Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
File: b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa (raw, json)
Hash identifier: 2L+ghh4vVR2lMspwWjmIWMpUUxV9lxioL1UMxSPLVJ0=
Subject key identifier: 43:5F:B9:10:9E:AF:DB:5E:48:BE:79:E7:A0:4F:8B:CB:5F:9D:36:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 592036C1DED1591C48A5FCAEB8D9317835926150
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
Signing time: Mon 06 Oct 2025 18:00:40 +0000
ROA not before: Mon 06 Oct 2025 18:00:40 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:20:36:c1:de:d1:59:1c:48:a5:fc:ae:b8:d9:31:78:35:92:61:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:40 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=194aabc0e57f4cbfa18d0e9af2e5a1a448c2f8a002366946a6bbeb8ad8b9c824, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:da:fc:00:c2:84:81:a2:60:fb:de:50:ec:
37:0f:cf:8a:ef:11:40:e3:94:06:e4:13:7a:1a:21:
e3:a4:c8:35:c0:c8:d8:11:c4:ae:7e:c5:ee:ff:6d:
49:0c:65:ea:6c:a6:43:1b:33:fd:f4:fc:09:01:02:
21:8b:e6:0d:49:40:e4:43:dc:c1:20:e5:2e:5f:94:
88:a5:87:ed:96:2b:85:b0:6f:44:59:06:fb:db:79:
35:6b:f3:6d:ed:0f:28:0c:5d:c6:5f:b3:db:c5:e2:
ad:cd:f9:ca:52:ee:c9:d0:0f:69:77:9f:08:4b:e7:
0a:cf:5d:03:91:d4:ea:af:b5:5a:b7:74:bb:30:f7:
3c:21:2b:82:e8:75:ce:4e:0b:a1:e2:8d:ce:1a:0e:
54:7b:6e:72:d5:37:48:61:a7:cb:8c:78:9f:d0:bf:
53:07:e3:61:5b:e8:3f:19:1e:1b:04:b8:f4:04:92:
91:a0:a6:4b:60:a8:34:2e:ae:a1:27:d6:c1:29:59:
82:f6:9a:36:41:40:33:42:6d:91:f6:10:fc:8d:62:
ad:b2:9b:d5:04:28:45:d6:31:29:5b:3a:30:b2:2b:
18:4b:25:3d:ab:4e:d0:c4:a6:c1:67:10:8c:f7:27:
cc:d7:d3:ac:0a:24:47:20:9a:37:94:1b:c4:c3:f3:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:B9:10:9E:AF:DB:5E:48:BE:79:E7:A0:4F:8B:CB:5F:9D:36:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b35b46ca-e9e4-4035-b6e5-e098ff8fe794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4020::/46
Signature Algorithm: sha256WithRSAEncryption
21:d5:e7:e6:77:69:75:7b:65:66:a5:fd:2a:c0:65:51:83:33:
0f:25:62:37:f7:80:d0:3e:fc:cf:c8:ef:c0:fe:7a:32:a4:47:
9c:fe:11:78:31:20:7c:d9:6e:e0:fa:1b:36:af:9f:8c:92:5e:
21:28:7e:ee:8a:fb:99:e8:4f:21:37:5b:90:35:bb:f1:b6:f9:
cb:8f:ec:9d:84:58:df:3f:92:cc:29:23:ad:a8:b7:e5:9e:4b:
42:3d:90:2b:cf:7d:df:f4:63:61:73:f8:6f:a5:c2:22:e8:77:
69:63:da:54:ec:7e:0f:88:9b:9e:e0:3c:87:a8:a2:5d:d1:c7:
25:d1:1d:09:0f:97:57:7c:66:60:66:e6:bc:27:7b:b3:0f:fe:
e3:de:2e:f8:be:42:16:ea:ee:af:47:d2:a1:73:61:69:14:4b:
2c:fb:b2:fd:30:cb:48:d1:26:2e:ba:5c:5d:1a:51:10:2f:64:
14:fe:77:68:ec:85:f2:30:3f:dc:54:d0:ec:a3:49:31:d8:cf:
00:28:a6:ab:a2:00:5f:66:16:d6:88:c9:c2:05:43:3e:d0:ae:
7d:31:40:52:df:27:68:bf:e6:e1:55:8f:33:42:92:5c:86:0a:
99:32:d3:6f:71:6b:48:57:6c:85:ca:e2:29:09:b3:0f:74:30:
a0:69:83:d6
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWSA2wd7RWRxIpfyuuNkxeDWSYVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxODAwNDBaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDE5NGFhYmMwZTU3ZjRjYmZhMThkMGU5YWYyZTVhMWE0NDhjMmY4YTAwMjM2
Njk0NmE2YmJlYjhhZDhiOWM4MjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVQ2vwAwoSBomD73lDsNw/Piu8RQOOUBuQTehoh46TINcDI2BHErn7F7v9t
SQxl6mymQxsz/fT8CQECIYvmDUlA5EPcwSDlLl+UiKWH7ZYrhbBvRFkG+9t5NWvz
be0PKAxdxl+z28Xirc35ylLuydAPaXefCEvnCs9dA5HU6q+1Wrd0uzD3PCErguh1
zk4LoeKNzhoOVHtuctU3SGGny4x4n9C/UwfjYVvoPxkeGwS49ASSkaCmS2CoNC6u
oSfWwSlZgvaaNkFAM0JtkfYQ/I1irbKb1QQoRdYxKVs6MLIrGEslPatO0MSmwWcQ
jPcnzNfTrAokRyCaN5QbxMPzIv8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRDX7kQ
nq/bXki+eeegT4vLX502bTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjM1YjQ2Y2EtZTllNC00MDM1LWI2ZTUtZTA5OGZmOGZlNzk0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNA
IDANBgkqhkiG9w0BAQsFAAOCAQEAIdXn5ndpdXtlZqX9KsBlUYMzDyViN/eA0D78
z8jvwP56MqRHnP4ReDEgfNlu4PobNq+fjJJeISh+7or7mehPITdbkDW78bb5y4/s
nYRY3z+SzCkjrai35Z5LQj2QK8993/RjYXP4b6XCIuh3aWPaVOx+D4ibnuA8h6ii
XdHHJdEdCQ+XV3xmYGbmvCd7sw/+494u+L5CFurur0fSoXNhaRRLLPuy/TDLSNEm
LrpcXRpREC9kFP53aOyF8jA/3FTQ7KNJMdjPACimq6IAX2YW1ojJwgVDPtCufTFA
Ut8naL/m4VWPM0KSXIYKmTLTb3FrSFdshcriKQmzD3QwoGmD1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:53:05 2025 by rpki-client