Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
File: 787a0cca-ea85-49b8-8c0b-bef4512620de.roa (raw, json)
Hash identifier: eR5iu9pq3ooNV82pNB7bcVQ/zg7yXFFN4l5tVSnyAII=
Subject key identifier: 68:80:E2:1B:FB:6A:3C:BB:E6:B2:D8:75:9E:A6:F1:82:3D:F2:1D:78
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: F7300D1277FCC1562BD0DDA18061E245A88354
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
Signing time: Fri 10 Oct 2025 17:05:03 +0000
ROA not before: Fri 10 Oct 2025 17:05:03 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f7:30:0d:12:77:fc:c1:56:2b:d0:dd:a1:80:61:e2:45:a8:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 10 17:05:03 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=a8d5dad9fc18761d7c942ac105c734fd95232c91f1194cc10872c3f564c149ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:f6:65:5a:6c:6f:05:19:62:e6:1c:a8:5b:
d3:4b:2c:9c:10:14:a5:64:b0:74:cb:2f:9f:49:3c:
b8:2c:8e:66:27:cc:56:15:4b:66:2b:ca:63:18:d7:
b3:d4:3a:3d:97:9b:1b:4a:ce:4c:ba:3e:49:93:e7:
6f:62:e7:6c:9f:12:61:74:11:8c:58:db:3d:51:91:
3f:ea:0e:50:95:f4:67:18:bd:c9:cc:2a:36:7f:33:
80:0c:fb:f7:4c:20:83:68:0f:29:ec:62:48:37:16:
eb:cc:d6:ad:21:ac:74:a1:52:2c:58:bf:27:4c:eb:
28:68:3d:84:6e:73:f3:9a:3a:8a:3d:0c:06:c2:3e:
95:80:b8:64:9b:62:ac:4d:85:b0:f0:e6:fa:b2:f1:
85:ed:db:cd:69:44:cc:34:29:4b:9e:d2:33:8a:4e:
aa:d9:74:65:49:c3:96:82:f6:04:87:b9:6d:59:71:
4e:f5:29:fc:f5:17:c3:f0:b2:14:bb:6e:fc:e4:79:
f3:d6:89:d7:20:4e:5d:63:82:e2:f5:32:ae:27:35:
66:d0:9f:e6:6d:0f:b4:99:9c:f6:aa:71:e7:ff:1b:
da:52:ea:df:07:66:36:09:b9:45:f0:6c:80:ef:17:
42:00:ed:63:2b:f9:9a:36:2f:6f:f5:57:db:63:8e:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:80:E2:1B:FB:6A:3C:BB:E6:B2:D8:75:9E:A6:F1:82:3D:F2:1D:78
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/787a0cca-ea85-49b8-8c0b-bef4512620de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:9000::/40
Signature Algorithm: sha256WithRSAEncryption
82:c4:fe:f5:5c:2c:4c:20:4d:4c:c3:d9:42:06:a8:c3:65:0b:
2e:3c:9f:3a:a4:83:7a:c9:0f:5d:81:45:2e:ff:b0:74:86:2c:
46:51:22:b3:9a:3b:3d:ba:2f:15:32:af:5b:ad:69:4e:56:04:
6c:ae:a2:2a:40:d7:61:8d:99:b6:fe:d8:c5:a1:ec:2e:f1:c9:
5e:fd:59:da:bf:8a:9a:37:3e:e5:a9:09:9a:66:de:81:38:0b:
89:19:f9:3d:29:29:0a:84:6a:8e:5c:1a:d8:46:07:29:7b:9d:
ef:b7:1c:f1:9a:bb:08:4c:76:f1:61:9f:84:b7:56:39:ec:e9:
91:34:29:f9:7c:da:01:77:62:a0:8b:77:fa:ab:9d:e2:a6:1d:
34:68:8c:99:b1:98:60:d5:3e:95:f3:9d:31:7d:17:a3:d9:71:
43:da:2a:ef:1e:92:98:84:16:db:d4:e8:3e:d9:5b:f2:4d:e7:
e8:a3:9d:7b:27:70:aa:86:8c:13:4d:0b:ef:01:a2:b3:63:19:
34:66:93:10:cd:72:bb:12:ed:d7:01:3e:0c:23:02:d3:c5:45:
49:6a:63:d6:6e:b8:a1:52:09:a4:3d:73:f4:1f:e1:64:48:8c:
aa:9d:50:52:02:60:b7:12:8c:cb:6f:c3:cd:b2:6e:2b:ab:8c:
da:1e:36:cd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAPcwDRJ3/MFWK9DdoYBh4kWog1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTAxNzA1MDNaFw0yNTExMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQGE4ZDVkYWQ5ZmMxODc2MWQ3Yzk0MmFjMTA1YzczNGZkOTUyMzJjOTFmMTE5
NGNjMTA4NzJjM2Y1NjRjMTQ5Y2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKYr9mVabG8FGWLmHKhb00ssnBAUpWSwdMsvn0k8uCyOZifMVhVLZivKYxjX
s9Q6PZebG0rOTLo+SZPnb2LnbJ8SYXQRjFjbPVGRP+oOUJX0Zxi9ycwqNn8zgAz7
90wgg2gPKexiSDcW68zWrSGsdKFSLFi/J0zrKGg9hG5z85o6ij0MBsI+lYC4ZJti
rE2FsPDm+rLxhe3bzWlEzDQpS57SM4pOqtl0ZUnDloL2BIe5bVlxTvUp/PUXw/Cy
FLtu/OR589aJ1yBOXWOC4vUyric1ZtCf5m0PtJmc9qpx5/8b2lLq3wdmNgm5RfBs
gO8XQgDtYyv5mjYvb/VX22OO6EMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRogOIb
+2o8u+ay2HWepvGCPfIdeDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Nzg3YTBjY2EtZWE4NS00OWI4LThjMGItYmVmNDUxMjYyMGRlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HSQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCCxP71XCxMIE1Mw9lCBqjDZQsuPJ86pIN6yQ9d
gUUu/7B0hixGUSKzmjs9ui8VMq9brWlOVgRsrqIqQNdhjZm2/tjFoewu8cle/Vna
v4qaNz7lqQmaZt6BOAuJGfk9KSkKhGqOXBrYRgcpe53vtxzxmrsITHbxYZ+Et1Y5
7OmRNCn5fNoBd2Kgi3f6q53iph00aIyZsZhg1T6V850xfRej2XFD2irvHpKYhBbb
1Og+2VvyTefoo517J3CqhowTTQvvAaKzYxk0ZpMQzXK7Eu3XAT4MIwLTxUVJamPW
brihUgmkPXP0H+FkSIyqnVBSAmC3EozLb8PNsm4rq4zaHjbN
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:55 2025 by rpki-client