Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa
File: 51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa (raw, json)
Hash identifier: ZTcDP1mPLiN1nysujymGQd795WyEBqHQnfuCJS959OA=
Subject key identifier: EA:BE:1D:9B:03:D1:4F:DD:83:A0:25:04:18:A2:14:6F:05:22:95:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4058F1BE387F345366722134822661E3FAF7DF01
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa
Signing time: Fri 17 Oct 2025 23:20:16 +0000
ROA not before: Fri 17 Oct 2025 23:20:16 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:58:f1:be:38:7f:34:53:66:72:21:34:82:26:61:e3:fa:f7:df:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 17 23:20:16 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=7d60ce219d94658b73cec1d7d2df9e68bb92419f9f5a7d9c1a813a40dd357899, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:f1:c1:e9:ea:65:2e:55:65:45:b9:7f:91:
e8:50:b1:35:d3:bb:e0:a0:41:39:0c:a5:07:11:0d:
e1:47:e0:b9:c8:9e:e3:d7:07:84:c5:a5:c9:e5:6e:
48:67:60:e2:8d:e8:8e:6e:73:4a:09:4b:26:85:4f:
c4:cd:48:b8:18:6a:f2:2d:98:64:e7:d6:aa:83:fb:
52:39:13:9a:5e:34:6e:a2:14:fd:57:4b:5b:ae:d2:
ff:55:4f:fe:42:00:74:a4:29:06:a7:64:99:54:32:
95:2e:3b:c4:f6:f8:ef:aa:0d:4b:ba:87:37:37:61:
36:75:ed:75:cd:61:c1:38:10:6d:d7:22:a1:6b:31:
47:1c:ba:b4:79:c2:a5:4e:62:72:4e:91:62:53:d1:
04:c3:52:8b:fb:cb:e1:1e:9b:5d:87:78:bb:55:40:
ab:57:b9:45:c9:ad:db:50:78:8a:54:e6:a6:af:f6:
d2:b5:31:1d:62:79:22:34:b4:74:41:07:da:43:4f:
d0:89:6d:74:82:63:6a:83:87:fa:01:6b:de:49:d6:
be:71:06:ef:8e:8f:52:d4:46:58:a7:fe:d0:0d:be:
e3:06:08:ee:98:9f:ba:cb:d6:c4:4c:26:31:8a:00:
5d:50:c7:8f:c1:bc:40:e3:25:26:a4:b0:16:e2:de:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BE:1D:9B:03:D1:4F:DD:83:A0:25:04:18:A2:14:6F:05:22:95:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51b3d4ec-2ade-4aaa-b3ce-e1eb7028fdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:57:1b:76:c0:3d:14:a4:ef:ad:38:03:2e:a7:42:3d:34:8b:
b6:17:c3:ae:d6:3b:8a:e6:9e:16:c6:14:7d:04:e7:0e:db:45:
76:4d:f2:03:0b:9b:c6:ab:75:25:39:c2:37:0d:3e:da:c2:3b:
45:9d:37:80:26:2b:82:f9:fa:cc:a0:54:f9:33:e0:b8:26:da:
08:32:0a:53:eb:2a:fd:07:01:39:d6:32:28:0c:63:ac:c1:32:
2a:ef:e4:da:fd:72:e8:96:8e:83:81:cf:88:ba:f9:59:61:2a:
a0:bc:0b:7a:95:55:cc:7c:04:a5:5d:7b:52:50:ef:7c:d8:87:
78:90:7d:49:ec:8e:a2:4d:14:4c:6e:c5:57:c1:0e:12:1e:4d:
67:13:52:85:97:c5:76:2b:84:ae:de:4e:71:93:39:35:2e:88:
6d:ad:75:c6:41:cb:a8:68:7c:91:c4:8b:4b:10:37:92:28:eb:
b1:f3:fb:7c:7e:e9:47:6f:49:78:13:f7:f2:1b:72:5c:66:d8:
cf:bc:51:ce:f1:2d:9b:4f:c9:22:f5:d0:2c:04:ea:ea:4d:c4:
f4:d6:73:e2:55:20:f1:53:8d:0a:b3:e5:47:99:09:56:d2:b8:
d9:91:43:27:6e:16:8f:3f:dd:46:08:cd:5c:65:4b:0e:6c:e0:
48:5f:8c:b7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQFjxvjh/NFNmciE0giZh4/r33wEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTcyMzIwMTZaFw0yNTExMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkNjBjZTIxOWQ5NDY1OGI3M2NlYzFkN2QyZGY5ZTY4YmI5MjQxOWY5ZjVh
N2Q5YzFhODEzYTQwZGQzNTc4OTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGS8cHp6mUuVWVFuX+R6FCxNdO74KBBOQylBxEN4Ufgucie49cHhMWlyeVu
SGdg4o3ojm5zSglLJoVPxM1IuBhq8i2YZOfWqoP7UjkTml40bqIU/VdLW67S/1VP
/kIAdKQpBqdkmVQylS47xPb476oNS7qHNzdhNnXtdc1hwTgQbdcioWsxRxy6tHnC
pU5ick6RYlPRBMNSi/vL4R6bXYd4u1VAq1e5Rcmt21B4ilTmpq/20rUxHWJ5IjS0
dEEH2kNP0IltdIJjaoOH+gFr3knWvnEG746PUtRGWKf+0A2+4wYI7pifusvWxEwm
MYoAXVDHj8G8QOMlJqSwFuLe+30CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTqvh2b
A9FP3YOgJQQYohRvBSKV4DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTFiM2Q0ZWMtMmFkZS00YWFhLWIzY2UtZTFlYjcwMjhmZGI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hsg
MA0GCSqGSIb3DQEBCwUAA4IBAQAdVxt2wD0UpO+tOAMup0I9NIu2F8Ou1juK5p4W
xhR9BOcO20V2TfIDC5vGq3UlOcI3DT7awjtFnTeAJiuC+frMoFT5M+C4JtoIMgpT
6yr9BwE51jIoDGOswTIq7+Ta/XLolo6Dgc+IuvlZYSqgvAt6lVXMfASlXXtSUO98
2Id4kH1J7I6iTRRMbsVXwQ4SHk1nE1KFl8V2K4Su3k5xkzk1LohtrXXGQcuoaHyR
xItLEDeSKOux8/t8fulHb0l4E/fyG3JcZtjPvFHO8S2bT8ki9dAsBOrqTcT01nPi
VSDxU40Ks+VHmQlW0rjZkUMnbhaPP91GCM1cZUsObOBIX4y3
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:50 2025 by rpki-client