:d8:88:fb:8a:95:a9:
64:21:bb:7d:67:ef:15:1c:26:1f:cb:a1:7a:28:11:db:d6:ef:
8a:ad:f4:bd:d5:2e:fd:7b:53:6e:13:43:6b:5a:c5:32:49:56:
95:f3:1b:c0:d4:aa:60:67:50:ba:90:06:b4:54:fa:8d:ad:92:
b4:a6:7e:2d:da:2e:f0:c6:92:62:eb:93:1c:5c:b8:ea:a2:c1:
87:b9:fb:54:7e:1f:17:5d:be:63:9c:47:80:e2:ef:49:33:3b:
14:ee:36:98:b4:54:a3:26:92:f6:72:1d:58:5b:cc:08:13:d2:
e5:7f:64:29:6e:18:1c:38:9e:89:5f:96:48:27:59:86:03:c2:
43:3c:81:f8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNOV11Mfk9OUMvA9rQy0kKNFVOGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MTkxNzAxMjNaFw0yNTA5MjMyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5NjkzOTE3MzgxNjg5YTUwZGRiODkzYWE5MDE1ODY5ZGUyNzg5NTlmNDZh
MTliNjhjNjNmZDViZGI3MGI5YjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMS2LvZSHPajCDr/FDN7Tq/L+39fF4KX98uD3KB/h0De1xXo574Ib1RS2NZo
BWSAudlnlPpVnnXjyhTPMoKCEFrhvGJzyzHaH7JKfexkOylc4acva+MFR33KypIv
buDkIXQfrA8a+n7Ai6WG4MdP4VgUrkEk1F5NYDze1XX+h6iQvtPgEvNVNLS5YPc1
SlvC2F0PeJC7FW0lKI+Ujfgd9lz5gBX85jT1nydI4WxpdB3gs4joksu3and+Kp5a
AxnEGb/jj3Q4JA/usrkfiAd7Nb7l+11uwz9000WBfTaK/xgD/9RNQDpHqde3DlBq
7dtlaa2Di3gLRaTI2dAG25fhj08CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTfZITz
juqnjiasPy8fy5ZHLnnlbzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGRkMzExNjMtMmFkNy00OWY1LWEyNGQtMmVhNDE3MGJiMDVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC6J8DAN
BgkqhkiG9w0BAQsFAAOCAQEAFTemHPSNojXqS9J1Q08hxogD1ZSVeaKDhY2JugWn
y1rnKWoqOLzuawULMfh02DoUDtBASh6+gnRezDkXpqrfMaxMHCiVUKAXwdSkx2Ru
clpGZcpAIgEGiFDR3eOKKx/AHPNhcpSM/XbuX5fi/ygXZpWKcyn3EzZO2Ij7ipWp
ZCG7fWfvFRwmH8uheigR29bviq30vdUu/XtTbhNDa1rFMklWlfMbwNSqYGdQupAG
tFT6ja2StKZ+Ldou8MaSYuuTHFy46qLBh7n7VH4fF12+Y5xHgOLvSTM7FO42mLRU
oyaS9nIdWFvMCBPS5X9kKW4YHDieiV+WSCdZhgPCQzyB+A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:51:46 2025 by rpki-client