Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
File: 5fe931ae-e353-437d-9738-79004c5e9188.roa (raw, json)
Hash identifier: Q+aesnqzNEclEZm34df/A0vqXxx8nbpLDn/xQlIL08k=
Subject key identifier: E0:95:90:86:C7:4C:5F:C4:AB:3A:89:A8:97:D3:53:39:6E:C5:A6:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DC01286DDE158F4C686174939779401AD3BA248
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
Signing time: Fri 26 Sep 2025 19:51:06 +0000
ROA not before: Fri 26 Sep 2025 19:51:06 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c0:12:86:dd:e1:58:f4:c6:86:17:49:39:77:94:01:ad:3b:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:51:06 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=26dd5354f6f92915cbe239756300244fa0bc613faf9b9b03bf1da9e2d15c34aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:c9:aa:d9:ee:cc:c5:d8:b8:ad:be:53:cc:
02:d3:53:34:65:ba:6e:3f:a2:b7:ba:d0:98:05:8e:
51:0b:62:17:00:47:89:f5:5c:96:05:67:9f:8a:c2:
f6:ef:22:5c:d1:72:97:40:e5:3c:71:af:1d:40:df:
c0:6c:e1:16:c0:ea:bc:3a:15:e4:7b:68:8c:c8:60:
f5:f4:c7:7d:01:af:c3:e3:ee:2d:6f:1a:6f:56:f8:
6c:03:68:ac:8d:27:72:aa:d9:b7:4a:b8:e8:ee:04:
dd:94:fc:90:98:dd:ee:c2:51:b7:31:f3:59:c7:8f:
70:ee:a9:58:ec:f9:0b:90:77:5d:05:62:37:cf:48:
4b:45:1d:13:97:2b:41:75:cb:97:5b:df:fb:54:0f:
27:9d:28:82:b9:d8:71:12:b2:06:81:9e:5a:ff:97:
33:06:7f:dc:c0:e8:bf:28:f8:26:e1:e6:98:5f:78:
7c:5b:0c:2e:5c:7f:11:c9:90:cf:40:81:49:b0:b2:
76:49:0a:d8:67:90:90:22:ed:72:e3:3d:a4:1d:0d:
be:d7:e8:b4:f4:f3:98:15:c4:11:98:78:27:50:91:
ea:83:41:32:53:df:20:fc:8e:c6:26:ab:12:3a:5f:
31:e6:f8:a3:05:41:b4:29:98:4f:9a:72:af:6f:ff:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:90:86:C7:4C:5F:C4:AB:3A:89:A8:97:D3:53:39:6E:C5:A6:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:c000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:88:8d:84:ea:c3:0b:a5:b2:19:23:b1:61:d5:f9:0d:13:a9:
9a:eb:7e:4b:13:42:5e:97:f6:42:59:75:87:30:66:2d:75:bb:
b6:aa:37:3d:a6:b2:aa:f4:ec:f6:7a:a0:c4:9f:e9:b0:11:be:
4b:41:26:fb:68:8b:d7:d8:3c:90:e3:6a:12:be:ac:5e:c5:e4:
4d:33:65:8c:6e:19:2a:e2:3a:bc:37:7f:26:03:dc:b3:de:38:
d5:0f:d0:c1:80:40:a0:b1:19:88:97:54:0c:30:1c:ec:06:0e:
33:31:b9:7e:df:27:dd:32:5e:af:ff:73:af:49:64:c4:04:a5:
72:13:f3:b3:1a:86:46:c8:e7:25:e7:48:2c:c2:8a:41:52:ef:
c6:c3:ba:56:70:72:36:2c:3f:83:79:90:50:aa:2f:2e:07:e5:
bc:db:2d:83:f9:54:1a:9c:2c:10:7d:18:23:eb:31:c0:44:c5:
e0:4f:0c:c2:13:09:96:1a:45:b2:5a:de:0b:30:47:b8:13:6d:
37:21:53:8d:8f:dd:01:a3:24:e8:b1:9f:65:b6:03:1c:6a:84:
43:30:3f:ae:14:3c:07:42:68:57:da:4d:13:4d:68:ee:5b:ac:
2e:f3:f7:f4:be:57:89:69:77:09:90:48:0b:60:91:ba:5f:f8:
1b:64:88:82
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfcASht3hWPTGhhdJOXeUAa07okgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxOTUxMDZaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDI2ZGQ1MzU0ZjZmOTI5MTVjYmUyMzk3NTYzMDAyNDRmYTBiYzYxM2ZhZjli
OWIwM2JmMWRhOWUyZDE1YzM0YWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+byarZ7szF2LitvlPMAtNTNGW6bj+it7rQmAWOUQtiFwBHifVclgVnn4rC
9u8iXNFyl0DlPHGvHUDfwGzhFsDqvDoV5HtojMhg9fTHfQGvw+PuLW8ab1b4bANo
rI0ncqrZt0q46O4E3ZT8kJjd7sJRtzHzWcePcO6pWOz5C5B3XQViN89IS0UdE5cr
QXXLl1vf+1QPJ50ogrnYcRKyBoGeWv+XMwZ/3MDovyj4JuHmmF94fFsMLlx/EcmQ
z0CBSbCydkkK2GeQkCLtcuM9pB0NvtfotPTzmBXEEZh4J1CR6oNBMlPfIPyOxiar
EjpfMeb4owVBtCmYT5pyr2//wcUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTglZCG
x0xfxKs6iaiX01M5bsWm/zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NWZlOTMxYWUtZTM1My00MzdkLTk3MzgtNzkwMDRjNWU5MTg4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DTA
MA0GCSqGSIb3DQEBCwUAA4IBAQCtiI2E6sMLpbIZI7Fh1fkNE6ma635LE0Jel/ZC
WXWHMGYtdbu2qjc9prKq9Oz2eqDEn+mwEb5LQSb7aIvX2DyQ42oSvqxexeRNM2WM
bhkq4jq8N38mA9yz3jjVD9DBgECgsRmIl1QMMBzsBg4zMbl+3yfdMl6v/3OvSWTE
BKVyE/OzGoZGyOcl50gswopBUu/Gw7pWcHI2LD+DeZBQqi8uB+W82y2D+VQanCwQ
fRgj6zHARMXgTwzCEwmWGkWyWt4LMEe4E203IVONj90BoyTosZ9ltgMcaoRDMD+u
FDwHQmhX2k0TTWjuW6wu8/f0vleJaXcJkEgLYJG6X/gbZIiC
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:04 2025 by rpki-client