Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8146d8b0-c915-47aa-8fee-088a065bf68e.roa
File: 8146d8b0-c915-47aa-8fee-088a065bf68e.roa (raw, json)
Hash identifier: OFx+PF2QHyC4ydSI7eYG2Bp1CiJios/mkY+GTl+rDYM=
Subject key identifier: 91:B4:0F:8A:39:5C:46:57:B3:C8:F5:89:BC:D7:A0:8A:A8:CB:C8:91
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CA157E130C17B9F3BD1072BB715D0E85CE00863
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8146d8b0-c915-47aa-8fee-088a065bf68e.roa
Signing time: Mon 06 Oct 2025 17:50:12 +0000
ROA not before: Mon 06 Oct 2025 17:50:12 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a1:57:e1:30:c1:7b:9f:3b:d1:07:2b:b7:15:d0:e8:5c:e0:08:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:12 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=7dfbb6c0b72fa5068be7ceadfc17bc78b2dd62b57e494e502ba5b4e05ebb9f8c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:97:73:72:dc:65:ba:bf:2f:2c:0b:16:89:
5a:99:45:19:18:ab:c0:92:b7:9d:d8:2f:b4:fe:b5:
2d:f8:82:e6:79:bd:46:80:8a:54:87:ea:82:8d:7c:
c8:47:bb:a7:9e:bc:cf:c2:34:ba:c1:b6:88:9c:bf:
7c:f6:fd:0e:5f:b4:7d:f4:c1:a5:86:33:c9:72:91:
85:9e:07:82:13:0d:1f:a3:38:b9:a6:99:ed:25:31:
09:71:a8:9e:13:e4:62:d6:eb:23:0b:a2:7c:84:fc:
8c:35:37:3a:89:59:c1:c7:5c:be:3b:37:a9:74:06:
70:d5:d3:79:7d:bc:f1:79:1d:d7:3d:9c:7f:1c:53:
c4:88:a1:f2:e9:20:ba:eb:34:a7:3c:4b:fb:64:6e:
c2:d8:74:08:87:de:8b:e9:e5:69:c1:d7:e4:38:8f:
49:3a:40:2b:cb:c8:95:83:40:2b:f8:b5:d1:28:0d:
07:16:6d:e0:d8:75:2c:c5:98:81:1b:f5:cf:12:34:
48:d6:2a:0c:92:81:37:40:bc:fe:28:58:e1:e0:0c:
ae:71:70:6c:9f:28:b3:e8:c4:be:62:19:b5:b0:13:
0d:ed:b4:d6:1c:e5:cf:98:ca:4c:ee:b7:71:c1:9c:
17:b4:b8:12:e9:3f:87:71:54:4e:35:5c:fe:8a:be:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:0F:8A:39:5C:46:57:B3:C8:F5:89:BC:D7:A0:8A:A8:CB:C8:91
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8146d8b0-c915-47aa-8fee-088a065bf68e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:2080::/48
Signature Algorithm: sha256WithRSAEncryption
20:ca:81:ce:e2:56:6d:e7:5d:71:86:30:2b:7f:2d:71:69:0b:
a6:c0:88:75:85:5d:e8:36:15:df:de:5b:df:22:f4:ba:d4:de:
b1:17:c3:36:8a:a8:18:50:da:ca:86:3e:ed:22:e5:3d:c9:6e:
93:01:e5:94:8b:3f:c6:52:da:5e:3e:d3:3f:f3:83:8b:35:c4:
37:b0:c8:95:0b:f4:8f:19:3f:d3:81:1b:10:dc:04:b5:42:00:
f8:83:05:41:bb:8f:44:02:74:3e:d0:4e:58:31:20:65:4b:9d:
f5:bd:bb:13:db:5d:04:c2:d5:04:52:9c:51:5a:db:5e:67:63:
8f:23:88:95:07:0b:4e:7f:3b:92:1f:b2:e4:b5:8f:fb:d4:b6:
fe:b0:2a:a1:76:f8:3e:7c:2c:71:27:f2:0b:5b:a1:83:9c:e8:
bb:11:64:08:1a:b7:29:ca:ac:6e:f3:5f:cf:7e:df:f3:d6:4b:
cc:ad:e8:4a:d7:77:84:8c:f7:50:e4:dc:d3:2c:6e:60:2f:a3:
0e:29:4e:8a:4f:5d:8b:b5:8c:82:80:47:b2:87:b0:1f:9d:c5:
ca:e3:8a:ff:45:24:78:1d:b0:97:98:78:c2:40:59:00:90:7e:
d8:86:64:4f:a5:a5:54:bc:a3:89:68:52:4d:cc:35:ac:42:ae:
e4:cb:c6:ae
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfKFX4TDBe5870QcrtxXQ6FzgCGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxNzUwMTJaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDdkZmJiNmMwYjcyZmE1MDY4YmU3Y2VhZGZjMTdiYzc4YjJkZDYyYjU3ZTQ5
NGU1MDJiYTViNGUwNWViYjlmOGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ0Bl3Ny3GW6vy8sCxaJWplFGRirwJK3ndgvtP61LfiC5nm9RoCKVIfqgo18
yEe7p568z8I0usG2iJy/fPb9Dl+0ffTBpYYzyXKRhZ4HghMNH6M4uaaZ7SUxCXGo
nhPkYtbrIwuifIT8jDU3OolZwcdcvjs3qXQGcNXTeX288Xkd1z2cfxxTxIih8ukg
uus0pzxL+2Ruwth0CIfei+nlacHX5DiPSTpAK8vIlYNAK/i10SgNBxZt4Nh1LMWY
gRv1zxI0SNYqDJKBN0C8/ihY4eAMrnFwbJ8os+jEvmIZtbATDe201hzlz5jKTO63
ccGcF7S4Euk/h3FUTjVc/oq+KlcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSRtA+K
OVxGV7PI9Ym816CKqMvIkTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODE0NmQ4YjAtYzkxNS00N2FhLThmZWUtMDg4YTA2NWJmNjhlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H0g
gDANBgkqhkiG9w0BAQsFAAOCAQEAIMqBzuJWbeddcYYwK38tcWkLpsCIdYVd6DYV
395b3yL0utTesRfDNoqoGFDayoY+7SLlPclukwHllIs/xlLaXj7TP/ODizXEN7DI
lQv0jxk/04EbENwEtUIA+IMFQbuPRAJ0PtBOWDEgZUud9b27E9tdBMLVBFKcUVrb
XmdjjyOIlQcLTn87kh+y5LWP+9S2/rAqoXb4PnwscSfyC1uhg5zouxFkCBq3Kcqs
bvNfz37f89ZLzK3oStd3hIz3UOTc0yxuYC+jDilOik9di7WMgoBHsoewH53FyuOK
/0UkeB2wl5h4wkBZAJB+2IZkT6WlVLyjiWhSTcw1rEKu5MvGrg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:53 2025 by rpki-client