Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1d6a3a7-2672-4826-9cf7-46f77c9db9d9.roa
File: d1d6a3a7-2672-4826-9cf7-46f77c9db9d9.roa (raw, json)
Hash identifier: UV8nHkKH3yW2pALdRm9YEXNYkrwUf1/7Z9tmhosrMIg=
Subject key identifier: 2B:0C:04:A7:FE:88:57:4F:4F:4A:1E:E2:A7:FC:64:9E:B5:8E:81:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CFABD7689D10A3C4D0EE9ED718D9B55091488ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1d6a3a7-2672-4826-9cf7-46f77c9db9d9.roa
Signing time: Mon 06 Oct 2025 17:50:09 +0000
ROA not before: Mon 06 Oct 2025 17:50:09 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fa:bd:76:89:d1:0a:3c:4d:0e:e9:ed:71:8d:9b:55:09:14:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:09 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=91d25fc41a3698d41782845ee18df019aa206a8b378d37e42586287a6c5f0ee3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:d4:48:38:0f:87:6a:df:f0:17:60:d6:d9:
f2:bd:08:2e:09:f7:27:0b:9e:55:ba:e9:2e:2d:d3:
64:ce:7e:ad:83:68:cf:a8:95:62:6a:e0:13:e5:d9:
2d:8f:e3:42:cc:f2:8d:41:fa:b4:47:fe:6c:50:20:
7b:84:a7:ce:d1:a6:81:3e:fd:77:60:a6:6a:92:e1:
e7:10:5a:bb:1b:82:71:a3:af:ad:9c:44:8d:fe:e5:
7d:24:dd:cd:c3:eb:4e:8d:59:81:e4:2a:10:f2:f9:
8d:ce:40:dc:a5:00:ae:e0:f6:97:35:3d:8f:b7:ab:
b6:46:7f:44:c0:cf:b3:5f:98:32:bc:e1:15:10:78:
22:d9:3b:b5:01:d8:13:5d:4f:88:4e:9b:b7:7d:04:
ea:46:a9:1e:6e:33:49:12:90:6a:e6:16:d6:03:56:
a6:11:1d:f9:09:5b:b3:8b:08:05:5e:e8:fe:a7:28:
e7:c6:ef:f5:2c:04:9d:30:e2:69:32:39:63:ee:c9:
52:04:36:93:48:e2:ef:86:9e:b9:e6:6f:5b:2c:92:
8d:97:b4:f1:ca:c5:0d:85:68:bd:f6:41:b2:05:6b:
51:77:f6:e2:84:0c:a3:19:5b:bd:5e:b4:c7:58:c1:
42:24:94:ee:4c:1c:24:cd:e9:cd:5f:ab:bb:0d:bd:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:04:A7:FE:88:57:4F:4F:4A:1E:E2:A7:FC:64:9E:B5:8E:81:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1d6a3a7-2672-4826-9cf7-46f77c9db9d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:1080::/48
Signature Algorithm: sha256WithRSAEncryption
37:e9:8c:b0:a2:61:5d:dd:91:9d:c0:3c:d6:0c:43:ee:e2:4e:
85:bb:50:42:2e:80:1d:65:09:17:84:21:19:e7:de:5a:65:a5:
8b:28:d6:f5:e1:78:0d:fb:6d:3e:91:32:de:35:88:7c:50:e0:
9d:c5:a7:03:b7:f4:9e:66:31:f7:01:2a:37:a6:09:b5:5c:86:
4e:f1:e4:50:f4:90:ca:bb:37:b4:b7:d1:10:b2:e3:f3:46:1e:
cc:70:32:5f:ba:7f:22:f9:83:e7:32:bc:15:cc:a1:1f:a7:43:
e1:fb:84:a9:9a:05:46:37:bb:78:7f:47:0f:f2:f9:bb:a3:42:
89:a4:35:73:1b:a2:e4:fe:46:90:37:2a:a2:fc:16:0b:f2:e6:
f6:d3:f7:24:9d:14:11:ab:f4:28:25:8a:da:ca:89:92:ed:69:
e5:76:1d:f0:36:da:2a:36:fb:73:da:f0:0f:65:40:fd:98:ca:
f2:a3:c2:fa:56:15:23:ea:7f:a5:b7:4d:3e:dd:07:97:a1:dd:
84:85:57:75:ff:3c:15:2f:d3:91:2d:ff:e9:d6:4f:c4:02:a8:
5b:8b:df:bc:53:33:96:88:22:ec:0b:9a:10:13:f6:4f:f3:98:
e4:77:d3:e2:4e:91:6e:28:0f:60:31:30:cb:1b:d8:31:17:37:
2a:ce:24:62
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfPq9donRCjxNDuntcY2bVQkUiO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxNzUwMDlaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxZDI1ZmM0MWEzNjk4ZDQxNzgyODQ1ZWUxOGRmMDE5YWEyMDZhOGIzNzhk
MzdlNDI1ODYyODdhNmM1ZjBlZTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALcf1Eg4D4dq3/AXYNbZ8r0ILgn3JwueVbrpLi3TZM5+rYNoz6iVYmrgE+XZ
LY/jQszyjUH6tEf+bFAge4SnztGmgT79d2CmapLh5xBauxuCcaOvrZxEjf7lfSTd
zcPrTo1ZgeQqEPL5jc5A3KUAruD2lzU9j7ertkZ/RMDPs1+YMrzhFRB4Itk7tQHY
E11PiE6bt30E6kapHm4zSRKQauYW1gNWphEd+Qlbs4sIBV7o/qco58bv9SwEnTDi
aTI5Y+7JUgQ2k0ji74aeueZvWyySjZe08crFDYVovfZBsgVrUXf24oQMoxlbvV60
x1jBQiSU7kwcJM3pzV+ruw2927sCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQrDASn
/ohXT09KHuKn/GSetY6BbzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDFkNmEzYTctMjY3Mi00ODI2LTljZjctNDZmNzdjOWRiOWQ5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H0Q
gDANBgkqhkiG9w0BAQsFAAOCAQEAN+mMsKJhXd2RncA81gxD7uJOhbtQQi6AHWUJ
F4QhGefeWmWliyjW9eF4DfttPpEy3jWIfFDgncWnA7f0nmYx9wEqN6YJtVyGTvHk
UPSQyrs3tLfRELLj80YezHAyX7p/IvmD5zK8FcyhH6dD4fuEqZoFRje7eH9HD/L5
u6NCiaQ1cxui5P5GkDcqovwWC/Lm9tP3JJ0UEav0KCWK2sqJku1p5XYd8DbaKjb7
c9rwD2VA/ZjK8qPC+lYVI+p/pbdNPt0Hl6HdhIVXdf88FS/TkS3/6dZPxAKoW4vf
vFMzlogi7AuaEBP2T/OY5HfT4k6RbigPYDEwyxvYMRc3Ks4kYg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:32 2025 by rpki-client