Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: czMRwlTp9/riXYgR2SCqfuRXC0MkhJru62LZ/0xbjjI=
Subject key identifier: F5:E2:C7:DD:8B:B9:F7:3C:BE:92:27:EC:20:BE:BF:2D:A4:E8:4A:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62296E30B2C374951C4C5C3D979570C70B31F635
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Tue 21 Oct 2025 13:10:43 +0000
ROA not before: Tue 21 Oct 2025 13:10:43 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:29:6e:30:b2:c3:74:95:1c:4c:5c:3d:97:95:70:c7:0b:31:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:10:43 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=2b2c37fb0bf5ec2ebee6cde20eeda758a4ec4b48ef6f81157774a0f35e33cd75, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:f4:ca:35:47:9d:2e:20:48:fd:26:0d:ea:
f8:e7:0b:e5:94:6e:4f:bf:45:4d:66:2c:2e:7c:df:
8f:a8:0f:5b:cd:b2:fe:28:98:d4:8e:03:6f:48:a3:
2b:7f:c1:cf:08:a8:72:e8:4c:4e:f1:2d:2b:f4:c9:
37:45:c7:4a:df:4a:47:d4:13:23:2d:6f:f4:29:58:
32:cd:07:0d:ad:fd:a2:bf:1c:7b:68:7f:68:e8:80:
5f:0b:2e:c1:78:4f:11:f3:35:91:e3:46:d9:cb:9b:
0b:d3:4d:6b:b5:49:b6:16:c4:67:70:c9:b6:6d:a1:
04:fb:28:57:4c:c6:81:f5:77:7a:cf:7f:a0:ed:e2:
4a:d4:1b:34:c3:1c:21:58:73:82:6d:85:31:3b:7a:
09:22:4b:9d:6e:31:ca:3c:50:86:fd:a4:b0:fc:f2:
42:3d:e7:9f:e0:4e:f8:bb:90:1b:ce:7a:07:14:14:
69:61:ab:7c:86:df:c3:23:43:fc:96:92:ba:09:e1:
91:b5:bb:19:51:79:e7:87:61:12:c5:6b:4d:c6:c2:
7f:24:4c:c9:b2:cd:4f:90:e5:5e:17:26:0f:1a:b9:
b8:c1:ce:c7:33:80:b2:3d:4c:8d:16:4f:ce:28:d7:
2c:d3:e2:03:fe:77:4b:c9:8c:b8:84:2a:5d:b7:8f:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:C7:DD:8B:B9:F7:3C:BE:92:27:EC:20:BE:BF:2D:A4:E8:4A:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:07:c7:62:0f:89:f8:18:ab:72:97:3f:16:2d:42:02:0b:b2:
f6:da:00:94:fd:46:45:30:63:51:f5:37:67:49:e9:fd:f6:6f:
53:72:e8:23:32:c2:92:19:45:41:5a:0d:9f:6d:12:ae:62:0b:
e9:e9:d9:6d:65:73:2e:bf:88:69:69:c7:a1:f4:96:de:78:7f:
9f:f8:b3:6c:37:04:46:4f:fb:5f:bb:25:9b:35:6e:36:43:11:
a7:f2:53:80:21:9e:e0:93:77:57:dc:3d:c7:06:7c:1b:ac:dd:
da:65:ca:a0:d3:64:04:e9:d0:21:fd:4f:15:ce:0e:a0:ec:25:
64:6d:c6:40:fe:90:c8:a4:63:70:31:a4:0b:a3:92:17:47:77:
54:93:b4:63:3e:5e:d9:bb:49:86:48:6b:ba:e1:bb:fa:43:90:
8c:19:25:45:87:14:90:0d:b6:07:f1:09:85:5b:8f:b8:4d:f7:
fc:17:b0:18:62:e4:92:6a:f0:53:bb:11:e6:9e:cd:af:01:e5:
df:56:cd:e1:51:94:29:35:bb:bd:a9:ae:83:50:ab:cf:1c:33:
9b:08:6a:85:71:9f:23:89:63:46:62:dc:c3:35:2c:cc:1a:83:
bb:52:bc:a7:cb:72:56:1b:54:2b:7c:8f:1e:78:70:c5:92:c1:
3c:87:51:d0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYiluMLLDdJUcTFw9l5Vwxwsx9jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTEwMjExMzEwNDNaFw0yNTExMjUyMzU5NTlaMHoxSTBHBgNV
BAUTQDJiMmMzN2ZiMGJmNWVjMmViZWU2Y2RlMjBlZWRhNzU4YTRlYzRiNDhlZjZm
ODExNTc3NzRhMGYzNWUzM2NkNzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKle9Mo1R50uIEj9Jg3q+OcL5ZRuT79FTWYsLnzfj6gPW82y/iiY1I4Db0ij
K3/BzwiocuhMTvEtK/TJN0XHSt9KR9QTIy1v9ClYMs0HDa39or8ce2h/aOiAXwsu
wXhPEfM1keNG2cubC9NNa7VJthbEZ3DJtm2hBPsoV0zGgfV3es9/oO3iStQbNMMc
IVhzgm2FMTt6CSJLnW4xyjxQhv2ksPzyQj3nn+BO+LuQG856BxQUaWGrfIbfwyND
/JaSugnhkbW7GVF554dhEsVrTcbCfyRMybLNT5DlXhcmDxq5uMHOxzOAsj1MjRZP
zijXLNPiA/53S8mMuIQqXbePYHECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBT14sfd
i7n3PL6SJ+wgvr8tpOhKXzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGU2MmJkMDUtMTAzYi00Y2NlLTkxZDctMDE2ZjRhYjI2YWE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDIB8diD4n4GKtylz8WLUICC7L22gCU/UZFMGNR
9TdnSen99m9TcugjMsKSGUVBWg2fbRKuYgvp6dltZXMuv4hpaceh9JbeeH+f+LNs
NwRGT/tfuyWbNW42QxGn8lOAIZ7gk3dX3D3HBnwbrN3aZcqg02QE6dAh/U8Vzg6g
7CVkbcZA/pDIpGNwMaQLo5IXR3dUk7RjPl7Zu0mGSGu64bv6Q5CMGSVFhxSQDbYH
8QmFW4+4Tff8F7AYYuSSavBTuxHmns2vAeXfVs3hUZQpNbu9qa6DUKvPHDObCGqF
cZ8jiWNGYtzDNSzMGoO7Uryny3JWG1QrfI8eeHDFksE8h1HQ
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:00 2025 by rpki-client