Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/715ce244-d76a-4faa-8b30-81259801a7e8.roa
File: 715ce244-d76a-4faa-8b30-81259801a7e8.roa (raw, json)
Hash identifier: lt9yKEbftdtTi5F2UZmyUY/48/OrHgsTLTimdvPsdBQ=
Subject key identifier: B0:0F:4E:E0:E0:92:5D:C1:E8:85:5F:38:07:E4:40:F8:B1:70:02:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65135AC3B7514391F72BE02962C52FE8F6B1D864
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/715ce244-d76a-4faa-8b30-81259801a7e8.roa
Signing time: Tue 19 Aug 2025 16:50:03 +0000
ROA not before: Tue 19 Aug 2025 16:50:03 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:13:5a:c3:b7:51:43:91:f7:2b:e0:29:62:c5:2f:e8:f6:b1:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 16:50:03 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=0ab040585d8a9e6e548799e591ff5f517f81685059956eac05f32f629b4d83c3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3d:11:e9:1d:c7:4a:04:aa:fe:11:1c:a3:05:
d2:5f:c9:e7:27:e3:51:40:6b:96:15:8b:83:7e:0e:
73:eb:2f:89:2f:24:6a:19:58:de:d0:28:36:44:31:
a7:f8:e9:f3:8c:0c:2b:b1:54:11:4e:cc:3e:c2:ec:
d7:0b:3f:d6:57:ec:ed:43:7f:cb:ac:f5:63:a4:5d:
0f:dc:24:0a:4c:42:d1:5f:2d:d2:cc:92:0a:05:e3:
51:9b:6d:6b:c6:49:d1:95:fb:12:42:a9:22:4f:6b:
4c:d2:d1:d1:a2:4f:8d:87:09:0f:15:54:45:c3:7f:
f5:cc:89:88:61:fc:0d:0c:69:eb:44:26:47:a4:4d:
54:84:dc:ff:2f:95:3e:71:31:1a:fe:a7:32:76:ca:
e8:2a:4a:b5:20:fb:c4:f3:ce:d1:8b:85:29:b1:b8:
92:7f:35:12:04:18:89:1a:83:47:cc:44:5b:45:52:
43:cf:37:4c:e5:3c:f9:11:4a:22:85:fe:6e:37:61:
a8:0e:20:3f:01:d9:3c:fe:aa:68:88:a0:f1:5d:55:
1d:a9:d4:28:c8:ca:a6:52:59:29:aa:4b:ca:8d:0c:
70:a7:0f:e0:a4:c6:2f:6f:51:4e:bf:82:40:8d:f0:
b6:20:7a:72:cb:db:b2:ec:9b:9c:51:a6:57:40:1c:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:4E:E0:E0:92:5D:C1:E8:85:5F:38:07:E4:40:F8:B1:70:02:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/715ce244-d76a-4faa-8b30-81259801a7e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:6000::/40
Signature Algorithm: sha256WithRSAEncryption
23:15:fa:78:bd:f0:1d:32:f8:e3:10:d7:41:2d:1c:83:d0:ca:
1d:79:c9:7d:8d:b2:d3:d2:bc:d1:cd:45:18:3c:3e:00:c7:9a:
44:70:7f:36:c2:c7:2d:7a:95:92:06:94:31:72:93:49:b0:ee:
cd:6d:5b:18:86:e9:f4:4c:1e:7b:55:39:46:08:b4:5e:24:6c:
0f:93:af:ad:4c:b5:c5:61:15:22:8a:ab:c9:bc:9c:4a:8b:96:
1e:da:bd:9a:7c:f8:e6:15:e8:73:b0:c4:4e:ca:db:49:29:e6:
fd:13:dd:d1:81:b4:d0:ba:c6:35:6a:33:ec:c5:97:11:49:57:
2f:55:0f:1a:2c:73:db:5b:bc:54:a0:09:df:3d:b1:ad:66:0a:
e9:ee:fc:73:5d:f5:ff:2f:dd:92:8a:97:bc:ef:0c:c2:ba:43:
56:b2:a9:f2:70:ef:b6:60:41:17:ed:2b:f2:78:ca:9b:7e:2b:
9d:2e:3a:26:39:6b:e1:00:dc:94:a6:e4:3d:18:7f:e6:63:78:
f7:b4:20:e5:e6:4c:a3:b0:c0:ce:0b:ca:43:38:21:2e:31:28:
45:c0:39:24:27:a9:ca:59:fc:f1:dd:7f:f6:0d:60:05:88:a4:
af:4c:9c:fb:d0:39:a9:6d:24:31:5e:6b:91:20:9d:71:8c:23:
25:69:e9:d8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZRNaw7dRQ5H3K+ApYsUv6Pax2GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MTkxNjUwMDNaFw0yNTA5MjMyMzU5NTlaMHoxSTBHBgNV
BAUTQDBhYjA0MDU4NWQ4YTllNmU1NDg3OTllNTkxZmY1ZjUxN2Y4MTY4NTA1OTk1
NmVhYzA1ZjMyZjYyOWI0ZDgzYzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPY9Eekdx0oEqv4RHKMF0l/J5yfjUUBrlhWLg34Oc+sviS8kahlY3tAoNkQx
p/jp84wMK7FUEU7MPsLs1ws/1lfs7UN/y6z1Y6RdD9wkCkxC0V8t0sySCgXjUZtt
a8ZJ0ZX7EkKpIk9rTNLR0aJPjYcJDxVURcN/9cyJiGH8DQxp60QmR6RNVITc/y+V
PnExGv6nMnbK6CpKtSD7xPPO0YuFKbG4kn81EgQYiRqDR8xEW0VSQ883TOU8+RFK
IoX+bjdhqA4gPwHZPP6qaIig8V1VHanUKMjKplJZKapLyo0McKcP4KTGL29RTr+C
QI3wtiB6csvbsuybnFGmV0AcJ0cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSwD07g
4JJdweiFXzgH5ED4sXACSzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzE1Y2UyNDQtZDc2YS00ZmFhLThiMzAtODEyNTk4MDFhN2U4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Flg
MA0GCSqGSIb3DQEBCwUAA4IBAQAjFfp4vfAdMvjjENdBLRyD0Modecl9jbLT0rzR
zUUYPD4Ax5pEcH82wsctepWSBpQxcpNJsO7NbVsYhun0TB57VTlGCLReJGwPk6+t
TLXFYRUiiqvJvJxKi5Ye2r2afPjmFehzsMROyttJKeb9E93RgbTQusY1ajPsxZcR
SVcvVQ8aLHPbW7xUoAnfPbGtZgrp7vxzXfX/L92Sipe87wzCukNWsqnycO+2YEEX
7SvyeMqbfiudLjomOWvhANyUpuQ9GH/mY3j3tCDl5kyjsMDOC8pDOCEuMShFwDkk
J6nKWfzx3X/2DWAFiKSvTJz70DmpbSQxXmuRIJ1xjCMlaenY
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:17 2025 by rpki-client