Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56f73c89-ca1b-4059-833a-0cf950dd7221.roa
File: 56f73c89-ca1b-4059-833a-0cf950dd7221.roa (raw, json)
Hash identifier: XnOsq8MI+o+6PeL1XrsOycosVRRAY+DhSP14rjykGH0=
Subject key identifier: FD:48:4A:15:61:35:BE:1A:E6:A0:72:20:9A:65:D6:EA:CF:DD:23:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F0E56339EDC490E5A8D6DAC0707EAD599752E83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56f73c89-ca1b-4059-833a-0cf950dd7221.roa
Signing time: Mon 06 Oct 2025 17:40:10 +0000
ROA not before: Mon 06 Oct 2025 17:40:10 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0e:56:33:9e:dc:49:0e:5a:8d:6d:ac:07:07:ea:d5:99:75:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:40:10 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=eef0e6ec12fab27ba8dc54ea2733ba87bfd02d1cd40738b131d410287aa68c3e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:2f:5b:5c:12:85:5b:8c:9c:6c:b1:fc:16:
99:76:6a:e1:86:c6:2c:ea:0b:dc:0b:85:30:6b:77:
26:21:ea:1d:29:27:08:9e:54:a6:01:24:b9:13:04:
23:1e:2b:43:05:5d:1d:bc:ca:40:33:77:48:ea:8e:
88:8a:19:0d:67:05:87:74:ea:8a:3f:d0:f5:22:e1:
bc:15:ca:8e:7c:11:de:a3:55:d8:09:66:75:b6:f7:
3a:9c:db:94:75:4d:0b:b6:54:a2:5f:06:76:a4:43:
4e:2c:c9:9e:ab:28:09:98:d7:b0:27:a0:4a:91:b7:
a3:c8:00:a2:35:0a:68:7b:c0:54:b8:61:5c:e4:d8:
60:e0:9a:91:b4:88:5f:15:eb:38:31:06:66:fe:11:
f3:9c:9c:d9:62:94:33:64:d1:7d:38:c0:53:da:59:
7e:42:e1:63:71:6b:da:4b:db:d6:2e:81:97:91:a0:
f9:03:b7:e8:1b:26:b7:4a:e4:a4:56:a1:1d:07:a4:
c0:39:fd:65:57:b4:31:15:f4:27:e7:97:03:3d:8a:
bf:23:a6:c0:ae:4e:78:44:28:bb:58:a2:c2:9c:7a:
d1:fb:7b:34:14:21:bd:4b:55:3b:84:61:d3:92:a9:
ed:26:30:58:40:1b:df:08:15:bd:a3:c6:7d:ed:d2:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:4A:15:61:35:BE:1A:E6:A0:72:20:9A:65:D6:EA:CF:DD:23:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56f73c89-ca1b-4059-833a-0cf950dd7221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ce:9a:6c:b7:86:7c:6f:8a:0f:5f:9e:bf:ab:7a:75:5e:66:
3b:fd:93:39:bb:9b:4c:02:74:3a:1a:c4:1b:ba:e6:ac:53:4d:
5d:00:3e:d1:fc:9a:0f:1a:1f:2a:74:c0:30:6e:4a:40:7b:a5:
b6:c2:cd:7d:fa:34:ba:43:0e:07:79:2b:4b:3c:65:db:df:a4:
91:1a:b9:65:e9:e3:99:2d:96:5c:76:5e:99:72:ad:b8:8f:31:
f1:a7:85:87:ff:c4:b1:ee:6b:f0:a3:5b:30:dd:45:5b:39:12:
f4:2a:fc:5a:14:69:04:d6:ed:01:93:cf:b3:1d:cd:07:cc:c2:
9f:cd:be:46:5f:fb:c7:25:49:a2:cf:e4:db:82:6b:62:36:cf:
5c:1e:57:81:d4:25:ac:b1:f5:c7:14:d1:3e:14:1c:8c:48:a4:
71:95:64:fb:36:ca:eb:d9:ae:81:2d:51:e6:d4:60:2d:74:4c:
de:be:dd:61:65:1a:4a:09:06:f4:87:ce:e9:25:b4:55:9a:e5:
0d:22:9c:64:fa:5b:79:53:62:8e:8c:19:62:f0:7b:6f:53:92:
f9:3c:c2:b1:5f:1e:1f:ea:ee:45:1f:75:77:67:3e:21:6f:05:
57:20:cb:a1:78:7c:3e:b1:c9:bb:72:0a:3c:6e:ee:d2:d7:cd:
8e:35:91:3e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDw5WM57cSQ5ajW2sBwfq1Zl1LoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxNzQwMTBaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGVlZjBlNmVjMTJmYWIyN2JhOGRjNTRlYTI3MzNiYTg3YmZkMDJkMWNkNDA3
MzhiMTMxZDQxMDI4N2FhNjhjM2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVPL1tcEoVbjJxssfwWmXZq4YbGLOoL3AuFMGt3JiHqHSknCJ5UpgEkuRME
Ix4rQwVdHbzKQDN3SOqOiIoZDWcFh3Tqij/Q9SLhvBXKjnwR3qNV2Almdbb3Opzb
lHVNC7ZUol8GdqRDTizJnqsoCZjXsCegSpG3o8gAojUKaHvAVLhhXOTYYOCakbSI
XxXrODEGZv4R85yc2WKUM2TRfTjAU9pZfkLhY3Fr2kvb1i6Bl5Gg+QO36Bsmt0rk
pFahHQekwDn9ZVe0MRX0J+eXAz2KvyOmwK5OeEQou1iiwpx60ft7NBQhvUtVO4Rh
05Kp7SYwWEAb3wgVvaPGfe3SC+UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT9SEoV
YTW+GuagciCaZdbqz90jmzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTZmNzNjODktY2ExYi00MDU5LTgzM2EtMGNmOTUwZGQ3MjIxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H0Q
wDANBgkqhkiG9w0BAQsFAAOCAQEAp86abLeGfG+KD1+ev6t6dV5mO/2TObubTAJ0
OhrEG7rmrFNNXQA+0fyaDxofKnTAMG5KQHultsLNffo0ukMOB3krSzxl29+kkRq5
ZenjmS2WXHZemXKtuI8x8aeFh//Ese5r8KNbMN1FWzkS9Cr8WhRpBNbtAZPPsx3N
B8zCn82+Rl/7xyVJos/k24JrYjbPXB5XgdQlrLH1xxTRPhQcjEikcZVk+zbK69mu
gS1R5tRgLXRM3r7dYWUaSgkG9IfO6SW0VZrlDSKcZPpbeVNijowZYvB7b1OS+TzC
sV8eH+ruRR91d2c+IW8FVyDLoXh8PrHJu3IKPG7u0tfNjjWRPg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:54 2025 by rpki-client