Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
File: 67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa (raw, json)
Hash identifier: 35Bt2kOJcOXiolb54hko6b7+rMmDOrUHhBABOr82AmM=
Subject key identifier: 99:26:2C:05:C9:3C:BA:13:57:BB:76:20:4B:30:6D:68:00:6A:A7:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0C1CDC4B54999A365C4D826F19F0C941BD3E4EB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
Signing time: Mon 13 Oct 2025 17:55:57 +0000
ROA not before: Mon 13 Oct 2025 17:55:57 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1c:dc:4b:54:99:9a:36:5c:4d:82:6f:19:f0:c9:41:bd:3e:4e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 17:55:57 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=cf0b48f791ab1e3f40a8405dee765cd24ca2f75456d5006f8c3ac45230cf0d66, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:0d:f4:32:5e:83:83:8f:dd:f3:ab:7e:3f:
ac:d0:84:b5:9c:aa:32:a6:3d:23:f1:ee:f6:7e:55:
91:d1:c7:91:64:62:de:95:07:d6:4a:57:41:bc:3f:
83:f1:77:31:0e:b8:fa:20:42:d4:10:01:0b:27:9d:
b6:1f:fa:74:2d:a2:7b:ef:48:fa:ba:c5:27:90:90:
e7:da:2c:bf:65:a3:74:b2:4f:3d:08:ac:6f:60:51:
1b:d9:cd:79:38:45:72:1a:5c:d0:d1:ab:c6:9d:76:
de:4a:b9:68:5c:80:46:41:26:13:99:93:ca:0a:1f:
c5:fe:4c:a0:fb:df:d4:4b:ba:97:d0:31:d0:1e:32:
3e:69:df:80:19:f4:f5:d4:54:42:eb:03:8f:88:cf:
e4:64:e2:13:f0:bc:49:7f:7b:ca:46:53:02:db:c2:
57:4e:92:82:21:fd:09:29:e9:31:7a:98:f1:ca:40:
69:14:b7:e2:6e:8a:11:63:7f:d5:90:fa:e3:44:02:
7f:a3:17:c3:49:3e:55:c4:ab:94:ff:ad:dc:09:fd:
07:d0:84:99:35:b3:64:34:af:0c:0e:37:d4:f6:45:
08:81:1e:0d:59:80:33:9c:69:be:20:62:a7:ea:74:
2f:65:38:c0:29:75:46:90:36:a0:cb:76:7d:7e:43:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:2C:05:C9:3C:BA:13:57:BB:76:20:4B:30:6D:68:00:6A:A7:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67a91910-a57c-4a04-8d7b-404bcd5fecf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:01:a8:63:b5:d5:24:11:a5:1f:ae:9c:84:3d:ec:5a:c2:bd:
37:f3:9c:12:ea:36:d7:01:e3:ad:2f:2b:b5:94:eb:43:ac:db:
cd:30:ba:c3:84:d6:6f:fb:5f:fa:19:fb:8c:ac:5a:8c:3e:ac:
81:47:23:0e:b7:19:23:40:32:32:eb:2b:b9:3c:1e:fc:90:1a:
d0:fc:18:0e:e9:f9:6d:41:8b:c4:cc:48:b3:32:28:9c:fd:80:
a0:48:22:18:37:48:d5:e8:fe:99:40:f7:a8:5b:51:09:24:b2:
6d:cd:68:c5:d0:12:ec:0f:43:73:dd:f2:15:c7:b5:dd:1d:22:
b6:6b:0f:52:18:71:f1:3d:4d:88:00:ea:23:76:a2:f7:cb:2c:
c7:04:be:88:c4:5e:98:eb:7a:db:85:1e:c2:8a:2f:60:fd:26:
95:5c:cb:da:23:6a:d4:e5:db:9f:82:25:ec:9a:c7:1f:9e:1b:
4b:13:bc:b4:7e:15:25:e5:28:98:32:60:b5:d2:c5:eb:1a:77:
a2:33:00:93:2a:c7:26:c2:3d:f4:31:df:b1:b0:8c:c8:ed:c3:
c9:9c:68:f2:a3:28:36:98:5d:d5:75:eb:8c:4f:51:56:88:6a:
7a:f6:25:a8:e1:b4:4b:b3:90:8c:a2:1f:9c:fb:c5:c8:e2:1d:
4f:96:62:d3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDBzcS1SZmjZcTYJvGfDJQb0+TrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTMxNzU1NTdaFw0yNTExMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGNmMGI0OGY3OTFhYjFlM2Y0MGE4NDA1ZGVlNzY1Y2QyNGNhMmY3NTQ1NmQ1
MDA2ZjhjM2FjNDUyMzBjZjBkNjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANuYDfQyXoODj93zq34/rNCEtZyqMqY9I/Hu9n5VkdHHkWRi3pUH1kpXQbw/
g/F3MQ64+iBC1BABCyedth/6dC2ie+9I+rrFJ5CQ59osv2WjdLJPPQisb2BRG9nN
eThFchpc0NGrxp123kq5aFyARkEmE5mTygofxf5MoPvf1Eu6l9Ax0B4yPmnfgBn0
9dRUQusDj4jP5GTiE/C8SX97ykZTAtvCV06SgiH9CSnpMXqY8cpAaRS34m6KEWN/
1ZD640QCf6MXw0k+VcSrlP+t3An9B9CEmTWzZDSvDA431PZFCIEeDVmAM5xpviBi
p+p0L2U4wCl1RpA2oMt2fX5DAP0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSZJiwF
yTy6E1e7diBLMG1oAGqnLjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjdhOTE5MTAtYTU3Yy00YTA0LThkN2ItNDA0YmNkNWZlY2YyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DBg
MA0GCSqGSIb3DQEBCwUAA4IBAQCsAahjtdUkEaUfrpyEPexawr0385wS6jbXAeOt
Lyu1lOtDrNvNMLrDhNZv+1/6GfuMrFqMPqyBRyMOtxkjQDIy6yu5PB78kBrQ/BgO
6fltQYvEzEizMiic/YCgSCIYN0jV6P6ZQPeoW1EJJLJtzWjF0BLsD0Nz3fIVx7Xd
HSK2aw9SGHHxPU2IAOojdqL3yyzHBL6IxF6Y63rbhR7Cii9g/SaVXMvaI2rU5duf
giXsmscfnhtLE7y0fhUl5SiYMmC10sXrGneiMwCTKscmwj30Md+xsIzI7cPJnGjy
oyg2mF3VdeuMT1FWiGp69iWo4bRLs5CMoh+c+8XI4h1PlmLT
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:29:41 2025 by rpki-client