Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
File: a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa (raw, json)
Hash identifier: SXOOYVPJ9sGSN58ZmlkEY4p/h1afF48FQUbnXBGNuIk=
Subject key identifier: EA:2A:E0:EF:EF:0D:FB:D4:FC:A5:57:27:D4:D7:B2:5C:A8:A3:46:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1628D5454E046E89514FEED801560FAD4B96F3CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
Signing time: Fri 26 Sep 2025 19:21:34 +0000
ROA not before: Fri 26 Sep 2025 19:21:34 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:28:d5:45:4e:04:6e:89:51:4f:ee:d8:01:56:0f:ad:4b:96:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 19:21:34 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=dc64525e201c66849161b4423376ea049396af6b82e27321b0cb83ed64edb8d8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f3:f8:68:94:ee:23:fe:87:81:4b:fe:cf:9d:
ee:34:26:8c:50:06:98:05:d2:33:b1:d8:53:b0:c2:
b5:fc:1c:51:3a:e4:d5:12:9e:ff:ca:1b:8f:5e:06:
e7:e1:da:48:aa:b9:cd:47:6d:5e:55:ec:63:05:6b:
ab:af:12:ff:b0:cb:fa:88:03:a4:90:db:d4:5f:c7:
4c:43:46:a8:a5:a0:0a:84:8e:e7:89:71:12:1f:51:
6b:64:1d:ac:51:95:7a:80:7c:86:08:00:ed:fa:af:
85:74:cb:bf:fa:c5:73:3d:c0:bd:f0:f2:dd:f0:ef:
2a:e5:37:2b:84:2d:dc:0b:a3:88:d9:78:4f:a1:2d:
eb:16:e3:8d:4f:bd:8c:af:07:51:82:73:ea:60:3a:
65:a1:7c:5d:f5:b2:3b:58:2a:a2:73:8c:66:44:b6:
62:91:9d:8a:92:f5:21:da:6a:de:4a:51:fd:5b:90:
a9:7c:0f:9f:5a:1c:ad:2b:e3:92:af:e6:30:b6:ce:
75:26:f5:0a:68:e1:af:20:ec:f7:a0:17:14:5d:e8:
16:a3:f2:6e:d5:f0:ad:78:eb:af:d1:56:2b:94:e4:
de:ff:db:89:59:3c:34:e5:31:92:ba:a9:a5:bb:5c:
9d:bb:8f:0f:b8:f4:d0:cd:da:2c:7d:a2:60:e9:bb:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:E0:EF:EF:0D:FB:D4:FC:A5:57:27:D4:D7:B2:5C:A8:A3:46:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:bd:13:06:7f:e6:1e:23:04:2a:18:f9:57:64:6a:cc:80:e6:
51:1b:a4:32:1b:54:a1:6d:71:b3:e0:01:bb:8c:81:e8:95:1a:
b8:55:39:77:1f:08:d4:94:a1:82:fc:05:20:a6:84:0a:48:31:
91:47:d5:14:42:f3:81:86:a5:1b:4e:39:62:c7:ff:ec:27:3a:
38:d1:74:e8:37:aa:81:af:3d:0f:31:32:2e:81:fe:72:54:03:
d5:83:a4:84:01:ce:40:37:5e:88:5a:89:30:8a:5c:ac:8d:1a:
29:5a:16:b9:ae:77:2f:13:40:3f:00:77:f1:58:69:43:6c:e9:
73:b5:93:d2:9e:99:0d:a2:59:0e:1f:84:74:85:c7:32:a4:67:
b2:3b:19:65:b2:4b:77:ec:d4:bb:91:b3:d8:fa:9e:d8:4e:c4:
25:1a:d8:f2:82:1a:1a:25:9c:71:11:2f:cd:0e:ac:87:e4:ff:
76:3c:c2:78:48:27:1d:3e:12:76:d2:7d:7f:9b:c4:3c:11:8e:
15:c3:75:99:52:38:ac:3c:ad:f9:be:5c:ca:32:f4:17:ba:d5:
15:d8:f5:1a:eb:a2:0c:c9:74:cd:25:5e:96:7b:ec:42:89:89:
0a:95:ea:69:ac:82:68:ea:8a:30:9f:36:01:37:b6:19:b2:62:
a1:fe:2c:af
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFijVRU4EbolRT+7YAVYPrUuW88swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxOTIxMzRaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGRjNjQ1MjVlMjAxYzY2ODQ5MTYxYjQ0MjMzNzZlYTA0OTM5NmFmNmI4MmUy
NzMyMWIwY2I4M2VkNjRlZGI4ZDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPLz+GiU7iP+h4FL/s+d7jQmjFAGmAXSM7HYU7DCtfwcUTrk1RKe/8obj14G
5+HaSKq5zUdtXlXsYwVrq68S/7DL+ogDpJDb1F/HTENGqKWgCoSO54lxEh9Ra2Qd
rFGVeoB8hggA7fqvhXTLv/rFcz3AvfDy3fDvKuU3K4Qt3AujiNl4T6Et6xbjjU+9
jK8HUYJz6mA6ZaF8XfWyO1gqonOMZkS2YpGdipL1Idpq3kpR/VuQqXwPn1ocrSvj
kq/mMLbOdSb1CmjhryDs96AXFF3oFqPybtXwrXjrr9FWK5Tk3v/biVk8NOUxkrqp
pbtcnbuPD7j00M3aLH2iYOm752ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTqKuDv
7w371PylVyfU17JcqKNGGjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTJjNGMyOGMtMGRmOS00MGQ0LWJmNGQtOTI2MTA0YjY5MWY0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DpA
MA0GCSqGSIb3DQEBCwUAA4IBAQCtvRMGf+YeIwQqGPlXZGrMgOZRG6QyG1ShbXGz
4AG7jIHolRq4VTl3HwjUlKGC/AUgpoQKSDGRR9UUQvOBhqUbTjlix//sJzo40XTo
N6qBrz0PMTIugf5yVAPVg6SEAc5AN16IWokwilysjRopWha5rncvE0A/AHfxWGlD
bOlztZPSnpkNolkOH4R0hccypGeyOxllskt37NS7kbPY+p7YTsQlGtjyghoaJZxx
ES/NDqyH5P92PMJ4SCcdPhJ20n1/m8Q8EY4Vw3WZUjisPK35vlzKMvQXutUV2PUa
66IMyXTNJV6We+xCiYkKlepprIJo6oownzYBN7YZsmKh/iyv
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:13 2025 by rpki-client