Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa
File: 486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa (raw, json)
Hash identifier: hkcQBhur+Jq19zzACYKvSvPiwpMb8ZjF30C8B0xWZlQ=
Subject key identifier: DF:42:8B:83:3B:74:60:7C:B9:00:48:1B:55:5D:F2:04:C7:63:A3:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19A3647AD04A8F1654F9E47941064D4B8BD3E539
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa
Signing time: Fri 31 Oct 2025 01:40:04 +0000
ROA not before: Fri 31 Oct 2025 01:40:04 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a3:64:7a:d0:4a:8f:16:54:f9:e4:79:41:06:4d:4b:8b:d3:e5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:40:04 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=ccdb72f98aefa30ee2f298f4bcef6cec00f4a62aac59d81f769cd84b8d583cb9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:6d:a4:22:16:63:84:20:a1:72:d0:f7:9f:
1b:36:1b:12:96:95:6a:75:bc:d4:5d:8d:44:53:fc:
de:52:5b:34:2d:6e:ca:44:fa:3e:3f:d9:2b:d5:58:
75:80:32:66:81:6a:0b:96:46:5c:87:93:30:62:56:
df:e6:26:c8:74:de:6c:d6:bb:c2:7a:42:74:f7:a8:
cc:c7:ab:74:26:77:b2:0c:8d:e7:24:4c:b5:12:c7:
af:25:14:32:ce:f7:69:b6:ae:30:f7:a0:19:50:9c:
ff:d8:c6:36:8b:6b:48:20:0b:69:33:cf:9d:d8:68:
10:cd:25:af:61:52:82:38:52:50:71:58:7b:35:06:
17:21:b3:cd:b0:de:3d:ae:09:f4:74:91:9d:b7:d8:
ec:e3:64:f0:83:e6:72:43:57:bd:9b:6f:7d:d0:16:
7f:04:c9:7e:79:3b:b9:f2:d0:ad:5e:fe:53:aa:10:
fd:58:36:1e:ce:bb:9d:26:c8:c7:e6:6a:b9:23:36:
cc:5a:63:05:8e:9c:9d:e4:26:a2:dd:38:ca:32:d1:
11:9d:c0:0e:01:1b:55:d4:b7:62:f1:d8:7a:9c:d5:
55:f9:e7:a5:92:7d:16:04:cb:f0:1a:b2:98:76:2f:
6a:90:eb:2f:29:26:57:19:c8:d0:a1:21:07:c2:d3:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:8B:83:3B:74:60:7C:B9:00:48:1B:55:5D:F2:04:C7:63:A3:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/486a9d1e-bc45-467a-9db2-1a7e5e9068f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:6080::/46
Signature Algorithm: sha256WithRSAEncryption
b0:19:c7:6a:6c:61:e7:06:04:5d:bb:5e:d3:b5:39:f4:56:f7:
8c:ef:49:0e:5a:21:ac:e3:f3:06:9b:d6:01:c8:cb:a0:76:0a:
7a:a4:fd:4c:43:6b:25:a6:20:bf:d7:04:92:15:9c:3b:59:3e:
a2:63:0e:24:88:8b:78:b1:72:af:dd:78:dd:82:f3:9f:c8:f3:
52:85:6a:db:64:61:c3:ad:0b:82:a4:59:eb:e2:33:ff:43:b0:
89:6c:1e:67:33:35:92:bb:d8:33:b2:ed:46:91:dd:13:8a:aa:
bf:d2:05:e6:d0:81:82:f1:25:db:db:e9:bb:ae:13:d5:2c:97:
a9:7f:96:c0:60:c5:73:d7:75:58:7e:e2:d1:c8:c6:3d:2e:46:
bf:00:5c:f0:78:77:56:f9:c2:6c:ab:0f:9a:61:4e:14:fd:0f:
65:27:99:64:ae:c3:5b:30:5b:da:de:54:f9:c0:b8:88:85:bb:
46:da:a7:62:00:5c:48:61:45:8d:c9:30:70:28:d0:83:44:31:
cf:19:cc:4c:ce:78:b0:09:1a:b4:1d:a1:db:3c:3b:c7:80:15:
ad:7b:ea:5e:b2:62:68:ca:3d:2b:e4:68:86:f3:44:88:5b:f6:
0a:4b:ed:47:d3:97:95:f4:72:74:94:c4:ea:f8:c5:d5:27:55:
49:5e:c5:10
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGaNketBKjxZU+eR5QQZNS4vT5TkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMzEwMTQwMDRaFw0yNTEyMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGNjZGI3MmY5OGFlZmEzMGVlMmYyOThmNGJjZWY2Y2VjMDBmNGE2MmFhYzU5
ZDgxZjc2OWNkODRiOGQ1ODNjYjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALsZbaQiFmOEIKFy0PefGzYbEpaVanW81F2NRFP83lJbNC1uykT6Pj/ZK9VY
dYAyZoFqC5ZGXIeTMGJW3+YmyHTebNa7wnpCdPeozMerdCZ3sgyN5yRMtRLHryUU
Ms73abauMPegGVCc/9jGNotrSCALaTPPndhoEM0lr2FSgjhSUHFYezUGFyGzzbDe
Pa4J9HSRnbfY7ONk8IPmckNXvZtvfdAWfwTJfnk7ufLQrV7+U6oQ/Vg2Hs67nSbI
x+ZquSM2zFpjBY6cneQmot04yjLREZ3ADgEbVdS3YvHYepzVVfnnpZJ9FgTL8Bqy
mHYvapDrLykmVxnI0KEhB8LTNR0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTfQouD
O3RgfLkASBtVXfIEx2Oj7DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDg2YTlkMWUtYmM0NS00NjdhLTlkYjItMWE3ZTVlOTA2OGYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HNg
gDANBgkqhkiG9w0BAQsFAAOCAQEAsBnHamxh5wYEXbte07U59Fb3jO9JDlohrOPz
BpvWAcjLoHYKeqT9TENrJaYgv9cEkhWcO1k+omMOJIiLeLFyr9143YLzn8jzUoVq
22Rhw60LgqRZ6+Iz/0OwiWweZzM1krvYM7LtRpHdE4qqv9IF5tCBgvEl29vpu64T
1SyXqX+WwGDFc9d1WH7i0cjGPS5GvwBc8Hh3VvnCbKsPmmFOFP0PZSeZZK7DWzBb
2t5U+cC4iIW7RtqnYgBcSGFFjckwcCjQg0QxzxnMTM54sAkatB2h2zw7x4AVrXvq
XrJiaMo9K+RohvNEiFv2CkvtR9OXlfRydJTE6vjF1SdVSV7FEA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:29:58 2025 by rpki-client