Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
File: 950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa (raw, json)
Hash identifier: OdKzkk+GxBC1hKaSW2Zk0+c2QG/1tWzFyti/gt4Iwe0=
Subject key identifier: C4:37:37:AF:FE:7F:42:E3:F1:D4:0F:BF:C6:F4:C2:0A:EE:AC:B3:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 053B299DB7C52E65660AA2B52C03B64E54F163AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
Signing time: Mon 21 Jul 2025 16:51:41 +0000
ROA not before: Mon 21 Jul 2025 16:51:41 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3b:29:9d:b7:c5:2e:65:66:0a:a2:b5:2c:03:b6:4e:54:f1:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:51:41 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=259c2a6444e8bd95f57c47feea6697f37eaa04e64553858e5625849a93ff6d15, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:10:a1:8f:de:b5:d2:1c:b3:2d:9f:fe:49:
e9:71:78:0f:7f:ed:16:4d:16:91:3d:93:59:f6:eb:
38:e4:cb:55:0d:f6:95:ed:f5:5d:b1:3e:84:7e:b0:
34:cb:e8:f4:81:42:eb:2d:14:a4:19:24:3e:46:86:
f0:26:fc:e7:7e:47:1e:c6:a6:64:18:40:bb:e5:71:
bc:b8:40:4f:80:d5:1a:53:49:cd:34:c9:78:15:98:
d6:39:27:c4:79:d0:9f:d0:a3:77:b9:3e:85:a0:ab:
0a:84:a4:a8:e5:7a:e4:d0:ea:79:d0:3c:74:be:1a:
f6:4f:99:50:48:a1:01:bd:55:61:50:3a:06:54:77:
35:f9:4a:a1:2e:e0:f1:e4:c4:35:44:6d:d8:05:3e:
00:46:cb:8f:42:30:fd:b6:24:06:fc:04:70:d2:93:
dc:d6:16:20:39:b8:1b:c2:52:67:a4:78:64:5b:af:
55:64:69:89:0a:86:a6:a9:ee:a3:c5:b7:bf:98:6c:
86:20:43:06:69:5c:f6:04:ff:11:e3:fd:41:3f:de:
8e:e7:9a:1e:3b:a2:47:c8:e2:a7:ad:21:e3:0f:cc:
aa:1b:28:09:d9:80:8b:4e:00:6c:1f:f2:cd:5c:0c:
d2:6b:b8:b6:92:22:6d:56:2f:b9:2d:bc:c2:10:c3:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:37:AF:FE:7F:42:E3:F1:D4:0F:BF:C6:F4:C2:0A:EE:AC:B3:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950e9d37-a9b5-4c78-b65e-c7b45ca851c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
2f:27:a6:55:69:80:d5:44:10:1b:a9:0e:be:26:80:84:62:04:
38:66:00:fa:a3:e1:73:f2:c4:6e:05:51:44:a9:26:5e:db:07:
a4:c7:24:1b:1b:0c:3f:62:aa:99:42:9e:2f:77:83:4a:b1:a6:
f9:10:4b:58:8d:ea:28:78:b1:85:96:72:1e:5c:c9:de:6a:57:
d6:56:07:13:4a:1c:42:00:5b:dc:9a:44:fd:f7:65:94:3d:0f:
47:fc:15:80:94:52:a1:8f:12:c7:e1:31:8c:02:28:d1:49:d5:
87:8a:d2:7e:b3:f2:91:1c:00:2c:d1:38:d0:29:9a:53:05:8a:
f3:f0:56:60:b8:6a:9d:67:56:48:7e:06:2b:31:c6:01:c8:77:
a3:b1:f2:39:cc:82:42:b3:a1:e5:92:50:3a:8a:ec:65:7f:0e:
52:53:a1:34:8f:2b:bd:60:b8:07:84:2e:43:2a:d5:0f:e9:fc:
17:b3:11:04:fd:4c:c8:bb:e3:fc:4d:b0:66:f8:b7:c5:e6:eb:
b0:0f:42:02:0f:3e:c9:e1:de:7b:fd:ef:26:c0:54:2b:fb:32:
65:55:48:e5:b0:92:44:6b:6f:9a:bf:04:71:76:a2:f5:4b:ba:
ae:3e:2d:ba:47:29:bd:e7:a7:34:1f:1d:31:99:ba:29:a0:ba:
56:90:2e:9c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUBTspnbfFLmVmCqK1LAO2TlTxY60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MjExNjUxNDFaFw0yNTA4MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDI1OWMyYTY0NDRlOGJkOTVmNTdjNDdmZWVhNjY5N2YzN2VhYTA0ZTY0NTUz
ODU4ZTU2MjU4NDlhOTNmZjZkMTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKTLEKGP3rXSHLMtn/5J6XF4D3/tFk0WkT2TWfbrOOTLVQ32le31XbE+hH6w
NMvo9IFC6y0UpBkkPkaG8Cb8535HHsamZBhAu+VxvLhAT4DVGlNJzTTJeBWY1jkn
xHnQn9Cjd7k+haCrCoSkqOV65NDqedA8dL4a9k+ZUEihAb1VYVA6BlR3NflKoS7g
8eTENURt2AU+AEbLj0Iw/bYkBvwEcNKT3NYWIDm4G8JSZ6R4ZFuvVWRpiQqGpqnu
o8W3v5hshiBDBmlc9gT/EeP9QT/ejueaHjuiR8jip60h4w/MqhsoCdmAi04AbB/y
zVwM0mu4tpIibVYvuS28whDDHVMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTENzev
/n9C4/HUD7/G9MIK7qyzPzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTUwZTlkMzctYTliNS00Yzc4LWI2NWUtYzdiNDVjYTg1MWM2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HOg
wDANBgkqhkiG9w0BAQsFAAOCAQEALyemVWmA1UQQG6kOviaAhGIEOGYA+qPhc/LE
bgVRRKkmXtsHpMckGxsMP2KqmUKeL3eDSrGm+RBLWI3qKHixhZZyHlzJ3mpX1lYH
E0ocQgBb3JpE/fdllD0PR/wVgJRSoY8Sx+ExjAIo0UnVh4rSfrPykRwALNE40Cma
UwWK8/BWYLhqnWdWSH4GKzHGAch3o7HyOcyCQrOh5ZJQOorsZX8OUlOhNI8rvWC4
B4QuQyrVD+n8F7MRBP1MyLvj/E2wZvi3xebrsA9CAg8+yeHee/3vJsBUK/syZVVI
5bCSRGtvmr8EcXai9Uu6rj4tukcpveenNB8dMZm6KaC6VpAunA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:11 2025 by rpki-client