Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
File: b4811639-eec3-4653-a07b-9777ebef5f33.roa (raw, json)
Hash identifier: BywS2CLKsAY7nuwCgofqzrF7ueMeKvA3tNGlewxhMGM=
Subject key identifier: E5:FB:13:3D:83:21:8D:CD:F3:DA:D9:85:D0:96:00:50:73:DD:5D:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 655081DA37975E1FD079CF8B2061BC19310F0C70
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
Signing time: Tue 04 Nov 2025 02:50:38 +0000
ROA not before: Tue 04 Nov 2025 02:50:38 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:50:81:da:37:97:5e:1f:d0:79:cf:8b:20:61:bc:19:31:0f:0c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:50:38 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=806652152e6e408d8328a913010fadc61eb23e5f581ccdf515086c7806b03cb2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:ec:d5:90:58:05:ff:1e:2f:00:21:90:10:
97:f7:2f:2d:e4:87:4c:88:d7:2d:eb:30:62:39:44:
dc:9f:b1:eb:4d:12:7f:d1:a9:2f:49:d8:0a:e3:97:
bd:04:10:c6:eb:43:8d:d1:a7:35:bc:85:f0:07:b9:
ae:c0:ee:d4:ba:6c:e7:7a:0a:83:bb:a1:88:5a:3c:
30:bc:3a:c3:2e:f1:6e:b8:f2:40:3f:89:c8:f2:6b:
00:16:67:51:d3:16:4b:be:8f:66:f6:8c:17:5c:71:
22:ce:ef:45:39:fa:a9:18:89:27:bc:eb:62:a2:d0:
b0:f5:dc:66:68:42:06:41:ad:04:c2:9f:cc:a7:5b:
55:9d:41:7a:90:ae:a7:fd:01:d5:1c:62:ee:03:25:
30:e5:a7:c9:31:eb:5e:79:38:a8:99:a1:32:2f:62:
bb:bf:b7:d4:fe:36:31:dd:dc:23:ad:62:2a:42:e7:
e9:fc:90:81:2c:7b:05:e8:33:aa:21:21:c1:3d:d7:
7f:f2:34:3f:0a:70:03:47:0f:71:df:17:63:e1:df:
2c:22:be:32:77:32:80:32:f9:df:3c:c4:46:a2:90:
59:8a:e9:be:cf:8d:e4:3c:1f:40:09:58:83:48:31:
9d:17:4d:07:24:24:14:54:ca:35:e2:ba:2e:0b:63:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:13:3D:83:21:8D:CD:F3:DA:D9:85:D0:96:00:50:73:DD:5D:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b4811639-eec3-4653-a07b-9777ebef5f33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:a1:0d:86:a1:8f:17:cc:af:65:ec:1d:f4:4c:00:66:de:c3:
aa:df:7b:7f:f8:d2:dd:84:62:ca:82:56:08:39:50:20:26:c0:
d2:1d:6b:14:73:cf:1f:4e:82:75:aa:1e:43:a8:97:61:ed:15:
85:62:f8:42:b0:14:a8:e8:a9:70:3d:76:13:b5:d6:7d:5e:2c:
71:8e:8a:66:3e:99:bf:db:2a:5a:65:1f:ac:d1:30:b3:91:40:
cc:aa:f9:a4:33:48:5d:ec:de:68:69:41:e8:11:16:2e:b3:2f:
d7:75:8e:35:49:bb:51:c0:a0:da:aa:de:7a:b1:01:7f:fa:5b:
77:86:e7:ce:69:d6:06:19:df:2d:fc:88:99:7a:25:80:02:8e:
4e:bd:4f:62:b2:a7:23:d0:46:55:9d:a1:89:57:22:b2:4c:20:
ba:8c:95:72:e2:02:d2:e6:d0:b2:0d:80:7c:0a:ae:90:85:e6:
82:f5:8f:e0:8f:02:c2:81:dd:55:e4:b8:80:a5:ba:9b:a1:29:
86:2e:be:80:f3:bb:cb:34:6b:ca:b6:04:ff:f1:cc:9d:31:2d:
e5:0e:34:9f:00:68:c5:ff:c4:fa:1a:ec:64:98:2d:5d:ee:46:
b8:9b:21:d8:14:f0:d5:c2:0c:96:72:f1:08:8d:64:a6:3b:4c:
fe:18:58:a8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZVCB2jeXXh/Qec+LIGG8GTEPDHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTExMDQwMjUwMzhaFw0yNTEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDgwNjY1MjE1MmU2ZTQwOGQ4MzI4YTkxMzAxMGZhZGM2MWViMjNlNWY1ODFj
Y2RmNTE1MDg2Yzc4MDZiMDNjYjIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALQC7NWQWAX/Hi8AIZAQl/cvLeSHTIjXLeswYjlE3J+x600Sf9GpL0nYCuOX
vQQQxutDjdGnNbyF8Ae5rsDu1Lps53oKg7uhiFo8MLw6wy7xbrjyQD+JyPJrABZn
UdMWS76PZvaMF1xxIs7vRTn6qRiJJ7zrYqLQsPXcZmhCBkGtBMKfzKdbVZ1BepCu
p/0B1Rxi7gMlMOWnyTHrXnk4qJmhMi9iu7+31P42Md3cI61iKkLn6fyQgSx7Begz
qiEhwT3Xf/I0PwpwA0cPcd8XY+HfLCK+MncygDL53zzERqKQWYrpvs+N5DwfQAlY
g0gxnRdNByQkFFTKNeK6Lgtjv1UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTl+xM9
gyGNzfPa2YXQlgBQc91d1jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjQ4MTE2MzktZWVjMy00NjUzLWEwN2ItOTc3N2ViZWY1ZjMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FkQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDFoQ2GoY8XzK9l7B30TABm3sOq33t/+NLdhGLK
glYIOVAgJsDSHWsUc88fToJ1qh5DqJdh7RWFYvhCsBSo6KlwPXYTtdZ9Xixxjopm
Ppm/2ypaZR+s0TCzkUDMqvmkM0hd7N5oaUHoERYusy/XdY41SbtRwKDaqt56sQF/
+lt3hufOadYGGd8t/IiZeiWAAo5OvU9isqcj0EZVnaGJVyKyTCC6jJVy4gLS5tCy
DYB8Cq6QheaC9Y/gjwLCgd1V5LiApbqboSmGLr6A87vLNGvKtgT/8cydMS3lDjSf
AGjF/8T6GuxkmC1d7ka4myHYFPDVwgyWcvEIjWSmO0z+GFio
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:46 2025 by rpki-client