Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
File: 8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa (raw, json)
Hash identifier: tFrbedynPewuTxP0KfoRgITmmR+bA2SRLsdFEF39TTQ=
Subject key identifier: 92:CB:FA:D6:27:56:38:D2:3E:5C:C7:73:77:84:B8:D7:05:83:1C:9D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22E6C6D3B8CFF74B3A4E1D95FBC1BC092C1C9694
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
Signing time: Fri 10 Oct 2025 17:10:06 +0000
ROA not before: Fri 10 Oct 2025 17:10:06 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e6:c6:d3:b8:cf:f7:4b:3a:4e:1d:95:fb:c1:bc:09:2c:1c:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 10 17:10:06 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=4d70aa6f13361a1ddd21fa071fac8d6c5491d9c27dfa43f751871ec8e3ab11b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:2c:03:b5:44:20:44:c4:69:be:86:48:0d:
ff:10:ec:2c:51:13:bb:c4:a6:14:32:02:2a:6e:45:
20:02:ab:5a:eb:8f:29:4e:f0:2b:13:dd:45:f8:43:
2c:43:b2:bc:0f:39:d0:34:07:64:85:2d:b2:02:34:
3a:5d:ae:c5:db:4d:f6:12:97:23:83:91:b7:2f:1b:
6a:2d:f8:a3:89:c0:d0:52:e4:14:1c:25:ff:a3:fb:
c7:41:55:26:a2:f8:a2:2c:fd:b1:05:06:bc:96:a1:
1b:e9:ab:26:6b:cc:8b:7e:fd:26:11:e8:ea:63:03:
dc:75:a2:9e:25:e8:68:89:5a:18:53:3b:fd:b3:bf:
d1:a6:6f:10:c4:8a:df:b0:18:70:4e:a9:97:57:0f:
2d:09:72:64:c3:f7:7a:1a:c9:5d:9b:4f:be:1f:7d:
a6:ba:f7:25:24:05:09:45:6a:c4:44:a6:24:4d:94:
09:18:96:01:b1:b7:f3:81:18:fd:69:4b:2b:a3:7a:
87:93:41:75:cb:ec:4c:db:be:56:82:3b:a5:d2:02:
f5:15:74:e2:40:38:6b:7f:c6:20:ef:bf:2b:71:24:
da:ed:a1:ec:72:ef:8f:f3:9c:fc:93:76:e8:3a:f6:
68:02:96:c7:53:30:80:19:08:8c:cd:16:d4:7d:0c:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:FA:D6:27:56:38:D2:3E:5C:C7:73:77:84:B8:D7:05:83:1C:9D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8ab93083-00f7-4841-8cef-6b5926b6e3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.192.0/20
Signature Algorithm: sha256WithRSAEncryption
78:19:88:50:c4:d9:6e:43:96:fa:00:b9:f9:e0:59:8e:1a:b4:
2a:0c:f8:04:45:96:22:f3:7e:ce:df:37:f4:95:55:ce:6c:f6:
53:bb:08:3a:9e:b0:0f:6c:7d:11:1a:98:39:85:ec:b2:a8:57:
bf:bf:f5:54:69:e2:67:33:5d:94:7f:93:c6:f2:b4:cc:ad:a1:
79:32:d1:a9:4c:44:e4:c9:b2:c8:c2:fb:a4:9d:1f:85:37:9c:
8d:fb:fd:2e:10:d9:20:a7:42:cc:94:12:d5:5f:c6:71:fa:91:
07:08:7d:12:f2:ed:23:04:d6:2a:51:44:02:00:51:97:b2:72:
b1:3c:59:ed:de:14:02:fc:f1:be:ba:d8:77:fb:aa:1b:5a:5b:
d6:68:c9:5b:6f:cd:b6:bd:dd:ac:f2:5a:16:0b:9d:87:ed:9b:
26:0b:dc:f6:ea:e9:41:fb:64:41:b0:13:aa:99:35:57:21:9d:
8e:70:1a:a6:ff:7e:b2:9f:5d:7e:65:99:70:44:c9:e5:a6:53:
92:fc:5c:de:6e:f3:d9:99:92:f1:d0:65:1e:c3:b5:69:ec:4b:
82:62:2a:48:f8:cf:f7:d0:f1:04:dd:a7:ed:a5:e6:e1:00:7a:
02:55:a6:cc:0e:82:ea:0f:87:32:fd:0f:25:8e:f4:e2:5a:b5:
7c:da:43:1f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUIubG07jP90s6Th2V+8G8CSwclpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTAxNzEwMDZaFw0yNTExMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDRkNzBhYTZmMTMzNjFhMWRkZDIxZmEwNzFmYWM4ZDZjNTQ5MWQ5YzI3ZGZh
NDNmNzUxODcxZWM4ZTNhYjExYjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMr4LAO1RCBExGm+hkgN/xDsLFETu8SmFDICKm5FIAKrWuuPKU7wKxPdRfhD
LEOyvA850DQHZIUtsgI0Ol2uxdtN9hKXI4ORty8bai34o4nA0FLkFBwl/6P7x0FV
JqL4oiz9sQUGvJahG+mrJmvMi379JhHo6mMD3HWiniXoaIlaGFM7/bO/0aZvEMSK
37AYcE6pl1cPLQlyZMP3ehrJXZtPvh99prr3JSQFCUVqxESmJE2UCRiWAbG384EY
/WlLK6N6h5NBdcvsTNu+VoI7pdIC9RV04kA4a3/GIO+/K3Ek2u2h7HLvj/Oc/JN2
6Dr2aAKWx1MwgBkIjM0W1H0M788CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSSy/rW
J1Y40j5cx3N3hLjXBYMcnTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGFiOTMwODMtMDBmNy00ODQxLThjZWYtNmI1OTI2YjZlM2Y2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBC4zwDAN
BgkqhkiG9w0BAQsFAAOCAQEAeBmIUMTZbkOW+gC5+eBZjhq0Kgz4BEWWIvN+zt83
9JVVzmz2U7sIOp6wD2x9ERqYOYXssqhXv7/1VGniZzNdlH+TxvK0zK2heTLRqUxE
5MmyyML7pJ0fhTecjfv9LhDZIKdCzJQS1V/GcfqRBwh9EvLtIwTWKlFEAgBRl7Jy
sTxZ7d4UAvzxvrrYd/uqG1pb1mjJW2/Ntr3drPJaFgudh+2bJgvc9urpQftkQbAT
qpk1VyGdjnAapv9+sp9dfmWZcETJ5aZTkvxc3m7z2ZmS8dBlHsO1aexLgmIqSPjP
99DxBN2n7aXm4QB6AlWmzA6C6g+HMv0PJY704lq1fNpDHw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:05 2025 by rpki-client