Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a4cf0339-93b9-475e-be84-baec893db7a6.roa
File: a4cf0339-93b9-475e-be84-baec893db7a6.roa (raw, json)
Hash identifier: EHNPcjw2b1Ku8mZDGHcL41ppGCTYyFh3uwoiwL4yQRE=
Subject key identifier: 91:45:7D:90:B4:F5:78:A4:FB:2A:D8:BD:19:6F:57:8C:93:26:09:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E95270A4279F5F6821B621A71B9EEB3892B5829
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a4cf0339-93b9-475e-be84-baec893db7a6.roa
Signing time: Fri 17 Oct 2025 23:20:14 +0000
ROA not before: Fri 17 Oct 2025 23:20:14 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06c:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:95:27:0a:42:79:f5:f6:82:1b:62:1a:71:b9:ee:b3:89:2b:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 17 23:20:14 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=baf501f9bfb1f2aec27822b7c45ee992b86bff7432b78588daf6b068b1424227, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:76:22:e7:ad:7c:ad:05:2d:e1:3e:55:88:
9c:58:b0:87:b5:d8:0b:60:d6:29:63:d0:55:b3:0a:
70:61:92:02:22:85:75:da:2c:7d:1b:ec:73:f9:1d:
8e:75:bd:e5:13:1e:ca:05:df:3d:d7:ef:41:92:b2:
0b:bc:c2:9f:b2:22:55:f1:39:1c:68:b1:55:b6:8c:
55:c9:47:ee:de:19:59:10:e2:a2:14:40:60:26:07:
a3:ba:74:01:4d:f8:2d:b6:ee:43:00:08:87:b7:e3:
95:d0:53:13:38:63:a2:02:54:52:97:f8:1e:14:ad:
70:14:24:35:be:9d:86:a3:7a:96:3b:c9:59:57:dd:
c5:ec:2e:09:05:bd:41:ce:2b:0b:84:5e:8b:58:ca:
11:d0:94:c9:e2:9f:42:63:51:a5:b3:45:63:85:48:
7d:97:5a:3e:15:7a:57:59:1c:d6:4c:5b:10:d1:ab:
3a:7a:48:4d:13:3d:95:e0:0b:d4:22:c0:71:33:ac:
3f:81:a0:60:2f:03:33:8e:83:f9:83:7c:5e:c1:3f:
8b:14:96:a1:e7:97:18:bb:b2:c3:05:0b:01:c7:66:
3b:24:c2:d9:bb:4d:2f:a9:44:70:7e:c7:a7:86:8a:
8e:23:99:0e:c5:d0:5d:52:77:4a:45:b9:34:56:5e:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:7D:90:B4:F5:78:A4:FB:2A:D8:BD:19:6F:57:8C:93:26:09:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a4cf0339-93b9-475e-be84-baec893db7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06c:f000::/48
Signature Algorithm: sha256WithRSAEncryption
4f:86:74:70:6e:fb:ed:fe:e4:55:4f:93:95:38:a3:e3:e5:7a:
3d:33:ff:20:92:25:1e:bc:43:33:4d:a8:7c:03:ae:83:3c:1f:
13:4a:c8:da:77:6b:84:12:70:03:38:1e:7f:86:00:9b:28:bd:
97:f4:9d:bc:e3:e1:52:02:f4:7e:9f:fe:10:8c:78:9e:a8:81:
34:70:7c:4c:3b:c5:2b:fc:1f:93:25:d2:92:51:c7:49:8a:f8:
62:48:47:e6:69:e4:e9:4f:d8:5f:37:dd:ae:60:53:40:9e:7e:
56:b6:a4:65:f1:bb:a2:76:47:fc:5b:db:70:2a:80:2f:80:77:
b9:62:ea:05:2f:4e:12:b5:93:88:c6:b0:4b:e9:53:04:c4:5f:
3a:7a:d4:74:f8:56:89:a6:c8:9e:4e:0e:56:18:bd:37:15:58:
a6:68:14:4f:7e:4b:64:3d:6b:b1:59:71:15:3a:0f:90:6a:da:
05:b4:9c:63:34:e3:a6:d5:24:52:85:ed:3d:87:76:10:93:2c:
5e:8d:95:8d:4f:e0:c3:36:3a:10:52:26:65:b7:33:c1:47:d4:
32:96:29:91:67:4a:1a:14:0a:33:5f:71:02:e7:03:69:a3:1a:
75:78:23:3f:27:28:89:33:48:c1:87:4d:0c:67:ae:e0:17:07:
54:61:c7:bf
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHpUnCkJ59faCG2Iacbnus4krWCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMTcyMzIwMTRaFw0yNTExMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhZjUwMWY5YmZiMWYyYWVjMjc4MjJiN2M0NWVlOTkyYjg2YmZmNzQzMmI3
ODU4OGRhZjZiMDY4YjE0MjQyMjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJP6diLnrXytBS3hPlWInFiwh7XYC2DWKWPQVbMKcGGSAiKFddosfRvsc/kd
jnW95RMeygXfPdfvQZKyC7zCn7IiVfE5HGixVbaMVclH7t4ZWRDiohRAYCYHo7p0
AU34LbbuQwAIh7fjldBTEzhjogJUUpf4HhStcBQkNb6dhqN6ljvJWVfdxewuCQW9
Qc4rC4Rei1jKEdCUyeKfQmNRpbNFY4VIfZdaPhV6V1kc1kxbENGrOnpITRM9leAL
1CLAcTOsP4GgYC8DM46D+YN8XsE/ixSWoeeXGLuywwULAcdmOyTC2btNL6lEcH7H
p4aKjiOZDsXQXVJ3SkW5NFZeZ0UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSRRX2Q
tPV4pPsq2L0Zb1eMkyYJtDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTRjZjAzMzktOTNiOS00NzVlLWJlODQtYmFlYzg5M2RiN2E2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gzw
ADANBgkqhkiG9w0BAQsFAAOCAQEAT4Z0cG777f7kVU+TlTij4+V6PTP/IJIlHrxD
M02ofAOugzwfE0rI2ndrhBJwAzgef4YAmyi9l/SdvOPhUgL0fp/+EIx4nqiBNHB8
TDvFK/wfkyXSklHHSYr4YkhH5mnk6U/YXzfdrmBTQJ5+VrakZfG7onZH/FvbcCqA
L4B3uWLqBS9OErWTiMawS+lTBMRfOnrUdPhWiabInk4OVhi9NxVYpmgUT35LZD1r
sVlxFToPkGraBbScYzTjptUkUoXtPYd2EJMsXo2VjU/gwzY6EFImZbczwUfUMpYp
kWdKGhQKM19xAucDaaMadXgjPycoiTNIwYdNDGeu4BcHVGHHvw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:52 2025 by rpki-client