Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793b937a-5809-44ba-894f-a25f1535e5a3.roa
File: 793b937a-5809-44ba-894f-a25f1535e5a3.roa (raw, json)
Hash identifier: YjybTSdU3KYOfFFKzXLP17KLzRl3408TwJIjhEHQHHA=
Subject key identifier: 84:55:84:BD:8B:E5:4A:DA:0B:B7:50:A6:64:A1:E8:77:A8:2D:DD:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F003AE75C6EA1BF79CBD36437E4784CF512937B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793b937a-5809-44ba-894f-a25f1535e5a3.roa
Signing time: Mon 06 Oct 2025 17:50:39 +0000
ROA not before: Mon 06 Oct 2025 17:50:39 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:00:3a:e7:5c:6e:a1:bf:79:cb:d3:64:37:e4:78:4c:f5:12:93:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:39 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=a67acfd6294b3e238b1d5ed9fd117dd80e3bc131cdf42bcae0c9e36f0030a5bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:2c:26:41:a7:40:50:b9:53:45:96:08:e7:
72:1c:49:1e:29:e1:3c:57:75:6e:ff:3e:f4:98:f8:
3d:eb:d4:a6:16:64:80:e8:0e:4f:98:1f:98:37:f6:
6b:3f:f8:a2:0a:f7:34:af:df:15:e7:a9:33:03:e4:
67:ca:94:61:69:6a:7c:5a:cc:7c:94:34:5f:2c:58:
3e:72:ac:4e:a7:e1:d7:f9:9d:3b:43:e5:62:cc:c0:
81:9e:db:63:90:36:3c:8b:57:7f:06:93:26:e7:cd:
85:62:0f:87:28:20:78:8c:ef:a4:ad:25:d8:71:30:
15:53:ed:90:54:19:5e:a3:db:eb:e8:66:70:fd:6d:
a5:df:a8:d4:27:98:a1:48:87:b0:bf:ae:6e:7c:00:
ca:8b:df:38:61:06:e1:9d:3e:7a:31:66:b0:e2:c4:
c5:e8:90:ca:5d:02:01:81:66:56:c5:21:59:07:41:
c4:70:e3:df:77:a9:ad:40:90:10:d3:22:6a:dc:4a:
cf:5d:4c:dd:34:35:3d:58:89:76:fc:10:56:83:ea:
37:e5:60:30:57:f3:99:bf:8d:39:cb:86:e1:bd:40:
69:4a:d8:f3:e9:3f:14:6b:a1:76:ff:fe:84:fe:bc:
3f:04:b0:fb:71:98:b1:7f:40:16:64:56:30:a6:90:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:84:BD:8B:E5:4A:DA:0B:B7:50:A6:64:A1:E8:77:A8:2D:DD:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793b937a-5809-44ba-894f-a25f1535e5a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:5000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:c6:d3:e9:da:42:79:5a:b7:76:12:65:39:89:c0:54:a1:84:
13:9b:cf:a1:10:dc:37:05:a1:24:50:e8:14:2c:35:f8:96:df:
c5:a9:ae:0a:cc:17:68:ae:c4:6f:ba:7a:35:96:98:93:d7:a7:
f2:3c:57:27:84:0e:63:7a:f7:b9:47:2f:4a:c5:ba:d8:b3:6c:
19:8c:c8:19:f0:8e:d4:1f:90:40:26:79:dc:d3:ea:e5:d7:f4:
82:f0:34:2b:c2:e0:ee:22:d8:c7:fa:4c:77:0f:5e:23:53:77:
4b:6d:85:5d:fc:12:dc:77:17:f6:45:9f:9a:44:78:d8:3d:8a:
8d:1d:a9:52:6a:1c:8e:9e:d1:a4:d4:e1:f9:41:ed:ef:90:e5:
af:34:0a:e2:27:87:1b:84:ac:22:01:2b:e3:27:95:80:f0:d4:
27:17:13:2d:ca:d7:9c:d9:ba:6e:2a:e2:e4:41:13:29:9d:05:
11:a4:56:d3:fc:61:07:e1:8a:4d:8d:c2:82:45:f6:8b:36:b9:
a9:4f:b2:3c:f4:b0:3b:3a:d7:e3:19:4c:66:35:33:a0:57:a3:
dd:c5:8e:68:59:b7:80:87:4c:2e:5f:9f:75:34:3a:a1:7b:01:
8b:c2:da:f2:b2:45:ae:7f:6f:d1:3f:42:e6:dd:c0:69:e1:51:
b9:ef:9b:95
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfwA651xuob95y9NkN+R4TPUSk3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxNzUwMzlaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGE2N2FjZmQ2Mjk0YjNlMjM4YjFkNWVkOWZkMTE3ZGQ4MGUzYmMxMzFjZGY0
MmJjYWUwYzllMzZmMDAzMGE1YmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALo2LCZBp0BQuVNFlgjnchxJHinhPFd1bv8+9Jj4PevUphZkgOgOT5gfmDf2
az/4ogr3NK/fFeepMwPkZ8qUYWlqfFrMfJQ0XyxYPnKsTqfh1/mdO0PlYszAgZ7b
Y5A2PItXfwaTJufNhWIPhyggeIzvpK0l2HEwFVPtkFQZXqPb6+hmcP1tpd+o1CeY
oUiHsL+ubnwAyovfOGEG4Z0+ejFmsOLExeiQyl0CAYFmVsUhWQdBxHDj33eprUCQ
ENMiatxKz11M3TQ1PViJdvwQVoPqN+VgMFfzmb+NOcuG4b1AaUrY8+k/FGuhdv/+
hP68PwSw+3GYsX9AFmRWMKaQr3sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSEVYS9
i+VK2gu3UKZkoeh3qC3dVzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzkzYjkzN2EtNTgwOS00NGJhLTg5NGYtYTI1ZjE1MzVlNWEzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H1Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBNxtPp2kJ5Wrd2EmU5icBUoYQTm8+hENw3BaEk
UOgULDX4lt/Fqa4KzBdorsRvuno1lpiT16fyPFcnhA5jeve5Ry9KxbrYs2wZjMgZ
8I7UH5BAJnnc0+rl1/SC8DQrwuDuItjH+kx3D14jU3dLbYVd/BLcdxf2RZ+aRHjY
PYqNHalSahyOntGk1OH5Qe3vkOWvNAriJ4cbhKwiASvjJ5WA8NQnFxMtytec2bpu
KuLkQRMpnQURpFbT/GEH4YpNjcKCRfaLNrmpT7I89LA7OtfjGUxmNTOgV6PdxY5o
WbeAh0wuX591NDqhewGLwtryskWuf2/RP0Lm3cBp4VG575uV
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:31 2025 by rpki-client