Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa
File: 716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa (raw, json)
Hash identifier: hyV1A3yAF87tefF/tuN1Bu4XA0IZ/5d99JKkXdQzX0M=
Subject key identifier: 46:DA:68:2F:B6:4F:DA:62:FD:57:5B:43:45:16:4C:90:AE:73:DE:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63CFC9157D6747B6B58196AEC8CE6DA0A9590F52
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa
Signing time: Wed 29 Oct 2025 07:28:25 +0000
ROA not before: Wed 29 Oct 2025 07:28:25 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06a:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cf:c9:15:7d:67:47:b6:b5:81:96:ae:c8:ce:6d:a0:a9:59:0f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 29 07:28:25 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=c349e7c409a27e0ca69c801246c6af37d2d8907889161cabcdc1896fa9c4d394, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:a7:d5:7e:04:5c:34:fc:9a:4b:27:3a:6d:
9f:d8:f8:42:ac:f4:48:37:50:f3:15:f0:35:84:fb:
e4:02:9b:9b:18:24:19:d7:26:6f:be:e5:25:c4:49:
4b:72:42:3e:32:69:61:7b:a1:c7:87:f4:7e:56:56:
72:b1:66:15:0b:c5:b6:7b:da:66:f4:91:8f:fe:81:
06:aa:ee:1c:be:80:54:c2:00:bb:60:22:12:a9:82:
ad:5e:d7:d5:e5:c2:e7:70:0a:80:56:90:6d:d4:5f:
93:57:b9:34:84:00:1b:ce:f6:af:c2:96:06:1e:b1:
b5:7d:64:cf:cd:ae:48:f6:4e:2c:62:d0:7a:e2:f6:
74:11:4c:01:b6:83:74:f8:5f:f1:94:37:1c:c1:89:
90:32:67:c5:3b:d4:3c:cb:a9:b8:3a:e7:32:2e:60:
17:da:e6:17:24:3e:ed:6a:2b:90:a4:28:9e:a2:bc:
87:f9:26:51:f5:90:87:88:9c:1e:00:59:e1:c5:67:
02:2b:2f:b8:84:0e:a6:95:a5:eb:75:c7:9a:29:23:
c8:cd:af:89:9d:00:88:12:a4:83:c9:7f:51:33:01:
eb:e3:a2:1f:d9:67:27:61:d1:35:53:cc:fb:fd:50:
78:b3:75:f2:d6:e0:c5:2b:62:58:38:db:c4:70:09:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:68:2F:B6:4F:DA:62:FD:57:5B:43:45:16:4C:90:AE:73:DE:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/716a6c84-1e33-4881-b86c-cbc8a06c5f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06a:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
98:79:0d:c9:55:92:8a:5f:8e:c8:6d:4a:67:c3:6d:25:b3:cd:
15:f5:3e:36:a4:de:41:26:e7:44:a7:0c:9f:a9:3d:8a:b3:fc:
9d:4c:6d:b0:2f:e1:2a:92:0c:b4:9e:ee:7c:b4:5f:57:2b:7e:
77:4f:33:dd:49:d6:04:0b:3d:2a:c0:f9:cf:0e:3a:db:23:1a:
8d:ef:10:29:89:85:c8:c9:fb:23:ba:8e:98:e4:8c:a8:f1:bf:
d3:18:9c:b5:61:a0:20:1a:cb:e9:d3:6e:a6:a3:26:e9:09:fa:
95:d6:18:68:33:53:a2:89:07:f3:10:dc:78:26:38:c8:af:4a:
98:cc:fb:92:0a:a1:5f:c0:00:0c:77:d1:3f:fa:24:dd:04:ce:
9c:c9:21:85:cc:63:47:76:12:79:e5:57:66:26:5e:1e:aa:6a:
bb:fa:3e:6f:08:93:8b:6c:42:0a:b9:1a:6f:de:45:d9:20:8d:
86:a6:ca:64:d4:56:0a:5f:3c:ba:e7:85:e7:e0:be:f3:60:db:
e8:5b:7d:8a:39:04:4b:aa:52:c1:6e:e5:13:d2:0a:7b:2a:56:
17:7e:c8:87:d7:d8:c3:99:6d:45:03:08:c4:1d:f2:98:46:c8:
c0:08:35:e3:14:68:3b:e7:00:da:94:f4:d1:36:98:4a:da:b9:
ef:51:cb:2f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUY8/JFX1nR7a1gZauyM5toKlZD1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjkwNzI4MjVaFw0yNTEyMDMyMzU5NTlaMHoxSTBHBgNV
BAUTQGMzNDllN2M0MDlhMjdlMGNhNjljODAxMjQ2YzZhZjM3ZDJkODkwNzg4OTE2
MWNhYmNkYzE4OTZmYTljNGQzOTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ1+p9V+BFw0/JpLJzptn9j4Qqz0SDdQ8xXwNYT75AKbmxgkGdcmb77lJcRJ
S3JCPjJpYXuhx4f0flZWcrFmFQvFtnvaZvSRj/6BBqruHL6AVMIAu2AiEqmCrV7X
1eXC53AKgFaQbdRfk1e5NIQAG872r8KWBh6xtX1kz82uSPZOLGLQeuL2dBFMAbaD
dPhf8ZQ3HMGJkDJnxTvUPMupuDrnMi5gF9rmFyQ+7WorkKQonqK8h/kmUfWQh4ic
HgBZ4cVnAisvuIQOppWl63XHmikjyM2viZ0AiBKkg8l/UTMB6+OiH9lnJ2HRNVPM
+/1QeLN18tbgxStiWDjbxHAJYw0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRG2mgv
tk/aYv1XW0NFFkyQrnPezDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzE2YTZjODQtMWUzMy00ODgxLWI4NmMtY2JjOGEwNmM1ZjljLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GqQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAmHkNyVWSil+OyG1KZ8NtJbPNFfU+NqTeQSbn
RKcMn6k9irP8nUxtsC/hKpIMtJ7ufLRfVyt+d08z3UnWBAs9KsD5zw462yMaje8Q
KYmFyMn7I7qOmOSMqPG/0xictWGgIBrL6dNupqMm6Qn6ldYYaDNTookH8xDceCY4
yK9KmMz7kgqhX8AADHfRP/ok3QTOnMkhhcxjR3YSeeVXZiZeHqpqu/o+bwiTi2xC
Crkab95F2SCNhqbKZNRWCl88uueF5+C+82Db6Ft9ijkES6pSwW7lE9IKeypWF37I
h9fYw5ltRQMIxB3ymEbIwAg14xRoO+cA2pT00TaYStq571HLLw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 05:46:50 2025 by rpki-client