Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6a7c0a-3e4a-4737-b92b-fac22de8757f.roa
File: 4b6a7c0a-3e4a-4737-b92b-fac22de8757f.roa (raw, json)
Hash identifier: mZ+Sa3irzcjXq68h0VHi74/M52gKOmDMK7pGdxLeBf8=
Subject key identifier: 2C:FF:78:F5:C8:3D:76:CB:F5:9F:EA:1C:0E:09:A5:08:00:EA:0B:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DA7C3EF0B30ADBAA72854CC95F0BC15A9414265
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6a7c0a-3e4a-4737-b92b-fac22de8757f.roa
Signing time: Fri 01 Aug 2025 17:10:22 +0000
ROA not before: Fri 01 Aug 2025 17:10:22 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a7:c3:ef:0b:30:ad:ba:a7:28:54:cc:95:f0:bc:15:a9:41:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:10:22 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=7f8be34381274f70b6b7c02341c0fdf116c916d844c025528c881ae5541431cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:2f:52:22:21:83:15:22:bb:51:bb:49:0f:
6d:05:21:43:ef:d5:06:a9:9f:05:79:cb:50:cc:13:
a3:d1:9a:6a:99:22:fa:48:0b:19:72:f2:d2:6f:b9:
70:8d:58:da:84:29:86:41:06:da:c8:c7:c6:d0:28:
64:5a:af:b0:93:83:7c:94:b0:c3:74:22:7c:ad:a3:
08:86:11:24:f3:5a:08:ea:d8:b5:f1:d2:ba:be:25:
a5:f2:8f:cf:5f:1f:e5:8e:f4:b7:3e:3a:9f:7b:c2:
f2:17:79:42:5b:02:93:e3:94:62:4f:1e:4e:28:07:
78:1a:d1:1f:8f:06:e4:8f:f5:65:98:72:09:cd:fb:
00:93:f7:f4:62:31:22:cc:4e:a8:e4:c4:01:ca:29:
ba:dc:5d:8a:32:58:4b:75:cc:42:93:9c:e5:7b:b8:
85:51:b2:a9:05:91:e0:77:0f:d9:68:f1:2b:2a:39:
2e:8a:40:f8:cb:8e:ad:87:2c:d4:fc:6a:26:72:0a:
ab:c5:57:cd:47:d6:63:e9:6b:20:67:10:ee:37:cc:
2a:7d:c1:15:dd:e4:a5:fc:9c:f8:1a:c3:c0:05:2e:
5b:7b:77:53:54:2a:6f:71:af:d1:b7:4d:d1:52:67:
82:0a:db:5d:38:eb:34:4b:18:3c:43:86:94:14:1e:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:78:F5:C8:3D:76:CB:F5:9F:EA:1C:0E:09:A5:08:00:EA:0B:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6a7c0a-3e4a-4737-b92b-fac22de8757f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
67:ef:a9:06:ac:6a:b9:fb:62:2e:3f:28:c7:07:64:18:25:fe:
29:2e:b4:8d:d5:73:8a:5a:2e:28:60:1c:2c:90:41:a5:6d:20:
74:0e:6b:f4:25:4e:57:fc:9e:90:f4:5a:7d:36:ab:29:f1:17:
6d:a6:26:73:b7:f2:07:07:27:e9:95:6f:38:1b:88:ed:7c:d1:
63:f1:bf:49:8d:03:13:93:1c:12:66:62:25:66:7e:59:8b:b3:
bf:a0:f2:57:70:f2:b0:91:4a:4e:a4:43:1a:28:33:b5:8c:44:
77:09:c5:d1:31:5a:03:02:f2:1d:90:d8:a9:5c:d4:27:f5:d1:
44:2e:27:ed:f2:47:9f:0e:90:b3:99:8e:5b:b3:fd:61:c8:f4:
0c:d1:91:67:2a:45:83:e9:7f:8e:9c:23:c6:d4:54:fc:18:83:
44:8f:b7:fd:bd:e9:a5:27:54:1b:46:24:57:65:85:f4:13:58:
dd:38:54:32:59:73:1b:a5:11:89:8b:07:46:49:8a:e2:15:2b:
29:6e:74:c7:96:d3:05:96:e2:d3:8a:00:9a:b2:3a:e3:2a:de:
5b:ad:f8:e0:69:dd:81:b5:a9:e8:20:17:7b:74:b1:94:04:0d:
cc:41:86:be:d6:13:bb:88:2d:3b:38:e9:31:61:b5:1d:32:4a:
88:2c:c3:d8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTafD7wswrbqnKFTMlfC8FalBQmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDExNzEwMjJaFw0yNTA5MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDdmOGJlMzQzODEyNzRmNzBiNmI3YzAyMzQxYzBmZGYxMTZjOTE2ZDg0NGMw
MjU1MjhjODgxYWU1NTQxNDMxY2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkFL1IiIYMVIrtRu0kPbQUhQ+/VBqmfBXnLUMwTo9Gaapki+kgLGXLy0m+5
cI1Y2oQphkEG2sjHxtAoZFqvsJODfJSww3QifK2jCIYRJPNaCOrYtfHSur4lpfKP
z18f5Y70tz46n3vC8hd5QlsCk+OUYk8eTigHeBrRH48G5I/1ZZhyCc37AJP39GIx
IsxOqOTEAcoputxdijJYS3XMQpOc5Xu4hVGyqQWR4HcP2WjxKyo5LopA+MuOrYcs
1PxqJnIKq8VXzUfWY+lrIGcQ7jfMKn3BFd3kpfyc+BrDwAUuW3t3U1Qqb3Gv0bdN
0VJnggrbXTjrNEsYPEOGlBQexScCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQs/3j1
yD12y/Wf6hwOCaUIAOoLTTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGI2YTdjMGEtM2U0YS00NzM3LWI5MmItZmFjMjJkZTg3NTdmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DgI
wDANBgkqhkiG9w0BAQsFAAOCAQEAZ++pBqxquftiLj8oxwdkGCX+KS60jdVzilou
KGAcLJBBpW0gdA5r9CVOV/yekPRafTarKfEXbaYmc7fyBwcn6ZVvOBuI7XzRY/G/
SY0DE5McEmZiJWZ+WYuzv6DyV3DysJFKTqRDGigztYxEdwnF0TFaAwLyHZDYqVzU
J/XRRC4n7fJHnw6Qs5mOW7P9Ycj0DNGRZypFg+l/jpwjxtRU/BiDRI+3/b3ppSdU
G0YkV2WF9BNY3ThUMllzG6URiYsHRkmK4hUrKW50x5bTBZbi04oAmrI64yreW634
4GndgbWp6CAXe3SxlAQNzEGGvtYTu4gtOzjpMWG1HTJKiCzD2A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:24 2025 by rpki-client