Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
File: d5fc0fee-af50-4f94-a822-c9f3238359cf.roa (raw, json)
Hash identifier: EXoawXzUQzYNQg50Mhgq+Pp9qzQ5OZSV+TTyPyAtt8o=
Subject key identifier: 18:86:69:DA:D9:B7:7A:13:9C:47:D2:07:98:6E:BB:DD:38:7C:24:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AF968ACF0AD484C3353946BB69C3AE931DFB99C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
Signing time: Mon 06 Oct 2025 18:10:04 +0000
ROA not before: Mon 06 Oct 2025 18:10:04 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f9:68:ac:f0:ad:48:4c:33:53:94:6b:b6:9c:3a:e9:31:df:b9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:10:04 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=20bac9977be70c0f9284adb7d4171e0aba4f0470bbb4f50236b07cae28d7428c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:b5:6d:ae:a3:18:04:60:e4:38:d9:41:ce:
48:2b:63:91:58:cc:22:10:d8:57:dc:d7:02:b5:21:
d3:b0:dc:17:88:a3:76:7b:40:e9:ce:f1:72:2b:b7:
d2:12:02:c2:37:09:18:19:7a:54:ba:ae:76:6a:20:
3c:34:d2:8f:42:37:d0:a1:d8:86:28:cb:9a:00:9f:
9a:0a:29:36:6d:5f:b9:da:71:11:7b:12:30:6d:65:
c9:c9:04:c2:18:83:5c:ec:7a:93:ee:74:67:d6:14:
ff:5b:73:e0:23:d3:5d:a5:36:9d:48:7b:b3:0e:eb:
16:91:f1:4e:03:1a:0d:85:dc:f0:c7:28:6a:aa:d7:
bb:e4:b6:bf:99:2e:00:03:95:34:40:05:c4:df:fd:
93:a7:b3:03:3f:49:1a:43:00:00:9d:11:bb:84:76:
ac:96:4c:66:e9:ed:d2:dd:f5:90:a6:65:aa:f7:60:
b8:a5:f7:39:b0:a0:c7:0e:da:84:ba:1c:bf:c0:a5:
05:ee:fd:43:c5:7d:e6:e2:e6:cd:56:9d:4d:95:a3:
21:15:2e:11:ac:3a:5f:fd:19:5c:26:28:bd:87:eb:
d8:48:61:d0:95:2b:a2:2d:c9:e7:ce:e8:4e:ca:37:
d1:8e:46:ee:4c:83:2b:f0:ea:dd:27:50:64:20:43:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:69:DA:D9:B7:7A:13:9C:47:D2:07:98:6E:BB:DD:38:7C:24:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2000::/40
Signature Algorithm: sha256WithRSAEncryption
41:2d:54:8f:80:51:54:f6:e3:78:b1:37:28:13:b0:c9:35:b2:
e0:64:e8:61:2b:f1:b1:90:0f:a3:25:45:2e:0a:bb:c8:28:04:
46:3d:ae:e5:1f:ee:40:69:fe:e9:d9:cc:ee:9b:ea:8e:1a:a7:
33:7a:e1:47:f0:b8:b8:4e:13:c8:0c:d0:23:76:6a:97:8b:26:
68:28:af:89:39:45:6d:49:b7:b9:e0:cb:37:65:c3:0a:aa:22:
3d:3c:7b:ff:50:60:62:93:59:7b:ce:6e:2f:91:86:08:0a:63:
7e:8b:ed:0a:49:a0:4a:f3:fd:f4:d2:0b:32:b8:48:63:6d:85:
48:b1:b3:fb:47:98:25:35:b4:f2:14:fd:4f:fc:99:47:d7:f8:
8d:5f:b5:65:79:7e:81:6e:63:df:31:54:03:6e:bf:14:7c:2e:
5e:8f:38:d0:02:a3:61:56:cc:ef:92:f7:94:37:1c:83:38:0a:
77:a0:45:56:18:aa:7d:ef:87:1f:9d:db:0e:83:7a:9b:bc:b9:
87:91:d9:82:de:ed:95:2e:67:9c:0f:34:f9:01:1b:43:4f:7a:
86:40:21:a9:9a:a3:3b:7f:d4:80:97:b5:a1:87:c3:a0:80:b9:
02:99:1a:db:8e:f3:d4:5d:e8:e8:44:b9:c5:12:10:1b:c8:8b:
aa:0c:31:c9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOvlorPCtSEwzU5Rrtpw66THfuZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMDYxODEwMDRaFw0yNTExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDIwYmFjOTk3N2JlNzBjMGY5Mjg0YWRiN2Q0MTcxZTBhYmE0ZjA0NzBiYmI0
ZjUwMjM2YjA3Y2FlMjhkNzQyOGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANRZtW2uoxgEYOQ42UHOSCtjkVjMIhDYV9zXArUh07DcF4ijdntA6c7xciu3
0hICwjcJGBl6VLqudmogPDTSj0I30KHYhijLmgCfmgopNm1fudpxEXsSMG1lyckE
whiDXOx6k+50Z9YU/1tz4CPTXaU2nUh7sw7rFpHxTgMaDYXc8McoaqrXu+S2v5ku
AAOVNEAFxN/9k6ezAz9JGkMAAJ0Ru4R2rJZMZunt0t31kKZlqvdguKX3ObCgxw7a
hLocv8ClBe79Q8V95uLmzVadTZWjIRUuEaw6X/0ZXCYovYfr2Ehh0JUroi3J587o
Tso30Y5G7kyDK/Dq3SdQZCBDhpECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQYhmna
2bd6E5xH0geYbrvdOHwkUTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDVmYzBmZWUtYWY1MC00Zjk0LWE4MjItYzlmMzIzODM1OWNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HMg
MA0GCSqGSIb3DQEBCwUAA4IBAQBBLVSPgFFU9uN4sTcoE7DJNbLgZOhhK/GxkA+j
JUUuCrvIKARGPa7lH+5Aaf7p2czum+qOGqczeuFH8Li4ThPIDNAjdmqXiyZoKK+J
OUVtSbe54Ms3ZcMKqiI9PHv/UGBik1l7zm4vkYYICmN+i+0KSaBK8/300gsyuEhj
bYVIsbP7R5glNbTyFP1P/JlH1/iNX7VleX6BbmPfMVQDbr8UfC5ejzjQAqNhVszv
kveUNxyDOAp3oEVWGKp974cfndsOg3qbvLmHkdmC3u2VLmecDzT5ARtDT3qGQCGp
mqM7f9SAl7Whh8OggLkCmRrbjvPUXejoRLnFEhAbyIuqDDHJ
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:16 2025 by rpki-client