Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa
File: 03927569-0b5c-4807-96ea-c0c7c45fd675.roa (raw, json)
Hash identifier: XFAFHKpYFZlboLALSQF7lH30OWYiU10S20xDWI92rqU=
Subject key identifier: E3:D9:F1:36:45:B2:9D:07:9B:12:BC:9C:79:E7:A6:98:DA:DF:DF:27
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 696CC112A1FA5545787410D21D87D15CB74EA424
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa
Signing time: Tue 11 Nov 2025 21:23:04 +0000
ROA not before: Tue 11 Nov 2025 21:23:04 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6c:c1:12:a1:fa:55:45:78:74:10:d2:1d:87:d1:5c:b7:4e:a4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 11 21:23:04 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=6c75ae2aab5f5aa93ebba0de590b878b6f6812fc2d10f531ca43411b7f9ea4a9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:c5:31:12:04:79:04:9b:40:54:02:94:f8:
df:41:2d:2b:a4:3f:3e:6d:1a:ec:3d:4f:90:66:1b:
6a:2b:64:4a:fc:b2:f4:38:c6:6a:73:cb:79:6e:99:
2f:77:86:d5:0b:53:87:10:70:30:bb:e8:52:43:c1:
a4:db:17:c8:3d:46:06:c2:3a:00:27:ee:6c:1a:86:
99:a8:cb:a7:6d:52:60:ce:d0:cf:83:9e:cb:f6:9d:
c8:b7:29:d5:e8:c9:6f:82:1a:a0:7f:41:ec:59:7e:
7d:25:04:c3:57:07:82:94:5a:85:cc:44:74:46:df:
dc:e7:10:6e:7f:51:a7:e3:20:47:6c:a0:05:69:9b:
51:82:51:2b:4d:79:8e:10:7f:c3:09:93:4e:54:ca:
a0:f3:1c:de:bf:c1:3f:dc:18:85:4f:34:80:35:89:
ba:8b:38:07:d0:e0:bf:4f:c9:9f:45:91:e6:c6:55:
c6:d6:7c:01:a6:0c:92:dc:88:aa:30:d3:0c:95:00:
75:6f:b5:04:c3:f1:53:64:75:98:9d:07:6d:b1:12:
2b:f4:3c:92:6f:e6:cd:b4:64:ae:f4:a1:21:e9:f4:
26:c4:86:c4:69:cc:c9:6b:20:9c:9e:8a:49:6e:29:
df:2a:a5:ef:69:4d:17:70:b3:82:94:fa:0b:5f:0c:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:F1:36:45:B2:9D:07:9B:12:BC:9C:79:E7:A6:98:DA:DF:DF:27
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2::/32
Signature Algorithm: sha256WithRSAEncryption
12:2a:98:02:94:d0:42:41:bf:f1:95:33:72:70:7f:64:e6:28:
af:d2:d9:45:1b:af:a1:14:96:b3:b8:89:c5:35:d3:4b:63:44:
03:64:69:a3:58:db:e6:2f:96:72:b6:91:a4:08:ad:1e:e7:d8:
9c:2b:df:ce:d9:1a:44:a5:7b:bb:2f:22:bd:90:79:fe:d6:ef:
2f:1d:ff:2c:a8:96:18:e0:7d:07:54:bc:b8:d7:4f:e4:3a:e5:
5a:17:82:4e:92:f4:f9:37:84:9c:87:74:5d:15:69:be:f1:cf:
be:22:7d:71:b6:36:8e:f3:6a:fc:c9:db:b9:4a:73:fe:81:96:
fe:a7:58:02:d8:d0:9f:9b:ab:9d:10:90:ca:e4:61:52:6c:d6:
cc:9b:03:6a:66:a3:07:ac:6b:ae:0c:64:9f:7c:f9:bf:28:75:
06:6b:64:28:de:df:68:61:a0:c1:ae:99:d0:86:ab:dd:36:2e:
64:e9:bb:69:d0:d6:a4:38:b6:c9:57:6f:7d:51:ec:14:c0:18:
d2:c2:f7:87:96:f1:d6:37:b1:ce:ea:6a:04:70:01:d8:7e:ce:
86:a3:ba:a0:3f:5e:41:1b:ad:3a:89:4d:67:56:b9:b4:ff:d6:
42:e4:83:c1:43:d5:3f:ff:42:1b:93:42:4a:36:1a:fa:10:f4:
8f:ed:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:47:13 2025 by rpki-client