Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
File: e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json)
Hash identifier: zgLYBugga2asyUAa55GnCO8MIgQVfyfqFABcAzYucgE=
Subject key identifier: E1:37:A5:CA:0B:DC:3D:83:63:E0:FA:0E:B7:DE:1B:EA:34:9A:DF:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07B96052240978FF3732FCD615AC690813A30B0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
Signing time: Tue 05 Aug 2025 18:50:53 +0000
ROA not before: Tue 05 Aug 2025 18:50:53 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b9:60:52:24:09:78:ff:37:32:fc:d6:15:ac:69:08:13:a3:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:50:53 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=6d0bc7a1a45c898eff31ba9d02ccd3b2b67fb381343a0c6b67513efb149f968a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:20:8b:b2:3e:33:57:23:cb:c9:cb:14:18:
2e:74:23:02:ad:db:a8:a5:f7:c3:60:e3:80:9f:e0:
77:2d:8b:0a:85:1b:bc:fa:8f:05:7c:3a:a6:67:db:
ef:e2:cf:c1:78:29:06:6e:34:f5:db:c1:16:cf:d1:
ca:5d:0c:a1:59:7f:e3:3e:88:32:98:75:5f:74:b1:
b1:9c:5e:44:c7:5e:d2:5d:aa:fa:20:44:36:2a:18:
2f:dc:30:17:42:6d:07:6f:74:12:8c:a3:12:76:8c:
3d:99:df:66:03:09:c6:1a:e6:55:73:d9:ac:33:8b:
69:12:ac:1a:ba:39:fa:86:9f:55:6a:56:ad:cc:68:
0f:3e:a8:f5:85:11:29:07:8b:f7:d0:a6:08:23:6f:
9f:2c:a2:76:f1:68:ae:14:74:25:3f:8b:d1:b1:8c:
b9:2d:c5:da:a1:30:33:21:18:13:72:9a:3c:56:32:
ab:9b:04:be:ef:2b:6b:8a:5b:58:ac:be:35:d1:e9:
fc:b3:da:b1:38:86:15:bc:3e:12:6c:32:5f:f8:5c:
1a:3f:a4:07:4b:33:83:be:b5:48:94:84:f7:4a:90:
e7:28:dc:2c:5e:44:a6:40:3e:70:b3:74:2b:01:52:
88:89:7e:c9:90:13:65:21:73:23:96:39:1d:41:cd:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:37:A5:CA:0B:DC:3D:83:63:E0:FA:0E:B7:DE:1B:EA:34:9A:DF:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:0e:3c:fe:61:ec:12:1a:b0:d2:d8:4d:b7:e3:98:8f:d2:30:
0c:1c:39:f1:d0:24:28:d7:21:c2:74:2f:dc:d8:de:89:73:e9:
0a:61:5f:cd:96:81:ad:e2:f9:fb:ea:4c:78:82:14:d8:f6:29:
01:d5:f5:3b:ee:4e:3c:94:75:21:8b:d9:51:0d:31:62:6b:23:
3d:ee:28:4d:1e:f0:24:0c:34:91:ca:7e:87:c1:01:04:44:67:
8f:ae:8c:62:e0:6d:67:45:5d:45:47:f8:ba:45:10:86:11:d2:
f7:50:aa:67:59:6e:f2:42:5e:c4:e6:63:64:bd:45:29:49:fc:
44:01:2a:e9:d5:00:de:cc:ca:14:54:d6:d3:b5:2c:78:75:8d:
14:eb:52:7b:a7:a5:71:9f:6e:9b:62:b0:4a:f9:00:cc:25:39:
af:34:1e:9b:dd:d2:c3:09:e5:c8:0c:4f:43:19:03:fc:d0:04:
17:3a:6f:70:b4:e2:3c:51:57:7a:18:64:dd:af:92:c1:b1:a4:
9b:86:c9:55:6c:7b:d5:a0:52:6b:53:80:d9:ea:03:10:6f:fa:
ad:1f:9e:30:4c:71:13:8b:6f:ec:88:43:e8:f2:fa:05:24:e4:
a0:e6:4a:d1:b4:14:35:1b:88:3f:0e:f5:cc:32:2e:5e:0a:b9:
9d:a7:dd:bf
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUB7lgUiQJeP83MvzWFaxpCBOjCwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDUxODUwNTNaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDZkMGJjN2ExYTQ1Yzg5OGVmZjMxYmE5ZDAyY2NkM2IyYjY3ZmIzODEzNDNh
MGM2YjY3NTEzZWZiMTQ5Zjk2OGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANy6IIuyPjNXI8vJyxQYLnQjAq3bqKX3w2DjgJ/gdy2LCoUbvPqPBXw6pmfb
7+LPwXgpBm409dvBFs/Ryl0MoVl/4z6IMph1X3SxsZxeRMde0l2q+iBENioYL9ww
F0JtB290EoyjEnaMPZnfZgMJxhrmVXPZrDOLaRKsGro5+oafVWpWrcxoDz6o9YUR
KQeL99CmCCNvnyyidvForhR0JT+L0bGMuS3F2qEwMyEYE3KaPFYyq5sEvu8ra4pb
WKy+NdHp/LPasTiGFbw+EmwyX/hcGj+kB0szg761SJSE90qQ5yjcLF5EpkA+cLN0
KwFSiIl+yZATZSFzI5Y5HUHNZncCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBThN6XK
C9w9g2Pg+g633hvqNJrf/DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTg3NWVhZGQtNjQ3OC00YWMwLTg3OTItMDY3MjJhYTgwZGQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HIg
wDANBgkqhkiG9w0BAQsFAAOCAQEAKg48/mHsEhqw0thNt+OYj9IwDBw58dAkKNch
wnQv3NjeiXPpCmFfzZaBreL5++pMeIIU2PYpAdX1O+5OPJR1IYvZUQ0xYmsjPe4o
TR7wJAw0kcp+h8EBBERnj66MYuBtZ0VdRUf4ukUQhhHS91CqZ1lu8kJexOZjZL1F
KUn8RAEq6dUA3szKFFTW07UseHWNFOtSe6elcZ9um2KwSvkAzCU5rzQem93Swwnl
yAxPQxkD/NAEFzpvcLTiPFFXehhk3a+SwbGkm4bJVWx71aBSa1OA2eoDEG/6rR+e
MExxE4tv7IhD6PL6BSTkoOZK0bQUNRuIPw71zDIuXgq5nafdvw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:04:00 2025 by rpki-client