Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
File: 689f17ea-2ccc-4beb-bf91-0695da802222.roa (raw, json)
Hash identifier: VtAKKhh2F9ue6iAS9/Ok7u2N18D2GL1nFNeD9j+iMEs=
Subject key identifier: FA:E9:E2:D3:2E:01:1D:85:E0:8A:24:80:48:67:9C:1F:DB:BF:6F:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B6184A5CF579A73AFC598E4A582D4C4FF58A772
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
Signing time: Fri 22 Aug 2025 15:10:02 +0000
ROA not before: Fri 22 Aug 2025 15:10:02 +0000
ROA not after: Fri 26 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:61:84:a5:cf:57:9a:73:af:c5:98:e4:a5:82:d4:c4:ff:58:a7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 22 15:10:02 2025 GMT
Not After : Sep 26 23:59:59 2025 GMT
Subject: serialNumber=190741cac7d0d5b627fce6cf4e042af19c9e2e146209a0671d6c9dab6b509f54, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:1a:49:62:6a:c5:ea:3f:d3:35:98:94:0d:
57:17:e7:c6:36:53:5b:3a:a5:74:3d:74:86:4b:76:
98:0f:06:0f:3d:7d:c2:2c:ea:6a:51:e7:ac:d8:6b:
9f:e0:26:54:b5:e3:12:7e:e8:0c:ed:41:2e:35:09:
69:31:8f:0c:d3:80:5b:84:25:6b:56:dd:e7:23:dc:
cb:43:fc:56:2d:17:ab:62:fe:ba:25:aa:e3:10:ae:
04:15:b1:0c:2b:e8:c6:94:4a:ac:a4:78:9b:11:ff:
94:55:8a:0e:99:6b:1c:05:34:1e:53:b6:ee:83:e1:
af:7e:ee:38:37:70:6e:77:85:7f:53:fa:52:a4:6e:
78:f4:63:89:f7:91:ac:1a:24:3d:9c:f0:06:c6:cb:
f8:89:cb:43:a5:84:71:b8:da:91:0d:7a:d9:0c:32:
cd:d2:a4:47:60:01:88:47:bc:8e:b9:0a:75:0b:e8:
58:52:e6:da:f7:e8:52:98:98:ab:2e:b1:74:c0:58:
5d:e9:a9:27:ab:56:e4:01:7a:69:a2:be:b7:91:4c:
ee:4f:83:af:60:ff:1c:f0:8b:37:3f:87:65:f0:d3:
d6:63:b2:96:c2:f9:6b:fa:81:2c:4d:8f:d6:87:e2:
98:5d:cb:4d:8a:4e:f4:10:bd:b1:e8:4a:55:9a:4d:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:E2:D3:2E:01:1D:85:E0:8A:24:80:48:67:9C:1F:DB:BF:6F:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/689f17ea-2ccc-4beb-bf91-0695da802222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:1000::/40
Signature Algorithm: sha256WithRSAEncryption
15:48:85:de:df:0e:72:03:af:52:ed:01:75:b1:37:fd:f0:dd:
2f:4e:78:55:dd:ba:30:1a:7f:89:f3:0c:bb:a1:5d:ff:0f:2e:
e1:79:99:85:c2:6e:09:3b:be:76:d9:07:98:88:34:c0:ec:a5:
89:ea:14:b4:42:4c:0a:dd:b2:aa:77:09:c1:fc:e4:84:e9:60:
17:d4:12:9e:bd:c7:1f:ea:fc:b0:56:a4:4b:41:4c:29:11:2a:
48:87:97:5a:a9:a9:3e:cd:44:73:f5:48:7e:de:53:76:e0:93:
e5:ec:9d:3f:96:68:aa:eb:9b:4c:e2:49:01:d5:9b:5a:f0:2b:
12:8d:25:3e:35:e2:e0:64:47:6a:a0:7c:93:a5:a0:39:6e:9f:
5d:4a:7b:17:3e:3b:ce:27:0e:d8:eb:b0:cb:c7:2f:ff:7a:81:
10:25:ca:97:5b:19:90:1f:cd:da:0c:04:aa:fc:36:f4:05:f4:
24:e0:aa:97:c0:98:00:c4:cf:f3:5c:e0:13:37:9a:09:51:d1:
c7:94:89:33:d0:af:3b:77:c9:11:9e:df:d7:03:e7:60:9d:e0:
60:71:bf:95:fa:22:a7:b8:6e:f9:7b:7d:0a:17:a4:dd:86:6b:
94:c1:08:2d:62:fc:b9:25:a7:1a:e8:ab:dc:a1:9c:92:dc:55:
14:d5:2d:e8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUO2GEpc9XmnOvxZjkpYLUxP9Yp3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MjIxNTEwMDJaFw0yNTA5MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDE5MDc0MWNhYzdkMGQ1YjYyN2ZjZTZjZjRlMDQyYWYxOWM5ZTJlMTQ2MjA5
YTA2NzFkNmM5ZGFiNmI1MDlmNTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8KGkliasXqP9M1mJQNVxfnxjZTWzqldD10hkt2mA8GDz19wizqalHnrNhr
n+AmVLXjEn7oDO1BLjUJaTGPDNOAW4Qla1bd5yPcy0P8Vi0Xq2L+uiWq4xCuBBWx
DCvoxpRKrKR4mxH/lFWKDplrHAU0HlO27oPhr37uODdwbneFf1P6UqRuePRjifeR
rBokPZzwBsbL+InLQ6WEcbjakQ162QwyzdKkR2ABiEe8jrkKdQvoWFLm2vfoUpiY
qy6xdMBYXempJ6tW5AF6aaK+t5FM7k+Dr2D/HPCLNz+HZfDT1mOylsL5a/qBLE2P
1ofimF3LTYpO9BC9sehKVZpNAGkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT66eLT
LgEdheCKJIBIZ5wf279vdDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Njg5ZjE3ZWEtMmNjYy00YmViLWJmOTEtMDY5NWRhODAyMjIyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAVSIXe3w5yA69S7QF1sTf98N0vTnhV3bowGn+J
8wy7oV3/Dy7heZmFwm4JO7522QeYiDTA7KWJ6hS0QkwK3bKqdwnB/OSE6WAX1BKe
vccf6vywVqRLQUwpESpIh5daqak+zURz9Uh+3lN24JPl7J0/lmiq65tM4kkB1Zta
8CsSjSU+NeLgZEdqoHyTpaA5bp9dSnsXPjvOJw7Y67DLxy//eoEQJcqXWxmQH83a
DASq/Db0BfQk4KqXwJgAxM/zXOATN5oJUdHHlIkz0K87d8kRnt/XA+dgneBgcb+V
+iKnuG75e30KF6TdhmuUwQgtYvy5Jaca6KvcoZyS3FUU1S3o
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:54:07 2025 by rpki-client