Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: 7LQKUc3Yd59zOOL4UEXYu6PGxxbOznJsVIPCHD8UBlg=
Subject key identifier: 16:40:45:30:00:DA:83:9B:13:68:56:9A:7B:03:AA:30:A7:B3:A1:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 617DA576D5D2B7052E0925771887DE8FEEE1519E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Sat 27 Sep 2025 00:53:32 +0000
ROA not before: Sat 27 Sep 2025 00:53:32 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7d:a5:76:d5:d2:b7:05:2e:09:25:77:18:87:de:8f:ee:e1:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 27 00:53:32 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=6be0f0fcaf263645c7d837b4c14e7a8a03162ccd5f5976597b819a7f2a6195e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:f4:61:67:bf:f3:59:cb:d5:6b:d5:eb:90:
df:57:0c:cc:c9:41:45:cd:bf:c8:6e:db:dd:dd:9f:
57:aa:2e:2d:89:2c:a8:1c:4f:c9:37:1d:5c:f4:38:
72:ce:ab:54:8b:d3:14:b7:b1:ff:a0:9a:f4:7e:65:
af:be:f5:c9:0a:68:73:37:91:9b:74:de:3d:74:fc:
de:98:8a:c7:a8:e0:91:38:4c:5a:32:83:5a:3a:08:
9e:a7:a3:38:52:b2:08:83:c7:f3:8e:f2:2b:6d:90:
25:86:a3:2f:e1:d3:56:8f:ea:56:bd:4a:b1:81:0c:
6d:19:7b:15:ae:30:6c:0f:14:43:b7:11:27:5d:41:
66:31:51:c4:11:c3:0c:5d:b5:cd:55:2a:ed:bd:cc:
c7:8d:55:34:3e:94:41:e9:20:15:65:6e:7d:f1:48:
9a:d1:4c:47:a3:1d:c2:9c:a7:9f:c6:2b:ab:43:90:
69:b2:94:1c:34:1e:e7:2b:66:f7:83:7d:08:6e:ac:
95:a4:07:90:6a:16:20:cc:89:25:58:79:74:4b:31:
fe:a8:3a:36:c0:0c:95:1a:d1:e5:47:b0:d8:82:6b:
db:cd:6f:35:a2:aa:36:e2:e1:05:cf:48:6a:d7:d0:
74:cf:fe:ae:c3:4b:9f:b3:db:7d:ee:86:61:fc:4c:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:45:30:00:DA:83:9B:13:68:56:9A:7B:03:AA:30:A7:B3:A1:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:8e:72:cc:83:f1:3a:ba:dd:27:cf:af:5b:01:e2:92:dc:6b:
47:f2:7f:46:11:03:02:bb:19:91:99:82:4e:62:6f:77:da:3a:
10:74:3f:43:14:18:05:81:14:60:2a:8a:5a:83:d5:e4:84:4c:
3c:de:10:fe:24:2d:17:4e:84:96:b4:e7:3a:de:7b:6c:68:09:
9d:dd:c1:4b:c7:2e:90:6d:5b:12:a9:8e:0a:eb:e1:2d:08:5b:
2a:48:21:5f:b8:fc:fe:e5:dc:12:91:04:4d:ce:9c:b9:0f:b5:
e7:fe:f9:a5:0b:43:71:1f:43:2d:a2:a6:bf:87:b6:a6:9e:69:
33:21:c5:42:f8:f4:49:0f:b9:09:f7:cb:0a:24:09:df:eb:9c:
8d:8d:34:4b:3e:0b:4e:c0:96:4a:e9:ed:67:8f:2e:32:c5:16:
5e:76:75:79:29:58:3e:b5:be:45:b2:fc:67:e0:a2:f0:22:80:
d8:11:16:9f:7e:ee:30:04:e1:6a:86:49:31:dd:1d:60:eb:66:
5a:f1:b7:a0:8f:62:5d:9d:5e:42:fc:f9:e1:52:11:71:d4:5e:
02:c6:92:90:cf:29:74:75:fc:c1:bf:91:61:10:44:61:3f:8a:
62:f7:b1:58:0d:30:44:ed:33:11:de:a3:91:00:50:23:40:db:
f6:56:4e:4c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYX2ldtXStwUuCSV3GIfej+7hUZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjcwMDUzMzJaFw0yNTExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiZTBmMGZjYWYyNjM2NDVjN2Q4MzdiNGMxNGU3YThhMDMxNjJjY2Q1ZjU5
NzY1OTdiODE5YTdmMmE2MTk1ZTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM8c9GFnv/NZy9Vr1euQ31cMzMlBRc2/yG7b3d2fV6ouLYksqBxPyTcdXPQ4
cs6rVIvTFLex/6Ca9H5lr771yQpoczeRm3TePXT83piKx6jgkThMWjKDWjoInqej
OFKyCIPH847yK22QJYajL+HTVo/qVr1KsYEMbRl7Fa4wbA8UQ7cRJ11BZjFRxBHD
DF21zVUq7b3Mx41VND6UQekgFWVuffFImtFMR6Mdwpynn8Yrq0OQabKUHDQe5ytm
94N9CG6slaQHkGoWIMyJJVh5dEsx/qg6NsAMlRrR5Uew2IJr281vNaKqNuLhBc9I
atfQdM/+rsNLn7Pbfe6GYfxMzVcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQWQEUw
ANqDmxNoVpp7A6owp7OhLDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTJmMTQyZjItYmQxYy00Mjk1LWEwMDgtZWZjZGUwNGNlYjE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099EDAN
BgkqhkiG9w0BAQsFAAOCAQEAe45yzIPxOrrdJ8+vWwHiktxrR/J/RhEDArsZkZmC
TmJvd9o6EHQ/QxQYBYEUYCqKWoPV5IRMPN4Q/iQtF06ElrTnOt57bGgJnd3BS8cu
kG1bEqmOCuvhLQhbKkghX7j8/uXcEpEETc6cuQ+15/75pQtDcR9DLaKmv4e2pp5p
MyHFQvj0SQ+5CffLCiQJ3+ucjY00Sz4LTsCWSuntZ48uMsUWXnZ1eSlYPrW+RbL8
Z+Ci8CKA2BEWn37uMAThaoZJMd0dYOtmWvG3oI9iXZ1eQvz54VIRcdReAsaSkM8p
dHX8wb+RYRBEYT+KYvexWA0wRO0zEd6jkQBQI0Db9lZOTA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:47 2025 by rpki-client