Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/409e157b-4120-4d9a-987d-302a50987746.roa
File: 409e157b-4120-4d9a-987d-302a50987746.roa (raw, json)
Hash identifier: RaCGFB84dzno/AB80zUvsCXJ3zGVNq0hclQGamUQAXE=
Subject key identifier: 62:7D:23:39:53:FA:10:6E:D0:D1:0F:BE:2C:E1:37:51:E0:A2:A9:13
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1CDDCA80B4EDCB577832744959CBD4AFCD345C7A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/409e157b-4120-4d9a-987d-302a50987746.roa
Signing time: Thu 13 Nov 2025 16:23:09 +0000
ROA not before: Thu 13 Nov 2025 16:23:09 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 21:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dd:ca:80:b4:ed:cb:57:78:32:74:49:59:cb:d4:af:cd:34:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:23:09 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=65aefe6564da8facdcc619e5467f084e6af16e8e0185d4b7ea540cc89b3fdc24, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:4f:b4:57:7c:7d:7a:8f:27:82:23:5a:03:
23:b6:98:6a:fa:1c:2a:1b:7c:2d:bb:5b:69:69:d5:
e5:33:3b:20:de:bc:f0:f2:2c:91:96:47:2d:f8:29:
2d:2b:60:8a:74:db:c8:cb:11:c2:4c:11:cb:a1:f3:
3c:4d:96:52:b1:02:cd:ed:f3:15:f7:fc:c7:78:9d:
9e:90:4b:03:8c:bd:65:3e:28:3a:b4:96:e0:39:cb:
0b:97:ce:86:60:bc:f6:28:b5:f4:93:a5:f5:2d:fc:
61:1a:8a:58:ca:cc:50:60:35:94:71:c6:51:c5:3f:
57:18:32:9a:33:b1:a1:91:1a:38:ee:da:97:78:7e:
45:fd:4c:98:3c:49:83:56:f9:5f:a8:18:f7:ca:b6:
c9:fc:b5:f4:d9:b9:41:45:ae:5d:7c:f7:bb:6c:80:
63:81:97:80:0d:b6:33:18:be:49:5c:ee:3e:55:ee:
06:3e:80:33:33:4c:91:14:48:d8:8e:b9:e3:fc:de:
57:63:8d:43:89:0d:4d:19:eb:52:e9:89:92:b4:48:
48:44:20:59:71:2f:ab:54:f9:f5:1b:eb:88:4d:cc:
77:dd:3b:8b:7e:75:18:47:f6:fe:31:78:5e:39:49:
93:25:88:df:f3:0a:3a:74:83:99:5d:06:2c:64:d4:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:23:39:53:FA:10:6E:D0:D1:0F:BE:2C:E1:37:51:E0:A2:A9:13
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/409e157b-4120-4d9a-987d-302a50987746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:28:fe:f8:4d:ca:4b:b0:8d:a3:0b:9f:fc:21:06:c6:ce:97:
7b:99:8f:79:62:05:2d:c2:4a:29:d3:91:a4:14:38:45:7f:22:
fe:ca:6b:1c:03:32:32:d6:72:27:c1:a1:b8:a9:3e:34:2b:2f:
6f:f4:db:b1:27:42:0a:21:63:61:fe:59:2f:b9:26:1b:11:07:
8e:3a:3c:7b:db:52:df:91:a8:c2:4e:96:e0:9f:13:aa:6c:3e:
f0:96:47:3f:16:a5:50:3a:5f:73:57:1e:1b:7c:42:c4:0c:4c:
13:65:77:41:d8:18:b5:33:ff:06:e7:6f:71:e3:c7:c4:c1:b1:
7b:cb:84:ed:23:c7:c2:e6:6b:00:fa:96:79:a9:4e:dd:fa:a6:
e6:82:f7:9a:4c:3b:29:c4:37:d0:6d:79:b3:29:2d:a5:51:ed:
31:49:39:ef:ac:af:d6:52:23:0f:5d:57:ea:6d:2d:52:08:bc:
3b:7d:ce:df:66:7c:90:09:1e:bb:39:f4:c0:24:ae:25:6a:bf:
69:34:30:1e:bf:57:cb:a6:32:05:36:18:76:35:4e:ae:d3:4e:
61:53:70:00:e5:50:95:66:cf:5c:91:dc:87:b1:2d:36:1e:1b:
f8:99:1f:4b:55:69:16:83:43:8d:c0:c4:f6:63:78:00:4d:42:
cb:26:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:39:44 2025 by rpki-client