Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
File: 9ff479c7-35c9-43ea-ab99-712ce7537beb.roa (raw, json)
Hash identifier: Fp2WWpeCb426CPmXMX5aJnMg9RNZt+FjkeZOqyHzNzk=
Subject key identifier: 55:51:4A:5E:45:31:4A:02:D9:E5:9F:20:49:DE:E2:C6:AC:97:D0:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DF500F7FB9F51BCB44C7F57F22BD0070AB9EF7F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
Signing time: Mon 28 Jul 2025 16:11:20 +0000
ROA not before: Mon 28 Jul 2025 16:11:20 +0000
ROA not after: Mon 01 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f5:00:f7:fb:9f:51:bc:b4:4c:7f:57:f2:2b:d0:07:0a:b9:ef:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 16:11:20 2025 GMT
Not After : Sep 1 23:59:59 2025 GMT
Subject: serialNumber=d8b23fa48c1d7c3889f329bddf6b3ec86a3f7b82b3da4eb7f5a76a55fe70778b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:51:8b:d8:bc:a6:ff:ae:d4:89:98:16:50:
a6:7d:97:5a:81:44:e0:fa:5f:a1:86:37:4c:aa:29:
e9:b5:04:f2:ee:ac:14:d6:7b:a2:53:59:18:80:e3:
49:08:ef:41:89:59:af:ec:a4:01:61:6f:03:4a:4c:
65:94:e3:16:59:0c:56:a1:b1:b0:50:13:b3:82:e4:
23:2d:3c:39:88:e2:e4:19:93:9c:85:2b:62:89:72:
f7:6d:5f:9f:66:9f:b1:9d:c9:9b:7d:ed:d3:92:49:
9d:f8:29:50:79:c0:09:b8:42:c6:1e:ee:87:86:3d:
dd:c7:bf:34:78:e4:84:be:d7:70:f6:d4:65:a7:1e:
1c:a1:b6:e0:f3:5c:62:d6:9e:4a:a1:2b:30:00:bd:
7a:a1:ff:34:0c:6d:d6:28:bd:3b:4a:d5:de:17:f2:
90:52:30:82:84:a7:af:e9:08:c7:26:b8:11:83:7a:
0b:e6:3a:e9:1b:b4:f6:41:5f:a5:31:41:95:66:42:
7e:47:2c:7b:89:61:ff:31:a3:44:1a:04:7b:8e:ab:
d1:d7:2c:5a:b5:bb:42:6c:f7:fb:98:6d:cf:26:d6:
2c:aa:d6:76:87:0e:96:f7:2a:36:7e:34:a7:a3:e4:
d1:c8:8c:1c:e7:62:d4:20:bb:88:cd:cd:73:81:3f:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:4A:5E:45:31:4A:02:D9:E5:9F:20:49:DE:E2:C6:AC:97:D0:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:2000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:03:26:82:6a:df:74:90:02:e7:a1:d0:5b:a1:b6:b9:4f:56:
bf:8b:6e:53:2e:b7:b6:55:99:86:db:04:d2:f0:bd:56:64:5d:
a0:c0:cf:c4:e2:0c:3c:ef:b9:ab:28:4e:74:fe:a1:9e:2f:d0:
1c:81:3c:68:fa:b3:0a:5c:f1:b6:65:18:7c:e1:fc:82:28:48:
8d:8a:99:38:78:9b:a8:a0:d7:5d:a6:22:32:8d:cf:7e:5f:2c:
c6:1a:60:49:fd:87:e8:e1:c8:c2:51:ba:16:5c:f1:40:bf:31:
e9:40:49:45:d2:57:e8:9e:e3:bf:ab:79:37:ed:19:0a:d5:a1:
06:92:fe:63:0e:7e:02:96:0a:72:7b:83:c8:86:67:af:ee:7a:
7c:9e:b4:5f:7c:2c:96:c5:75:27:4a:47:e7:47:29:0e:da:9a:
05:9f:93:8d:02:bc:cd:58:f0:c6:c7:73:9a:85:b3:ba:89:7f:
f3:f3:e8:d4:84:0e:3f:c9:9f:30:69:74:14:c2:5e:f5:b2:67:
5b:8f:7e:7d:cf:cc:2e:1d:a8:90:3b:ad:fd:52:38:8b:b2:71:
df:9f:55:18:3a:7e:e9:64:72:3e:c7:f3:b3:6e:54:62:b0:2f:
b9:72:67:00:5e:7c:53:76:18:50:d1:63:7e:7d:c3:84:c0:e3:
87:ca:21:a6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULfUA9/ufUby0TH9X8ivQBwq5738wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MjgxNjExMjBaFw0yNTA5MDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ4YjIzZmE0OGMxZDdjMzg4OWYzMjliZGRmNmIzZWM4NmEzZjdiODJiM2Rh
NGViN2Y1YTc2YTU1ZmU3MDc3OGIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM/aUYvYvKb/rtSJmBZQpn2XWoFE4PpfoYY3TKop6bUE8u6sFNZ7olNZGIDj
SQjvQYlZr+ykAWFvA0pMZZTjFlkMVqGxsFATs4LkIy08OYji5BmTnIUrYoly921f
n2afsZ3Jm33t05JJnfgpUHnACbhCxh7uh4Y93ce/NHjkhL7XcPbUZaceHKG24PNc
YtaeSqErMAC9eqH/NAxt1ii9O0rV3hfykFIwgoSnr+kIxya4EYN6C+Y66Ru09kFf
pTFBlWZCfkcse4lh/zGjRBoEe46r0dcsWrW7Qmz3+5htzybWLKrWdocOlvcqNn40
p6Pk0ciMHOdi1CC7iM3Nc4E/nAUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRVUUpe
RTFKAtnlnyBJ3uLGrJfQdTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWZmNDc5YzctMzVjOS00M2VhLWFiOTktNzEyY2U3NTM3YmViLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DAg
MA0GCSqGSIb3DQEBCwUAA4IBAQAPAyaCat90kALnodBboba5T1a/i25TLre2VZmG
2wTS8L1WZF2gwM/E4gw877mrKE50/qGeL9AcgTxo+rMKXPG2ZRh84fyCKEiNipk4
eJuooNddpiIyjc9+XyzGGmBJ/Yfo4cjCUboWXPFAvzHpQElF0lfonuO/q3k37RkK
1aEGkv5jDn4Clgpye4PIhmev7np8nrRffCyWxXUnSkfnRykO2poFn5ONArzNWPDG
x3OahbO6iX/z8+jUhA4/yZ8waXQUwl71smdbj359z8wuHaiQO639UjiLsnHfn1UY
On7pZHI+x/OzblRisC+5cmcAXnxTdhhQ0WN+fcOEwOOHyiGm
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:37 2025 by rpki-client