Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: xGmzs+BqK9Yt7Ibf6STNX8uZ2jN86/fUkqY9NAxdv2g=
Subject key identifier: 30:40:FA:B6:4C:0E:22:99:A2:74:D3:32:FD:2D:AB:DE:27:CD:22:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E4339C732DDA035F74EA9EC8BE9305B451DEA83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Tue 05 Aug 2025 19:00:06 +0000
ROA not before: Tue 05 Aug 2025 19:00:06 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:43:39:c7:32:dd:a0:35:f7:4e:a9:ec:8b:e9:30:5b:45:1d:ea:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:00:06 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=2c5cf3ccbabe5a835339a0f3408b0c447cd30c04fef555347434249789404cb4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:fc:cc:a1:0e:39:23:a8:c1:b7:37:02:7e:
e5:84:2a:02:85:8c:f7:f8:7e:e4:8d:8c:94:a0:9e:
a3:46:3e:80:8a:3c:c3:e0:8d:a2:f1:b3:40:b4:cd:
1c:cc:44:05:82:1b:5f:f8:b0:01:0d:a3:4e:1b:71:
e1:1c:fe:b0:cb:29:54:74:a5:c5:e8:bb:85:75:35:
9f:d0:6a:27:2d:b0:4a:e0:37:46:00:47:c8:59:4c:
b3:b5:a8:ff:56:3a:a6:72:de:0d:0e:18:d3:64:4c:
53:31:9f:56:89:5c:e8:27:b5:e3:9c:89:f7:c3:27:
e7:cb:40:89:6f:ba:cc:d2:2b:b6:1b:74:bf:fd:5d:
5a:44:b6:eb:f3:56:30:d4:53:96:d6:36:9d:53:c4:
35:60:62:14:5e:63:6f:bd:35:a4:aa:a5:42:17:71:
7e:e1:70:f7:3e:28:07:d1:1f:90:37:4c:91:1b:0b:
2c:98:f4:be:f2:07:b0:0d:2a:e7:f9:f7:7d:61:a3:
98:89:86:5c:7c:02:82:5e:3d:6d:15:8a:a3:cd:4f:
ca:a8:14:d7:f0:38:46:75:7c:77:c0:3a:65:14:f4:
da:28:eb:5f:0d:b2:3b:88:f0:dd:a9:9f:df:4d:86:
b3:c7:c7:d6:53:5d:96:ef:9c:30:c1:16:56:fe:ef:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:FA:B6:4C:0E:22:99:A2:74:D3:32:FD:2D:AB:DE:27:CD:22:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
88:44:09:0e:8e:35:1a:90:10:6f:de:07:36:9c:e8:46:e2:b2:
6d:a5:5a:78:69:ba:12:f1:72:1d:2a:9d:3f:5a:58:23:1d:cd:
1a:14:ff:c0:44:86:ae:fe:a3:c2:3a:19:6a:a0:78:4b:c2:90:
ec:80:a3:c1:b8:87:81:9d:7f:8f:9d:b4:7c:6f:1e:89:72:f1:
69:17:95:8d:72:34:24:90:53:5e:80:1e:3c:4e:d6:e3:a9:2e:
d3:fb:37:70:20:c3:b1:c9:a2:07:b4:a2:99:f6:dc:17:f7:32:
b8:55:87:9e:94:6c:b6:26:4c:e9:9c:38:bf:1c:43:f6:7c:c6:
cc:80:9b:aa:6d:43:a3:e0:67:ad:87:1f:db:17:b4:25:a3:d0:
8a:f0:87:e0:ff:0e:0e:00:1c:52:ca:43:61:a6:20:bf:79:15:
6e:7d:21:7c:c2:b7:db:1e:62:e5:21:d3:a9:4b:68:3f:c3:16:
a5:5b:8c:1d:c8:e1:4b:21:d4:bb:c9:a7:ba:74:32:00:b7:a9:
72:25:ce:06:76:a2:2c:37:10:1b:8a:ae:fb:bd:6b:2a:8e:6c:
de:a0:84:14:38:c9:e4:49:23:92:37:30:53:a7:af:c9:e4:e8:
6e:bf:82:fe:f5:ba:b5:aa:43:f4:fc:54:52:5f:75:f9:ca:07:
6f:e5:53:23
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUHkM5xzLdoDX3Tqnsi+kwW0Ud6oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDUxOTAwMDZaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDJjNWNmM2NjYmFiZTVhODM1MzM5YTBmMzQwOGIwYzQ0N2NkMzBjMDRmZWY1
NTUzNDc0MzQyNDk3ODk0MDRjYjQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIp4/MyhDjkjqMG3NwJ+5YQqAoWM9/h+5I2MlKCeo0Y+gIo8w+CNovGzQLTN
HMxEBYIbX/iwAQ2jThtx4Rz+sMspVHSlxei7hXU1n9BqJy2wSuA3RgBHyFlMs7Wo
/1Y6pnLeDQ4Y02RMUzGfVolc6Ce145yJ98Mn58tAiW+6zNIrtht0v/1dWkS26/NW
MNRTltY2nVPENWBiFF5jb701pKqlQhdxfuFw9z4oB9EfkDdMkRsLLJj0vvIHsA0q
5/n3fWGjmImGXHwCgl49bRWKo81PyqgU1/A4RnV8d8A6ZRT02ijrXw2yO4jw3amf
302Gs8fH1lNdlu+cMMEWVv7v1IcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQwQPq2
TA4imaJ00zL9LaveJ80i/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Y2YWMzZWYtODJmNS00YWJjLWEzNmUtNDA1Yjg2M2Y4ODRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
oDANBgkqhkiG9w0BAQsFAAOCAQEAiEQJDo41GpAQb94HNpzoRuKybaVaeGm6EvFy
HSqdP1pYIx3NGhT/wESGrv6jwjoZaqB4S8KQ7ICjwbiHgZ1/j520fG8eiXLxaReV
jXI0JJBTXoAePE7W46ku0/s3cCDDscmiB7SimfbcF/cyuFWHnpRstiZM6Zw4vxxD
9nzGzICbqm1Do+BnrYcf2xe0JaPQivCH4P8ODgAcUspDYaYgv3kVbn0hfMK32x5i
5SHTqUtoP8MWpVuMHcjhSyHUu8mnunQyALepciXOBnaiLDcQG4qu+71rKo5s3qCE
FDjJ5EkjkjcwU6evyeTobr+C/vW6tapD9PxUUl91+coHb+VTIw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:48:18 2025 by rpki-client