Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa
File: 75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa (raw, json)
Hash identifier: 4hYn2gYFp9xn9xtAHXT7doBLK9MchJgo1+8q82i5ybU=
Subject key identifier: 0F:98:B7:D1:25:FF:5B:2F:45:1D:31:7A:DB:47:92:02:8E:02:9C:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DEC1BD3E8C1CB11273F57D0DB4CCAC3722A6ADA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa
Signing time: Tue 05 Aug 2025 18:41:29 +0000
ROA not before: Tue 05 Aug 2025 18:41:29 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ec:1b:d3:e8:c1:cb:11:27:3f:57:d0:db:4c:ca:c3:72:2a:6a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:41:29 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=0911ab07d18c49b12a8a8068a5423c9aab31992e503b35e26a3ba55a56bd5eba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:50:d3:1c:96:d2:a4:dc:3c:02:f3:45:f2:
a0:8b:1d:9c:fd:0c:dd:ad:fe:be:fc:90:6f:c3:6c:
fa:6f:f9:e3:6d:6e:f2:47:7a:c0:41:44:1d:83:00:
48:54:5e:3d:67:4b:9c:9b:87:31:d2:57:26:81:99:
ef:45:cb:7a:ec:c8:b3:03:47:76:2c:e8:46:05:e2:
fb:f9:84:cc:eb:30:00:4a:12:9d:e0:0b:9e:da:63:
04:62:9a:c5:9b:bb:ed:12:b5:4b:94:85:23:8a:35:
ae:fe:b8:d0:d1:7d:98:bd:d9:f7:f6:3f:ac:45:8f:
03:22:33:77:33:43:2f:94:0c:6a:b4:1d:1b:ad:68:
e3:83:1a:16:a2:67:04:52:5e:75:88:67:99:18:f2:
46:58:d6:52:09:ab:42:90:04:77:ee:d5:10:28:0b:
42:0a:77:b0:61:db:26:a8:6d:b7:ec:93:04:cb:2c:
ad:72:73:c0:eb:84:ee:1e:14:04:dc:63:73:4b:a2:
58:80:cb:2c:ea:ad:ca:51:d7:3c:53:b1:18:80:da:
ba:cc:17:18:53:ea:14:74:86:50:d2:1e:9d:61:5b:
51:4a:0d:5b:c5:32:a2:0a:94:42:0f:0b:fe:5c:5e:
3d:6b:ca:14:ee:da:aa:bf:af:8e:c3:38:bc:0a:38:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:B7:D1:25:FF:5B:2F:45:1D:31:7A:DB:47:92:02:8E:02:9C:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/75d0b5d9-2477-4d38-ab7a-0c60a33d8246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:6040::/48
Signature Algorithm: sha256WithRSAEncryption
86:32:dc:2e:00:44:07:42:00:a6:19:a6:f1:38:70:12:b1:eb:
3c:fd:bc:50:e3:de:2d:66:87:e3:dc:b1:d4:41:70:15:7f:c6:
f4:f3:21:11:53:c9:ff:16:b2:38:bc:87:91:4e:64:04:26:05:
5b:7e:ae:60:7e:b5:0e:5c:41:45:78:65:ce:15:36:35:cc:ae:
79:e7:33:c1:98:7d:0b:99:3e:35:4d:13:e1:fe:ee:0b:15:f5:
67:eb:bd:79:d8:4a:20:c4:32:e3:cf:38:37:d4:d3:9d:5a:a1:
42:af:07:82:fa:d1:ad:96:76:8f:ce:8e:a3:a9:dc:38:26:7d:
1b:52:ce:2c:f4:d3:aa:c9:31:1d:5f:6c:4f:f1:f0:e3:34:5b:
0c:5e:96:3e:08:22:7a:db:06:04:10:2b:47:b9:ce:7d:13:6e:
77:c9:66:2f:df:b7:9b:52:8e:b7:98:f2:57:57:de:2c:93:fc:
cb:f5:f8:e3:4a:4f:7a:c7:87:41:60:64:9f:1a:81:f5:6d:6b:
a7:35:b0:b1:c5:a9:d0:85:46:03:8b:20:f9:b1:f2:e5:bc:dc:
e0:eb:51:65:aa:64:ab:56:cf:f8:35:d1:f1:70:34:3d:3f:11:
23:7f:99:eb:bb:90:77:57:58:20:e9:e6:01:e6:12:ef:be:ba:
50:2c:75:5a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfewb0+jByxEnP1fQ20zKw3IqatowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDUxODQxMjlaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDA5MTFhYjA3ZDE4YzQ5YjEyYThhODA2OGE1NDIzYzlhYWIzMTk5MmU1MDNi
MzVlMjZhM2JhNTVhNTZiZDVlYmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM4YUNMcltKk3DwC80XyoIsdnP0M3a3+vvyQb8Ns+m/5421u8kd6wEFEHYMA
SFRePWdLnJuHMdJXJoGZ70XLeuzIswNHdizoRgXi+/mEzOswAEoSneALntpjBGKa
xZu77RK1S5SFI4o1rv640NF9mL3Z9/Y/rEWPAyIzdzNDL5QMarQdG61o44MaFqJn
BFJedYhnmRjyRljWUgmrQpAEd+7VECgLQgp3sGHbJqhtt+yTBMssrXJzwOuE7h4U
BNxjc0uiWIDLLOqtylHXPFOxGIDauswXGFPqFHSGUNIenWFbUUoNW8UyogqUQg8L
/lxePWvKFO7aqr+vjsM4vAo4Bm8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQPmLfR
Jf9bL0UdMXrbR5ICjgKcVDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzVkMGI1ZDktMjQ3Ny00ZDM4LWFiN2EtMGM2MGEzM2Q4MjQ2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFg
QDANBgkqhkiG9w0BAQsFAAOCAQEAhjLcLgBEB0IAphmm8ThwErHrPP28UOPeLWaH
49yx1EFwFX/G9PMhEVPJ/xayOLyHkU5kBCYFW36uYH61DlxBRXhlzhU2Ncyueecz
wZh9C5k+NU0T4f7uCxX1Z+u9edhKIMQy4884N9TTnVqhQq8HgvrRrZZ2j86Oo6nc
OCZ9G1LOLPTTqskxHV9sT/Hw4zRbDF6WPggietsGBBArR7nOfRNud8lmL9+3m1KO
t5jyV1feLJP8y/X440pPeseHQWBknxqB9W1rpzWwscWp0IVGA4sg+bHy5bzc4OtR
Zapkq1bP+DXR8XA0PT8RI3+Z67uQd1dYIOnmAeYS7766UCx1Wg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:47:16 2025 by rpki-client