Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79337548-762c-432b-bf7a-72bf34db9509.roa
File: 79337548-762c-432b-bf7a-72bf34db9509.roa (raw, json)
Hash identifier: RMe7SRNonvJWF/drttZRjMDOxBy/Z1Tzhag18lkBnk4=
Subject key identifier: EC:3B:B0:5C:11:D8:43:D6:15:FC:75:52:8D:72:58:D7:13:7A:B5:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 354AC993E5030D82FC46E5AAE7F99D29CEA77DF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79337548-762c-432b-bf7a-72bf34db9509.roa
Signing time: Fri 31 Oct 2025 01:40:08 +0000
ROA not before: Fri 31 Oct 2025 01:40:08 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4a:c9:93:e5:03:0d:82:fc:46:e5:aa:e7:f9:9d:29:ce:a7:7d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 31 01:40:08 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=656ed36ed75da15c4495d33827c3e48c9e56c1fb81a6eaf47b0787ebb8846fd5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:fa:87:88:88:df:b4:19:df:e6:07:d0:6a:
6a:c4:fd:e8:13:a1:a6:af:b6:fb:a4:7d:ef:07:25:
5f:00:66:b3:ce:8a:08:95:02:f7:aa:b0:8e:b2:96:
67:af:41:e0:04:19:85:78:ec:f4:67:7b:40:65:7d:
bb:d1:22:e5:e0:ed:d5:c3:ba:db:86:c0:e2:5e:50:
81:32:24:40:e9:68:4e:a7:aa:0d:fd:0b:10:52:0a:
41:2e:97:d1:7d:a4:11:1c:7b:ae:12:86:dd:f0:df:
50:e7:f1:02:fd:5f:dc:46:e7:15:e4:d6:7d:bc:6e:
7b:b5:e4:39:8e:3b:2f:11:db:69:70:dd:04:13:19:
b3:43:68:98:f4:3f:fc:17:b7:4d:7f:48:55:06:4d:
73:0b:21:ba:50:14:eb:04:ca:5b:a7:a5:cb:e1:cc:
21:48:40:a3:dd:ee:3c:7c:3b:fe:5a:c2:5f:b2:6b:
df:51:b4:9b:9b:3f:b3:40:f3:83:cc:81:97:a0:f8:
f2:ee:d5:2a:b6:64:07:ea:3a:29:a7:68:80:47:d4:
f9:c7:e4:77:88:30:37:87:9b:4d:88:2f:31:8f:30:
b7:f4:58:a6:38:fa:9f:55:2c:f8:21:52:f5:40:2c:
ef:ec:d1:77:6f:97:3b:d6:d1:83:25:a3:1b:39:93:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:B0:5C:11:D8:43:D6:15:FC:75:52:8D:72:58:D7:13:7A:B5:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79337548-762c-432b-bf7a-72bf34db9509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c080::/46
Signature Algorithm: sha256WithRSAEncryption
7d:b3:3e:27:46:d4:e4:2f:88:6a:d0:57:d4:16:94:6f:a7:b7:
c6:fd:2c:bd:c1:ca:ec:cb:60:ee:3d:9c:f3:fb:a7:87:47:0a:
4c:eb:db:76:44:a6:a7:9f:dd:8e:ee:a9:e4:40:ed:32:c3:4f:
5e:75:d5:81:58:06:b5:48:5a:7e:02:3c:22:d2:3e:51:03:2b:
a3:41:fd:77:6b:7e:a2:a9:2d:30:ab:2f:47:bd:5b:b9:df:f1:
62:46:20:f3:73:c0:18:4b:4d:ab:69:12:18:ab:fc:49:bf:6a:
e3:c7:98:4d:b0:9a:f9:c9:09:2a:fc:bf:80:68:d9:14:7e:03:
5c:02:72:ca:1b:9c:4b:fc:d4:62:94:73:f9:0a:af:ce:d3:ca:
2e:f8:ac:24:52:60:07:b5:ce:b3:d9:43:a9:be:0d:80:e7:27:
52:b2:a9:75:06:24:97:75:a4:39:12:dc:62:ba:0c:7e:d9:ed:
83:42:02:5c:fa:31:7f:0a:6a:82:ec:f3:d6:1d:c4:6f:a6:c7:
70:31:37:7e:04:46:24:e2:98:c6:83:0d:d0:84:e0:29:af:17:
f3:20:37:48:67:76:fd:94:4a:48:4f:04:da:ed:1f:d4:49:48:
fe:27:fb:25:48:2c:f1:e5:64:7a:a7:4b:a6:d3:32:f3:db:61:
29:97:70:08
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUNUrJk+UDDYL8RuWq5/mdKc6nffIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMzEwMTQwMDhaFw0yNTEyMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDY1NmVkMzZlZDc1ZGExNWM0NDk1ZDMzODI3YzNlNDhjOWU1NmMxZmI4MWE2
ZWFmNDdiMDc4N2ViYjg4NDZmZDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCV+oeIiN+0Gd/mB9BqasT96BOhpq+2+6R97wclXwBms86KCJUC96qwjrKW
Z69B4AQZhXjs9Gd7QGV9u9Ei5eDt1cO624bA4l5QgTIkQOloTqeqDf0LEFIKQS6X
0X2kERx7rhKG3fDfUOfxAv1f3EbnFeTWfbxue7XkOY47LxHbaXDdBBMZs0NomPQ/
/Be3TX9IVQZNcwshulAU6wTKW6ely+HMIUhAo93uPHw7/lrCX7Jr31G0m5s/s0Dz
g8yBl6D48u7VKrZkB+o6KadogEfU+cfkd4gwN4ebTYgvMY8wt/RYpjj6n1Us+CFS
9UAs7+zRd2+XO9bRgyWjGzmTWrMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTsO7Bc
EdhD1hX8dVKNcljXE3q1SDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzkzMzc1NDgtNzYyYy00MzJiLWJmN2EtNzJiZjM0ZGI5NTA5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPA
gDANBgkqhkiG9w0BAQsFAAOCAQEAfbM+J0bU5C+IatBX1BaUb6e3xv0svcHK7Mtg
7j2c8/unh0cKTOvbdkSmp5/dju6p5EDtMsNPXnXVgVgGtUhafgI8ItI+UQMro0H9
d2t+oqktMKsvR71bud/xYkYg83PAGEtNq2kSGKv8Sb9q48eYTbCa+ckJKvy/gGjZ
FH4DXAJyyhucS/zUYpRz+QqvztPKLvisJFJgB7XOs9lDqb4NgOcnUrKpdQYkl3Wk
ORLcYroMftntg0ICXPoxfwpqguzz1h3Eb6bHcDE3fgRGJOKYxoMN0ITgKa8X8yA3
SGd2/ZRKSE8E2u0f1ElI/if7JUgs8eVkeqdLptMy89thKZdwCA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:26 2025 by rpki-client