Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f30fb38-8f14-4df2-b72d-7f286b4912a7.roa
File: 4f30fb38-8f14-4df2-b72d-7f286b4912a7.roa (raw, json)
Hash identifier: nR8Alqosaz+ObcL17VWyA897R3oY2DtUvFKvWXms6jU=
Subject key identifier: 4D:00:A4:5B:D0:70:60:98:0A:9A:80:18:7D:7F:D8:91:15:E3:2D:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2CDE5FF85F4B4C4CAE7D2C2B5F4BB13EC2E36E70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f30fb38-8f14-4df2-b72d-7f286b4912a7.roa
Signing time: Mon 06 Oct 2025 17:50:53 +0000
ROA not before: Mon 06 Oct 2025 17:50:53 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:de:5f:f8:5f:4b:4c:4c:ae:7d:2c:2b:5f:4b:b1:3e:c2:e3:6e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:53 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=2eb6ae8358ebcbdbf23b791fe8ee20f1b8772c26207e04320ea3ed58d877d088, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:fc:99:72:29:9e:9e:19:44:f7:d6:bc:5c:
8a:a1:ac:df:b6:2f:8a:05:af:29:6b:d1:6a:80:3c:
2b:88:f9:c9:e8:b2:35:cb:34:41:fd:bf:0b:52:cf:
75:66:c6:6c:a5:a9:10:66:8d:7a:be:1b:f6:cd:5e:
83:a8:54:ae:90:b0:79:3e:09:fc:6d:5d:ee:a0:2c:
cc:43:b4:93:fb:9d:69:af:c8:a9:2a:fa:ef:a5:d7:
28:ce:72:f0:0c:d5:50:10:5a:1f:4b:87:24:52:44:
b5:6f:d8:49:f2:19:ef:e1:aa:9c:56:7e:a4:9c:0c:
37:3f:af:e1:aa:d9:66:bd:8d:9a:17:2c:05:48:55:
0e:d1:be:58:6c:1d:ac:30:a4:44:05:62:fe:84:3c:
ca:24:63:6f:5d:da:4a:07:c3:f6:7e:b4:76:1c:b6:
35:c7:f6:1b:21:84:81:9b:6c:4c:60:f4:e0:90:1b:
e7:1e:99:6f:0f:2c:c3:70:1e:54:98:ff:79:d2:74:
72:d7:03:24:10:66:db:fa:d6:1c:90:82:b6:d6:33:
4d:14:27:c3:20:6e:f8:19:77:35:55:5e:08:36:99:
6f:0b:9b:8b:db:3e:ca:2b:b6:e6:88:be:52:b2:9a:
3c:2b:02:8e:33:25:66:ad:8a:a0:ff:dc:17:b0:48:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:A4:5B:D0:70:60:98:0A:9A:80:18:7D:7F:D8:91:15:E3:2D:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f30fb38-8f14-4df2-b72d-7f286b4912a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
ac:2c:0f:05:3d:4e:ba:0b:83:c3:90:d2:b8:e3:82:d8:fe:a1:
c5:21:7f:f7:c0:33:7c:35:c6:fa:e0:e5:14:6c:6f:d5:53:7f:
f4:d5:e1:0b:e9:f4:04:f2:38:68:6f:36:fe:2b:0f:63:e1:f0:
52:e2:4b:19:a8:f7:b7:29:59:50:b8:4f:7e:7a:da:40:a5:e8:
54:a4:29:a1:42:7f:b8:f5:56:a6:e2:ee:9a:c1:4e:c9:3c:b7:
a0:ff:20:4e:b7:ae:4b:b2:b6:2c:0f:35:eb:bc:d4:1a:44:c2:
63:7b:1b:ea:f0:e2:1e:91:07:d4:1e:70:91:aa:aa:1c:36:3c:
a8:a4:20:85:30:d4:e4:95:ac:42:b9:d6:67:e6:cb:da:76:e2:
ca:09:db:95:2f:79:c6:13:6d:48:66:c8:be:8c:7c:d6:bd:51:
93:65:93:a3:fa:b9:93:ec:a7:57:0c:86:b9:15:20:3f:bc:8f:
a2:43:5e:c5:48:25:22:f7:c5:69:80:a0:f4:f9:31:cf:e6:63:
5f:6f:72:f0:ef:7e:3e:06:4b:03:31:2c:1b:2a:33:56:99:ff:
21:e1:41:78:7d:e2:85:e4:4f:da:d9:d4:dd:4c:a7:26:71:82:
c6:aa:24:94:5b:25:69:37:a9:a8:fc:d2:ac:9c:d6:8f:21:ee:
4d:20:54:4c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULN5f+F9LTEyufSwrX0uxPsLjbnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxNzUwNTNaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDJlYjZhZTgzNThlYmNiZGJmMjNiNzkxZmU4ZWUyMGYxYjg3NzJjMjYyMDdl
MDQzMjBlYTNlZDU4ZDg3N2QwODgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM5D/JlyKZ6eGUT31rxciqGs37YvigWvKWvRaoA8K4j5yeiyNcs0Qf2/C1LP
dWbGbKWpEGaNer4b9s1eg6hUrpCweT4J/G1d7qAszEO0k/udaa/IqSr676XXKM5y
8AzVUBBaH0uHJFJEtW/YSfIZ7+GqnFZ+pJwMNz+v4arZZr2NmhcsBUhVDtG+WGwd
rDCkRAVi/oQ8yiRjb13aSgfD9n60dhy2Ncf2GyGEgZtsTGD04JAb5x6Zbw8sw3Ae
VJj/edJ0ctcDJBBm2/rWHJCCttYzTRQnwyBu+Bl3NVVeCDaZbwubi9s+yiu25oi+
UrKaPCsCjjMlZq2KoP/cF7BIaK8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRNAKRb
0HBgmAqagBh9f9iRFeMt6jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGYzMGZiMzgtOGYxNC00ZGYyLWI3MmQtN2YyODZiNDkxMmE3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H2g
wDANBgkqhkiG9w0BAQsFAAOCAQEArCwPBT1OuguDw5DSuOOC2P6hxSF/98AzfDXG
+uDlFGxv1VN/9NXhC+n0BPI4aG82/isPY+HwUuJLGaj3tylZULhPfnraQKXoVKQp
oUJ/uPVWpuLumsFOyTy3oP8gTreuS7K2LA8167zUGkTCY3sb6vDiHpEH1B5wkaqq
HDY8qKQghTDU5JWsQrnWZ+bL2nbiygnblS95xhNtSGbIvox81r1Rk2WTo/q5k+yn
VwyGuRUgP7yPokNexUglIvfFaYCg9Pkxz+ZjX29y8O9+PgZLAzEsGyozVpn/IeFB
eH3iheRP2tnU3UynJnGCxqoklFslaTepqPzSrJzWjyHuTSBUTA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:32 2025 by rpki-client