Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82d9b619-a6dc-44c4-9589-f89fef2e61f0.roa
File: 82d9b619-a6dc-44c4-9589-f89fef2e61f0.roa (raw, json)
Hash identifier: w3qHhB861Y/7Sis6RIeIxgM1qgwB6+gBXwE5VuQWAx8=
Subject key identifier: 6D:A2:E2:8D:03:03:41:B8:E2:6B:A1:AC:68:2F:E5:5D:9E:91:4B:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DABCB11A52EE4F83BF74412745911C43A27B6B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82d9b619-a6dc-44c4-9589-f89fef2e61f0.roa
Signing time: Mon 21 Jul 2025 16:51:32 +0000
ROA not before: Mon 21 Jul 2025 16:51:32 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ab:cb:11:a5:2e:e4:f8:3b:f7:44:12:74:59:11:c4:3a:27:b6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:51:32 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=40030dbfbbc70b344e8dc3cd4181e08d94e562f48341a670f0ca002b99d5a2e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:8a:4e:a0:ff:da:b9:6c:4a:11:97:90:6d:
47:de:b6:4f:03:ae:6f:14:6b:c1:51:c1:2e:9a:a2:
22:88:ab:44:9c:0e:81:71:76:8b:27:cc:05:36:47:
94:df:bb:f6:bc:35:e5:44:59:45:f4:36:45:fb:83:
71:b0:ba:ee:2d:31:19:64:85:b8:30:de:4d:79:57:
c5:d8:2e:ec:70:bd:fe:3f:93:b7:79:42:5c:6c:38:
3e:25:bd:a1:d2:ee:3c:4a:44:6f:df:cb:fd:35:9b:
ab:a4:e9:62:b8:b4:9b:dc:00:c9:c4:27:98:ec:00:
60:13:b4:f2:02:cc:ba:30:fe:1c:77:77:85:e4:ff:
86:dd:70:20:2f:52:2d:fc:e5:3a:5b:71:14:d2:e3:
04:ab:e5:51:4e:56:7c:c7:13:2d:27:5b:bc:eb:7a:
d9:fd:78:75:e0:c6:65:dd:60:14:92:28:ba:6a:26:
49:20:14:9f:d6:33:7c:ef:ed:a6:66:50:c3:68:78:
f4:3d:e5:05:06:d2:32:3d:dc:e2:95:ef:eb:23:98:
ae:b5:02:e1:38:11:b3:e7:9c:c8:8a:a3:13:fd:5f:
b1:49:09:d7:9d:94:df:ac:3f:55:c7:e4:99:63:b8:
06:8b:49:30:df:af:c4:71:f1:b9:38:c0:f0:1a:db:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:E2:8D:03:03:41:B8:E2:6B:A1:AC:68:2F:E5:5D:9E:91:4B:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82d9b619-a6dc-44c4-9589-f89fef2e61f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c000::/40
Signature Algorithm: sha256WithRSAEncryption
49:e8:c6:9a:8c:8f:d5:0e:54:09:c6:e2:78:29:cd:cf:fc:d2:
04:db:58:a4:fa:ae:f0:92:57:f6:83:27:7c:02:15:e2:d0:80:
5d:37:8f:a7:e4:9f:eb:64:b0:bc:c7:db:67:99:69:8a:88:5b:
04:e8:f5:74:5a:47:fa:d0:e6:7e:72:5a:cf:62:04:b2:28:ea:
e9:2c:9f:1b:f0:84:86:a8:c8:32:f9:df:9c:6b:aa:78:06:80:
f8:6d:1d:23:c8:bc:07:29:69:bc:dd:dd:4e:78:1c:0e:54:b7:
c5:ee:d4:09:43:e6:49:56:e3:72:32:96:76:b0:28:98:be:ab:
f4:cb:c2:98:50:36:f3:6e:e0:bf:b3:10:97:db:5f:aa:6b:0f:
66:53:92:98:11:b5:b0:6f:2e:64:ac:e1:4d:ff:00:33:44:3d:
ee:0c:17:9d:32:31:6f:21:7c:81:2e:81:9b:9a:16:30:7c:6c:
48:8d:af:c3:1c:14:f1:3e:6d:95:15:f5:40:9e:a1:8d:c5:c5:
9e:dc:e5:4b:e9:95:04:63:0c:5e:cd:64:78:a8:9e:51:a0:22:
29:f2:01:7b:89:ee:8b:1c:11:ec:64:81:80:5f:58:34:0d:4e:
6f:92:7f:0a:9a:74:f4:b2:fe:00:02:33:9d:3e:ae:12:5d:0c:
30:92:50:41
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTavLEaUu5Pg790QSdFkRxDontrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MjExNjUxMzJaFw0yNTA4MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwMDMwZGJmYmJjNzBiMzQ0ZThkYzNjZDQxODFlMDhkOTRlNTYyZjQ4MzQx
YTY3MGYwY2EwMDJiOTlkNWEyZTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJY4ik6g/9q5bEoRl5BtR962TwOubxRrwVHBLpqiIoirRJwOgXF2iyfMBTZH
lN+79rw15URZRfQ2RfuDcbC67i0xGWSFuDDeTXlXxdgu7HC9/j+Tt3lCXGw4PiW9
odLuPEpEb9/L/TWbq6TpYri0m9wAycQnmOwAYBO08gLMujD+HHd3heT/ht1wIC9S
LfzlOltxFNLjBKvlUU5WfMcTLSdbvOt62f14deDGZd1gFJIoumomSSAUn9YzfO/t
pmZQw2h49D3lBQbSMj3c4pXv6yOYrrUC4TgRs+ecyIqjE/1fsUkJ152U36w/Vcfk
mWO4BotJMN+vxHHxuTjA8BrbC6cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRtouKN
AwNBuOJroaxoL+VdnpFLjzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODJkOWI2MTktYTZkYy00NGM0LTk1ODktZjg5ZmVmMmU2MWYwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HPA
MA0GCSqGSIb3DQEBCwUAA4IBAQBJ6MaajI/VDlQJxuJ4Kc3P/NIE21ik+q7wklf2
gyd8AhXi0IBdN4+n5J/rZLC8x9tnmWmKiFsE6PV0Wkf60OZ+clrPYgSyKOrpLJ8b
8ISGqMgy+d+ca6p4BoD4bR0jyLwHKWm83d1OeBwOVLfF7tQJQ+ZJVuNyMpZ2sCiY
vqv0y8KYUDbzbuC/sxCX21+qaw9mU5KYEbWwby5krOFN/wAzRD3uDBedMjFvIXyB
LoGbmhYwfGxIja/DHBTxPm2VFfVAnqGNxcWe3OVL6ZUEYwxezWR4qJ5RoCIp8gF7
ie6LHBHsZIGAX1g0DU5vkn8KmnT0sv4AAjOdPq4SXQwwklBB
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:08 2025 by rpki-client