Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
File: e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json)
Hash identifier: Ti6DQyERLtD7VxBbwHKs6DShZNb7u+CIUWFSDfU/sfQ=
Subject key identifier: 77:69:C6:EB:C7:76:F5:C7:CA:EB:69:A0:78:FC:73:9F:5D:0E:39:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39577EDD24E67A1F4E5EC71E5929236E46F93A49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
Signing time: Fri 26 Sep 2025 18:41:16 +0000
ROA not before: Fri 26 Sep 2025 18:41:16 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:57:7e:dd:24:e6:7a:1f:4e:5e:c7:1e:59:29:23:6e:46:f9:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:41:16 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=e5a0960d04b12f59983f0b09fba95b97b71ee1457886bb8040191ccdcf020cec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:b1:48:c6:e7:2b:d8:74:05:e8:ec:a1:0f:
6e:f8:f8:ac:a5:02:51:65:1d:ea:f1:91:b8:6a:0c:
24:56:e8:a7:b9:b6:5d:1a:94:8c:11:b5:10:72:42:
73:a8:d6:90:1c:99:61:cc:4f:87:36:22:2b:8e:7f:
1f:5b:15:24:7d:59:0e:29:c7:df:45:e1:3d:a3:17:
44:28:01:a6:c0:db:6d:ff:52:01:18:c6:d4:f3:f4:
a0:15:f3:4e:ca:79:68:3f:00:d8:97:63:ab:03:53:
b3:b5:03:f2:ed:14:e8:3a:86:6a:a6:41:30:f8:6d:
2e:6b:e9:34:9e:40:2c:9d:df:8a:5a:09:7c:c3:f9:
b6:5d:75:df:05:9c:66:ef:36:9b:c6:81:f5:6d:16:
06:ab:41:0e:57:f1:db:31:60:e5:25:3f:f2:14:d7:
23:5c:1c:c2:0c:f8:f0:96:a8:79:54:fd:18:a3:8d:
b7:d1:ea:50:75:c0:44:11:eb:9d:15:63:9e:92:df:
c1:b2:92:57:f0:f9:8b:96:cb:c5:f4:d7:0b:da:0f:
1d:5b:bc:9d:13:00:3a:5a:d5:f4:8d:57:55:01:2e:
d5:a0:e4:b4:6d:00:81:29:d3:6e:60:83:4b:d8:f1:
b8:e6:e1:2e:ac:88:3e:54:9a:7f:13:cd:0c:29:0e:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:C6:EB:C7:76:F5:C7:CA:EB:69:A0:78:FC:73:9F:5D:0E:39:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:6c:ab:ed:1f:b4:98:00:b3:83:39:f2:30:d9:f3:fb:a3:2d:
78:71:60:76:62:00:95:4e:c7:f0:99:09:b4:1b:c4:9b:3c:bf:
38:38:3b:00:23:73:5b:90:6a:ab:cc:85:e9:4d:99:37:38:d7:
5d:e6:02:3e:a2:e6:9e:33:e2:df:1b:9c:71:d3:65:7e:07:07:
13:77:25:b3:59:e2:24:b5:e6:9d:aa:3e:17:de:dd:f4:d8:3a:
13:e5:35:d8:f1:38:60:1f:86:d4:d1:df:3e:12:96:c2:92:9c:
d9:09:42:48:4d:02:04:8b:24:8e:ab:b5:ed:7c:58:2a:a0:41:
79:48:26:8c:de:4b:4f:f2:18:01:03:b6:46:90:9a:1e:10:ae:
d8:ac:e7:33:fa:61:27:52:d6:18:7f:10:23:5a:10:72:fd:23:
97:81:84:17:49:ba:dc:67:bb:2a:e6:0e:ea:f5:78:c6:f7:d9:
0d:bd:a5:1c:ec:bc:6c:7f:ec:bc:75:0a:41:1f:9d:22:eb:06:
17:df:39:f0:8f:d4:07:12:4b:a9:31:cc:b6:45:09:a7:9a:77:
8c:61:35:15:a6:78:ff:cd:4a:57:b5:55:05:cc:a0:c5:59:e7:
be:08:87:c7:26:e1:c9:f5:6b:17:a2:ee:9c:8f:8b:d1:69:b9:
43:a2:a6:42
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOVd+3STmeh9OXsceWSkjbkb5OkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MjYxODQxMTZaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGU1YTA5NjBkMDRiMTJmNTk5ODNmMGIwOWZiYTk1Yjk3YjcxZWUxNDU3ODg2
YmI4MDQwMTkxY2NkY2YwMjBjZWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALshsUjG5yvYdAXo7KEPbvj4rKUCUWUd6vGRuGoMJFbop7m2XRqUjBG1EHJC
c6jWkByZYcxPhzYiK45/H1sVJH1ZDinH30XhPaMXRCgBpsDbbf9SARjG1PP0oBXz
Tsp5aD8A2JdjqwNTs7UD8u0U6DqGaqZBMPhtLmvpNJ5ALJ3filoJfMP5tl113wWc
Zu82m8aB9W0WBqtBDlfx2zFg5SU/8hTXI1wcwgz48JaoeVT9GKONt9HqUHXARBHr
nRVjnpLfwbKSV/D5i5bLxfTXC9oPHVu8nRMAOlrV9I1XVQEu1aDktG0AgSnTbmCD
S9jxuObhLqyIPlSafxPNDCkOL5kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR3acbr
x3b1x8rraaB4/HOfXQ454jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTg3NWVhZGQtNjQ3OC00YWMwLTg3OTItMDY3MjJhYTgwZGQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIg
wDANBgkqhkiG9w0BAQsFAAOCAQEAD2yr7R+0mACzgznyMNnz+6MteHFgdmIAlU7H
8JkJtBvEmzy/ODg7ACNzW5Bqq8yF6U2ZNzjXXeYCPqLmnjPi3xuccdNlfgcHE3cl
s1niJLXmnao+F97d9Ng6E+U12PE4YB+G1NHfPhKWwpKc2QlCSE0CBIskjqu17XxY
KqBBeUgmjN5LT/IYAQO2RpCaHhCu2KznM/phJ1LWGH8QI1oQcv0jl4GEF0m63Ge7
KuYO6vV4xvfZDb2lHOy8bH/svHUKQR+dIusGF9858I/UBxJLqTHMtkUJp5p3jGE1
FaZ4/81KV7VVBcygxVnnvgiHxybhyfVrF6LunI+L0Wm5Q6KmQg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:30 2025 by rpki-client