Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
File: 6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa (raw, json)
Hash identifier: 6n7ZXssZOCaJatvPCkLAA7eGMcgO6Aav87UItrevSgs=
Subject key identifier: 52:0A:33:8D:FB:7F:34:99:64:D7:01:BA:81:C7:3F:6C:75:48:F0:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 221262DC0A5D0D602D0E4DA86D7A17C800A1F1B0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
Signing time: Fri 26 Sep 2025 19:21:34 +0000
ROA not before: Fri 26 Sep 2025 19:21:34 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:12:62:dc:0a:5d:0d:60:2d:0e:4d:a8:6d:7a:17:c8:00:a1:f1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:21:34 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=36f02477f9d36be56723a5c0e4141fd396495addf069b5a4fa77cf5f79112061, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:5f:94:a3:67:c9:97:96:b4:59:fa:80:0c:
43:63:d2:55:c6:60:e7:8f:d0:53:3b:41:b3:b9:dc:
c0:6c:c1:a4:c8:67:5f:81:27:3b:04:28:7b:40:d5:
ab:21:be:91:0e:17:df:29:60:72:bc:fb:ab:6c:6a:
3a:3c:ed:be:d6:bc:2a:08:5e:7f:0d:39:8c:85:ef:
4f:bc:59:ad:50:9f:dd:e1:f3:35:6d:02:65:66:84:
31:0e:1e:b4:a4:45:35:57:c1:b8:9f:c9:1c:66:13:
21:a6:1b:94:ca:47:6f:a4:a1:e0:91:92:df:17:6d:
ae:3f:2b:ea:6a:c2:d8:15:03:44:33:ee:c1:d1:ae:
7c:98:fe:af:c2:ee:ae:b3:dd:d4:1b:ed:7e:77:22:
ba:35:c2:97:c4:c0:50:c0:28:8a:ba:0e:35:b3:5b:
fc:db:0b:9a:bb:be:71:ff:da:16:7b:31:06:30:5f:
3b:13:cc:0b:e5:61:89:e2:83:16:5b:fb:a6:a0:e5:
41:26:82:5b:6e:d6:9c:46:34:1e:e1:45:20:68:bb:
3e:9d:05:a7:be:77:0f:20:79:23:62:55:6f:4a:fc:
8b:8c:65:30:32:9d:62:cd:c7:2f:f9:40:10:bb:a8:
4e:5e:22:aa:26:f8:da:52:90:d1:32:ce:27:c6:45:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0A:33:8D:FB:7F:34:99:64:D7:01:BA:81:C7:3F:6C:75:48:F0:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:be:bc:56:56:85:6e:5c:6b:65:cc:67:0b:af:c6:e3:f3:93:
2f:8d:52:25:39:e1:6c:a0:7d:4a:2b:c7:3c:1e:99:61:f8:77:
66:60:9b:0f:51:4c:cb:f8:35:78:b7:72:41:1c:94:a7:1c:c8:
dd:da:aa:3d:ac:db:1c:a9:a1:d4:69:33:04:0c:d7:2e:0c:a3:
34:90:79:c7:1f:2e:b2:ce:e2:6d:83:fa:0d:b8:f8:d3:97:40:
2f:48:63:27:6a:10:3d:15:08:0f:33:91:48:f6:d8:68:1f:12:
c9:ca:18:0b:b0:28:db:43:a3:b6:1e:32:0f:b4:88:0b:89:1e:
61:c1:11:02:4a:95:56:ec:42:f9:1c:a7:35:f9:c0:9c:c8:c9:
44:bb:32:62:e6:9c:6d:39:2e:23:6e:ad:46:d0:0b:e6:67:7e:
29:46:84:00:9e:f7:95:33:54:90:82:23:9a:50:b2:7b:6d:4b:
58:44:ac:01:90:be:d1:89:20:8b:4f:c6:7d:14:a7:b4:b3:10:
f5:3f:af:b7:5a:c1:c7:78:49:56:1a:ec:7a:6f:62:cd:ef:fe:
0e:29:f6:70:3a:14:b8:68:a1:9a:b0:eb:35:4d:b1:cb:06:10:
fe:d2:24:81:94:36:da:96:19:ae:16:db:33:94:2f:3a:50:99:
7b:93:fe:51
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIhJi3ApdDWAtDk2obXoXyACh8bAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxOTIxMzRaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDM2ZjAyNDc3ZjlkMzZiZTU2NzIzYTVjMGU0MTQxZmQzOTY0OTVhZGRmMDY5
YjVhNGZhNzdjZjVmNzkxMTIwNjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKISX5SjZ8mXlrRZ+oAMQ2PSVcZg54/QUztBs7ncwGzBpMhnX4EnOwQoe0DV
qyG+kQ4X3ylgcrz7q2xqOjztvta8Kghefw05jIXvT7xZrVCf3eHzNW0CZWaEMQ4e
tKRFNVfBuJ/JHGYTIaYblMpHb6Sh4JGS3xdtrj8r6mrC2BUDRDPuwdGufJj+r8Lu
rrPd1BvtfnciujXCl8TAUMAoiroONbNb/NsLmru+cf/aFnsxBjBfOxPMC+VhieKD
Flv7pqDlQSaCW27WnEY0HuFFIGi7Pp0Fp753DyB5I2JVb0r8i4xlMDKdYs3HL/lA
ELuoTl4iqib42lKQ0TLOJ8ZF1qUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRSCjON
+380mWTXAbqBxz9sdUjwPjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmY4ZDc5YzYtYjc3My00MDczLTlmZjQtMjIxMGU2YTExMWI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H4Q
MA0GCSqGSIb3DQEBCwUAA4IBAQC9vrxWVoVuXGtlzGcLr8bj85MvjVIlOeFsoH1K
K8c8Hplh+HdmYJsPUUzL+DV4t3JBHJSnHMjd2qo9rNscqaHUaTMEDNcuDKM0kHnH
Hy6yzuJtg/oNuPjTl0AvSGMnahA9FQgPM5FI9thoHxLJyhgLsCjbQ6O2HjIPtIgL
iR5hwRECSpVW7EL5HKc1+cCcyMlEuzJi5pxtOS4jbq1G0AvmZ34pRoQAnveVM1SQ
giOaULJ7bUtYRKwBkL7RiSCLT8Z9FKe0sxD1P6+3WsHHeElWGux6b2LN7/4OKfZw
OhS4aKGasOs1TbHLBhD+0iSBlDbalhmuFtszlC86UJl7k/5R
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:46 2025 by rpki-client