Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0934ec3d-adc9-4da3-a247-ea0ad001df47.roa
File: 0934ec3d-adc9-4da3-a247-ea0ad001df47.roa (raw, json)
Hash identifier: ebdTnv0i9D8yVoZKGlxUVXAiItILv/IyFeOQgUpb3Xc=
Subject key identifier: 2E:61:40:9C:DA:2A:7C:EA:27:87:38:B5:42:81:F1:9A:EC:DD:67:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E5F375C5B2034BC88688F08DA57C1AB31DF0735
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0934ec3d-adc9-4da3-a247-ea0ad001df47.roa
Signing time: Wed 29 Oct 2025 07:36:52 +0000
ROA not before: Wed 29 Oct 2025 07:36:52 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5f:37:5c:5b:20:34:bc:88:68:8f:08:da:57:c1:ab:31:df:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:36:52 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=6d6226cb211b444050b1c17f6910a65316863c10589192aac9b074dbfe551809, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:e2:d8:36:b9:67:2a:5f:63:65:61:f4:72:
4f:32:c8:b1:f4:71:24:a1:ff:11:60:d1:53:7a:02:
af:39:23:07:d7:ad:d8:a9:6e:9a:a2:80:16:84:fd:
44:8d:1b:13:b1:0e:f0:ea:8a:10:58:a6:36:f3:9a:
00:aa:8b:59:26:38:0d:97:39:fc:08:94:6c:39:4d:
c6:d9:c4:42:c1:da:3e:46:cb:d8:84:84:11:fe:e7:
0e:b5:2d:74:8f:c8:b5:38:17:35:5a:41:07:4b:94:
61:eb:a7:ed:f3:6f:83:95:09:da:db:ed:ae:61:61:
54:a4:8c:8d:96:83:7d:9b:5a:05:b6:e1:29:ab:84:
e3:2c:38:8f:53:f1:68:33:54:ef:28:c7:1a:bc:4c:
19:cf:ac:13:53:41:95:b0:cc:56:02:b8:46:cf:45:
83:5f:43:c3:e0:0f:5b:8c:cd:ab:b8:f5:ac:ea:99:
a0:10:96:97:be:90:65:f2:80:19:44:42:23:d2:58:
cd:ed:77:fe:c2:0d:12:ae:73:a0:8d:0c:94:e1:df:
9e:c6:97:8b:83:72:9f:5f:9e:35:38:27:4d:21:1d:
57:9e:89:6b:ef:b4:f1:c9:f8:2c:e8:67:4f:97:71:
f8:9f:67:18:6e:05:52:e7:7c:af:68:d3:18:84:74:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:40:9C:DA:2A:7C:EA:27:87:38:B5:42:81:F1:9A:EC:DD:67:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0934ec3d-adc9-4da3-a247-ea0ad001df47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:e000::/40
Signature Algorithm: sha256WithRSAEncryption
7c:94:e2:7e:14:81:ec:f4:e5:3e:76:bc:b0:d3:e2:9e:b7:fe:
6b:a0:b1:72:c0:ab:9f:1a:0a:f6:74:49:3d:8c:c3:9d:fb:c6:
4e:9d:22:77:6c:98:8c:d3:23:0e:1c:d7:23:e9:cb:b5:49:85:
77:74:ea:7e:89:5f:df:42:b4:93:97:08:8a:af:da:3c:78:22:
b6:ee:7b:57:41:b3:c0:aa:87:e3:19:2f:f3:30:a4:a3:97:60:
91:90:06:00:69:eb:96:fe:88:17:24:b9:fb:2f:d1:ae:82:df:
ad:38:29:99:f0:f0:cb:0f:1f:26:ba:ea:71:d9:5b:a2:74:99:
fe:9d:ed:93:33:66:91:3e:d5:ea:31:23:cf:9b:0e:1d:d5:e5:
5a:a1:97:58:86:93:58:bb:6c:5f:b3:53:a6:c7:04:ae:9a:58:
eb:39:88:f2:f7:b4:aa:ec:5e:0a:f8:f9:55:ec:0b:7e:f2:f0:
2c:f3:be:48:53:79:0e:20:cf:64:df:e2:dd:d9:88:61:da:3a:
99:53:16:4f:ca:67:dc:f5:69:c9:e4:3d:8a:b5:ff:e1:53:5c:
b4:d2:9f:3b:5f:74:80:fb:24:9b:ca:9a:70:33:c5:1e:31:20:
0c:c6:3b:b8:7a:d1:8e:c2:92:3c:db:fa:e1:42:af:a6:d1:2d:
6f:04:08:27
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfl83XFsgNLyIaI8I2lfBqzHfBzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjkwNzM2NTJaFw0yNTEyMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDZkNjIyNmNiMjExYjQ0NDA1MGIxYzE3ZjY5MTBhNjUzMTY4NjNjMTA1ODkx
OTJhYWM5YjA3NGRiZmU1NTE4MDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7U4tg2uWcqX2NlYfRyTzLIsfRxJKH/EWDRU3oCrzkjB9et2KlumqKAFoT9
RI0bE7EO8OqKEFimNvOaAKqLWSY4DZc5/AiUbDlNxtnEQsHaPkbL2ISEEf7nDrUt
dI/ItTgXNVpBB0uUYeun7fNvg5UJ2tvtrmFhVKSMjZaDfZtaBbbhKauE4yw4j1Px
aDNU7yjHGrxMGc+sE1NBlbDMVgK4Rs9Fg19Dw+APW4zNq7j1rOqZoBCWl76QZfKA
GURCI9JYze13/sINEq5zoI0MlOHfnsaXi4Nyn1+eNTgnTSEdV56Ja++08cn4LOhn
T5dx+J9nGG4FUud8r2jTGIR065UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQuYUCc
2ip86ieHOLVCgfGa7N1nkjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDkzNGVjM2QtYWRjOS00ZGEzLWEyNDctZWEwYWQwMDFkZjQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Grg
MA0GCSqGSIb3DQEBCwUAA4IBAQB8lOJ+FIHs9OU+dryw0+Ket/5roLFywKufGgr2
dEk9jMOd+8ZOnSJ3bJiM0yMOHNcj6cu1SYV3dOp+iV/fQrSTlwiKr9o8eCK27ntX
QbPAqofjGS/zMKSjl2CRkAYAaeuW/ogXJLn7L9Gugt+tOCmZ8PDLDx8muupx2Vui
dJn+ne2TM2aRPtXqMSPPmw4d1eVaoZdYhpNYu2xfs1OmxwSumljrOYjy97Sq7F4K
+PlV7At+8vAs875IU3kOIM9k3+Ld2Yhh2jqZUxZPymfc9WnJ5D2Ktf/hU1y00p87
X3SA+ySbyppwM8UeMSAMxju4etGOwpI82/rhQq+m0S1vBAgn
-----END CERTIFICATE-----
Generated at Thu Nov 6 05:55:00 2025 by rpki-client