Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
File: 62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa (raw, json)
Hash identifier: spL5891MqZnUyBPoe/CI811u8uW8b1hf8/b9nqBwC4Q=
Subject key identifier: 92:F0:9F:FE:30:23:2B:AF:E3:A5:1C:09:D3:C1:81:EB:55:D0:12:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 565BBE525C6D7E491F1B3B7CC5444E83E27A2634
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
Signing time: Fri 26 Sep 2025 18:50:13 +0000
ROA not before: Fri 26 Sep 2025 18:50:13 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5b:be:52:5c:6d:7e:49:1f:1b:3b:7c:c5:44:4e:83:e2:7a:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:50:13 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=d52e1706d4a0a19d1f8bea859d1832c114d34d4dec670e3f89ef35cc03d16a26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:d4:fd:ab:49:17:0a:8e:b3:94:23:b3:eb:
25:b9:75:cc:a2:0f:6a:67:2c:0a:56:0b:b9:05:d1:
4f:cf:a9:78:ee:ee:27:b5:91:8c:c1:c2:fe:50:4e:
54:5c:0a:bd:f3:f9:5b:34:ed:99:6c:36:36:17:8e:
a5:f5:6a:ed:69:64:0c:17:8d:c5:eb:ad:1f:17:25:
fc:9b:96:4f:26:53:67:31:7b:89:99:97:56:86:63:
ad:06:a7:61:6c:fe:17:b4:be:0a:85:02:47:7f:3b:
30:ca:73:23:8a:68:2c:4a:37:cb:b6:cc:f9:77:78:
71:7a:42:07:1f:6d:ff:89:90:e2:72:e3:83:94:c0:
0e:9f:b8:25:34:db:f4:5f:e7:03:e1:95:b8:9e:3c:
11:10:8f:06:3f:f3:4c:36:5d:cd:26:f9:10:59:ac:
b1:6e:ac:ed:71:76:68:4b:0b:9d:4c:0d:81:53:47:
de:e7:14:b0:d9:24:f6:f5:05:72:d8:9f:e1:fd:a0:
df:c2:8d:31:47:6e:bd:78:19:82:ce:78:6c:76:32:
79:a4:cd:91:50:2c:27:9f:98:b6:22:9b:87:6d:3d:
e1:f1:fd:3f:6f:47:d6:3b:7e:81:30:27:81:88:be:
d8:49:4d:e3:38:b5:07:0b:83:a5:32:dd:97:d5:be:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:9F:FE:30:23:2B:AF:E3:A5:1C:09:D3:C1:81:EB:55:D0:12:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/62ff4e5e-9e65-44fc-af7f-4e44935ceb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1080::/48
Signature Algorithm: sha256WithRSAEncryption
57:5c:5c:c2:c9:f6:b4:7e:a0:c0:0c:5d:53:e8:90:b9:38:b5:
9e:e2:e9:dd:99:75:70:ad:19:fa:75:9b:d4:e2:ec:d1:ec:1c:
59:52:60:c0:ef:73:5a:12:a6:87:3f:6e:08:9d:08:53:d4:9b:
88:78:65:62:71:3b:d4:70:46:26:4d:97:42:8f:a5:59:c7:52:
a6:57:ee:37:da:ac:d7:86:10:10:6b:23:ab:38:a1:df:51:22:
f4:6c:bf:44:3a:21:a6:5d:73:0f:a0:d3:4f:00:44:e7:8f:f5:
ad:3b:3d:35:0d:7c:fe:6e:8a:b6:34:16:bb:1d:5f:10:a0:21:
22:8e:e1:71:b9:98:99:86:68:fe:11:5a:30:48:bc:20:8d:20:
3c:4b:69:ff:31:77:27:2d:64:99:17:77:e2:f2:81:97:56:94:
31:5e:fe:fc:1a:11:d4:55:11:b0:40:61:4f:c0:48:60:6e:ab:
f5:37:9a:84:99:1c:8a:e4:af:0a:ce:e5:a1:3b:78:9f:ec:61:
64:b7:fc:b4:1c:7c:63:5d:f6:71:e5:ae:d7:9f:ac:0d:9e:93:
04:06:8e:65:8b:91:aa:2d:4a:3c:d5:9d:d4:9a:17:23:2a:0a:
2b:2c:79:a8:ad:ab:a6:93:68:07:55:b4:22:e6:93:68:41:b0:
fe:d8:df:0c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUVlu+UlxtfkkfGzt8xUROg+J6JjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxODUwMTNaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1MmUxNzA2ZDRhMGExOWQxZjhiZWE4NTlkMTgzMmMxMTRkMzRkNGRlYzY3
MGUzZjg5ZWYzNWNjMDNkMTZhMjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKyy1P2rSRcKjrOUI7PrJbl1zKIPamcsClYLuQXRT8+peO7uJ7WRjMHC/lBO
VFwKvfP5WzTtmWw2NheOpfVq7WlkDBeNxeutHxcl/JuWTyZTZzF7iZmXVoZjrQan
YWz+F7S+CoUCR387MMpzI4poLEo3y7bM+Xd4cXpCBx9t/4mQ4nLjg5TADp+4JTTb
9F/nA+GVuJ48ERCPBj/zTDZdzSb5EFmssW6s7XF2aEsLnUwNgVNH3ucUsNkk9vUF
ctif4f2g38KNMUduvXgZgs54bHYyeaTNkVAsJ5+YtiKbh2094fH9P29H1jt+gTAn
gYi+2ElN4zi1BwuDpTLdl9W+2CsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSS8J/+
MCMrr+OlHAnTwYHrVdASLTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjJmZjRlNWUtOWU2NS00NGZjLWFmN2YtNGU0NDkzNWNlYjQyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAV1xcwsn2tH6gwAxdU+iQuTi1nuLp3Zl1cK0Z
+nWb1OLs0ewcWVJgwO9zWhKmhz9uCJ0IU9SbiHhlYnE71HBGJk2XQo+lWcdSplfu
N9qs14YQEGsjqzih31Ei9Gy/RDohpl1zD6DTTwBE54/1rTs9NQ18/m6KtjQWux1f
EKAhIo7hcbmYmYZo/hFaMEi8II0gPEtp/zF3Jy1kmRd34vKBl1aUMV7+/BoR1FUR
sEBhT8BIYG6r9TeahJkciuSvCs7loTt4n+xhZLf8tBx8Y132ceWu15+sDZ6TBAaO
ZYuRqi1KPNWd1JoXIyoKKyx5qK2rppNoB1W0IuaTaEGw/tjfDA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:56 2025 by rpki-client