Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
File: 6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa (raw, json)
Hash identifier: PRCKz0RQ5OlQRCGa3Kl1iz0xhdFBDfFMLE1YqrmQgmM=
Subject key identifier: E2:4C:2C:BA:8C:9E:5C:F7:4E:FA:76:E2:CD:70:B8:B1:85:AC:F0:26
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D22B9B8706DDEC315F627C0005B38D2B2DB53D3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
Signing time: Wed 29 Oct 2025 07:28:21 +0000
ROA not before: Wed 29 Oct 2025 07:28:21 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:22:b9:b8:70:6d:de:c3:15:f6:27:c0:00:5b:38:d2:b2:db:53:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:21 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=21e121153fc67e663b1e6cfe7bb3a9e5a7afba0ccb4fee69b45469a2b683ca05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:b6:af:33:a4:5c:05:c5:13:10:1f:cc:17:
98:ae:6e:09:9b:dc:7a:67:df:33:6b:60:8c:43:1d:
07:50:76:84:6a:c5:60:cf:49:5d:97:f0:1f:2b:23:
89:b2:ba:fd:ea:d3:26:e9:f7:91:8a:07:0d:e8:46:
62:98:0b:78:e8:59:6e:77:60:ae:15:69:f2:1d:13:
33:c0:2f:88:39:87:85:a0:20:a9:a7:57:da:e4:fc:
ff:1a:58:3f:e1:12:9d:10:41:59:30:6b:80:12:54:
07:08:62:a5:ae:72:fe:5b:28:5c:82:ac:4d:6c:5d:
63:e2:67:86:26:ab:0a:0c:a9:b2:cf:a4:7e:0f:35:
28:4e:84:f7:89:cc:c3:fc:40:b3:f8:95:0b:a8:9a:
55:28:2d:80:eb:db:7c:f4:b1:4b:4c:f3:63:89:e7:
32:6a:50:61:cb:75:12:e8:5f:ba:6a:76:6e:5e:dd:
fa:72:55:59:ca:d4:6f:66:4f:98:d4:d1:9f:ee:53:
6f:86:27:86:b4:f5:1d:98:d7:dd:d4:41:da:cf:d6:
69:79:1c:9a:5c:32:28:3a:d1:12:24:08:71:de:98:
e7:c8:2a:a9:ea:08:a8:9f:8b:f0:8d:d4:c2:76:83:
ab:68:3f:9c:ce:47:40:a4:c0:a4:6b:71:18:4f:9d:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:2C:BA:8C:9E:5C:F7:4E:FA:76:E2:CD:70:B8:B1:85:AC:F0:26
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b364a7a-ce23-4814-8bfa-1c23242a73e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:8020::/48
Signature Algorithm: sha256WithRSAEncryption
1b:d3:a5:0d:20:af:59:84:78:66:e5:64:f2:a4:dc:2b:f1:f6:
63:20:0a:c3:26:56:5e:3a:13:0e:22:00:2e:0e:c2:74:2b:2d:
64:7c:4f:00:3a:7d:fe:7e:ca:9a:1e:f7:c9:c5:ee:36:48:0b:
8a:e5:ae:21:7a:76:43:d4:49:54:f3:4a:07:3e:3b:5c:9e:19:
21:75:22:db:f3:fc:db:9c:41:3a:5d:a6:cc:8f:b3:02:12:58:
62:bd:a7:01:88:1c:95:c4:3f:aa:f8:b2:25:4e:22:59:43:a5:
16:70:3c:2a:bc:1b:63:ac:8d:b8:5a:03:2b:db:58:f9:30:ec:
6f:12:67:9f:c9:7d:99:be:7c:30:1b:e5:31:7a:9c:d6:ca:e5:
48:b1:15:ef:18:fc:5f:84:b3:ab:6c:3c:4f:3f:1f:fa:a4:97:
8d:4d:3e:95:6f:87:36:c8:5a:66:5f:a9:fe:7b:d4:49:d9:bd:
fb:0b:ec:02:fc:ca:04:d0:63:cf:41:3b:80:34:94:bd:3a:b2:
02:ad:b0:77:16:23:b9:de:25:e9:00:d6:83:52:b1:47:c4:a9:
9b:ab:87:e3:68:75:ba:b0:9e:09:d2:c8:04:31:57:52:bf:26:
ff:b3:10:51:1b:2b:ea:17:5f:47:d9:63:98:1e:13:a0:1c:c3:
0c:9f:ce:6e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULSK5uHBt3sMV9ifAAFs40rLbU9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjkwNzI4MjFaFw0yNTEyMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQDIxZTEyMTE1M2ZjNjdlNjYzYjFlNmNmZTdiYjNhOWU1YTdhZmJhMGNjYjRm
ZWU2OWI0NTQ2OWEyYjY4M2NhMDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK03tq8zpFwFxRMQH8wXmK5uCZvcemffM2tgjEMdB1B2hGrFYM9JXZfwHysj
ibK6/erTJun3kYoHDehGYpgLeOhZbndgrhVp8h0TM8AviDmHhaAgqadX2uT8/xpY
P+ESnRBBWTBrgBJUBwhipa5y/lsoXIKsTWxdY+JnhiarCgypss+kfg81KE6E94nM
w/xAs/iVC6iaVSgtgOvbfPSxS0zzY4nnMmpQYct1Euhfump2bl7d+nJVWcrUb2ZP
mNTRn+5Tb4YnhrT1HZjX3dRB2s/WaXkcmlwyKDrREiQIcd6Y58gqqeoIqJ+L8I3U
wnaDq2g/nM5HQKTApGtxGE+dAycCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTiTCy6
jJ5c9076duLNcLixhazwJjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmIzNjRhN2EtY2UyMy00ODE0LThiZmEtMWMyMzI0MmE3M2U4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GqA
IDANBgkqhkiG9w0BAQsFAAOCAQEAG9OlDSCvWYR4ZuVk8qTcK/H2YyAKwyZWXjoT
DiIALg7CdCstZHxPADp9/n7Kmh73ycXuNkgLiuWuIXp2Q9RJVPNKBz47XJ4ZIXUi
2/P825xBOl2mzI+zAhJYYr2nAYgclcQ/qviyJU4iWUOlFnA8KrwbY6yNuFoDK9tY
+TDsbxJnn8l9mb58MBvlMXqc1srlSLEV7xj8X4Szq2w8Tz8f+qSXjU0+lW+HNsha
Zl+p/nvUSdm9+wvsAvzKBNBjz0E7gDSUvTqyAq2wdxYjud4l6QDWg1KxR8Spm6uH
42h1urCeCdLIBDFXUr8m/7MQURsr6hdfR9ljmB4ToBzDDJ/Obg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:10 2025 by rpki-client