Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
File: ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa (raw, json)
Hash identifier: HBvc2R7GJphmu0cP1wKLMpNndwnS9laIjQlxcstOhiU=
Subject key identifier: BD:6A:E8:AC:36:82:E3:FB:67:4B:7E:79:4B:C1:87:E3:9E:D5:0C:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AE9EC61F3B434CDCF8D742F064DC4A410BB7729
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
Signing time: Tue 04 Nov 2025 02:51:03 +0000
ROA not before: Tue 04 Nov 2025 02:51:03 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e9:ec:61:f3:b4:34:cd:cf:8d:74:2f:06:4d:c4:a4:10:bb:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 4 02:51:03 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=32c2fd70f569bf6e1b16d7d62bda577a55b6ed47c09c8d806035c99295a0e28e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:b4:05:a8:ca:07:a7:fa:27:26:80:c6:ae:
3c:9c:b8:28:89:00:73:f7:3a:74:27:7e:bd:4b:5a:
0c:d5:0c:71:cd:67:a2:06:d1:95:58:f8:80:9f:9b:
3b:d9:b7:8c:46:6b:3a:ef:96:9d:db:be:c6:3d:a5:
e7:55:6c:05:b5:d5:94:8f:85:9e:c0:45:41:df:53:
68:b0:52:57:d8:7e:ea:97:c5:42:a0:d0:be:9c:ba:
ee:0d:a9:12:99:85:3c:cd:44:7c:93:04:4b:34:ed:
c4:81:c6:6f:87:d3:1d:54:06:08:08:b4:3f:e7:c5:
bb:00:53:18:09:91:c7:32:53:a1:a8:6c:75:56:78:
54:bd:7e:97:be:62:1b:a2:27:73:b6:2e:53:07:c9:
2c:2a:a4:40:7e:e6:d2:aa:95:2f:1b:d2:82:85:49:
76:d8:6e:ea:b5:4e:be:6a:5d:88:28:34:18:d8:31:
6e:6b:64:cf:18:db:17:dc:90:1e:17:a1:4b:94:75:
48:ac:2f:df:e4:8d:c9:f3:e3:9c:37:29:f7:0f:88:
0c:23:6a:fa:0d:c3:34:21:40:22:38:9f:07:b2:e6:
e3:c0:64:10:75:69:1a:99:1f:10:65:f7:49:88:17:
49:d2:80:39:84:33:9d:6b:43:3a:82:71:ba:88:67:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:E8:AC:36:82:E3:FB:67:4B:7E:79:4B:C1:87:E3:9E:D5:0C:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ff4816c3-2e55-42d8-a2fa-8e7ac7375d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:a5:c1:0b:cf:cf:3d:0d:d2:10:7e:48:4b:a0:86:2e:76:e9:
98:1e:34:54:f3:b2:38:c9:3f:fb:c4:51:31:e2:64:e9:c5:8d:
37:05:d2:11:15:c0:38:09:a9:e0:39:67:63:29:e3:9d:f2:e7:
ca:fc:b2:a2:55:27:24:e8:6f:7a:9b:1a:ea:47:08:e6:cd:22:
20:0d:be:c0:8a:c3:01:56:db:0d:8f:d0:42:40:36:45:6b:20:
7a:c1:62:e3:4d:37:99:0e:18:b0:2b:3e:fd:26:a5:f7:96:ec:
03:d2:4b:58:0f:29:0c:5d:b9:05:57:e1:b6:6c:12:a6:63:56:
85:cc:38:d1:15:77:9c:c2:26:ea:3d:27:91:b7:0c:c0:ca:8a:
1d:7f:02:7e:f7:f6:77:1e:41:9f:6d:70:2d:86:51:bd:8e:d4:
b0:09:f8:36:fd:a9:b8:92:8f:cf:14:d6:0c:ca:a1:30:f9:e7:
75:34:f3:02:06:51:99:14:86:eb:1f:99:c4:3f:76:a2:11:62:
1d:3f:89:ad:7c:23:c8:61:f2:e8:85:b3:6c:02:a6:df:74:a4:
ec:a8:f1:c1:73:e6:4d:52:1a:35:2e:29:54:fd:8c:24:35:5f:
7e:96:e1:b4:8e:2b:26:b1:67:98:9f:c8:67:1c:2a:04:ce:8a:
c6:63:ec:13
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOunsYfO0NM3PjXQvBk3EpBC7dykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTExMDQwMjUxMDNaFw0yNTEyMDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDMyYzJmZDcwZjU2OWJmNmUxYjE2ZDdkNjJiZGE1NzdhNTViNmVkNDdjMDlj
OGQ4MDYwMzVjOTkyOTVhMGUyOGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJPItAWoygen+icmgMauPJy4KIkAc/c6dCd+vUtaDNUMcc1nogbRlVj4gJ+b
O9m3jEZrOu+Wndu+xj2l51VsBbXVlI+FnsBFQd9TaLBSV9h+6pfFQqDQvpy67g2p
EpmFPM1EfJMESzTtxIHGb4fTHVQGCAi0P+fFuwBTGAmRxzJToahsdVZ4VL1+l75i
G6Inc7YuUwfJLCqkQH7m0qqVLxvSgoVJdthu6rVOvmpdiCg0GNgxbmtkzxjbF9yQ
HhehS5R1SKwv3+SNyfPjnDcp9w+IDCNq+g3DNCFAIjifB7Lm48BkEHVpGpkfEGX3
SYgXSdKAOYQznWtDOoJxuohnaQECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS9auis
NoLj+2dLfnlLwYfjntUMzDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmY0ODE2YzMtMmU1NS00MmQ4LWEyZmEtOGU3YWM3Mzc1ZDBlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HSg
MA0GCSqGSIb3DQEBCwUAA4IBAQArpcELz889DdIQfkhLoIYudumYHjRU87I4yT/7
xFEx4mTpxY03BdIRFcA4CangOWdjKeOd8ufK/LKiVSck6G96mxrqRwjmzSIgDb7A
isMBVtsNj9BCQDZFayB6wWLjTTeZDhiwKz79JqX3luwD0ktYDykMXbkFV+G2bBKm
Y1aFzDjRFXecwibqPSeRtwzAyoodfwJ+9/Z3HkGfbXAthlG9jtSwCfg2/am4ko/P
FNYMyqEw+ed1NPMCBlGZFIbrH5nEP3aiEWIdP4mtfCPIYfLohbNsAqbfdKTsqPHB
c+ZNUho1LilU/YwkNV9+luG0jismsWeYn8hnHCoEzorGY+wT
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:28:31 2025 by rpki-client