Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98c39c27-f261-4d67-a85e-ec7479538084.roa
File: 98c39c27-f261-4d67-a85e-ec7479538084.roa (raw, json)
Hash identifier: 6VeF4HPpkgeKWl+wSjei7WtMXLS4aiTEa4m/s0FZXVo=
Subject key identifier: F9:A2:BE:67:E8:BF:E6:BD:D8:DC:38:14:30:A0:73:29:33:09:EC:CC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 69FE00BBA38C540DA01D5C3836F23FF8F0627BBE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98c39c27-f261-4d67-a85e-ec7479538084.roa
Signing time: Thu 13 Nov 2025 16:23:06 +0000
ROA not before: Thu 13 Nov 2025 16:23:06 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:fe:00:bb:a3:8c:54:0d:a0:1d:5c:38:36:f2:3f:f8:f0:62:7b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:23:06 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=f960112199202c7e60120325315980edc5f49fcc17e21e7fd3616372cce8061c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:27:63:b5:02:53:76:9e:25:f3:1c:bc:44:
51:a0:c3:5a:04:2b:b2:86:5c:ed:b5:37:83:13:1b:
f4:83:69:55:ea:b6:42:bb:24:a3:32:29:d4:24:17:
fe:9f:58:fb:35:f1:40:b6:62:fb:f7:8e:ed:a5:dd:
f9:e1:35:ea:03:5e:cb:a5:45:c5:21:a3:4b:64:65:
97:bf:24:be:e4:c4:6b:05:cd:fd:d6:de:7a:8a:1a:
1e:0e:52:60:16:81:b9:4c:47:62:62:a2:8e:8e:d5:
bc:d5:a0:27:8b:4b:7b:1e:1b:80:0b:6d:6d:df:ee:
96:c4:16:a8:67:51:26:a5:cb:92:b3:fb:04:76:9f:
82:c8:19:5a:5b:db:a6:60:ff:fb:f6:6f:ee:a5:d2:
0c:0c:39:ca:06:5d:b3:04:ff:dd:a4:5e:a9:db:ef:
84:01:4e:54:99:82:33:3d:f0:f4:67:1c:18:1a:15:
d1:1a:e1:b6:07:e9:05:63:1c:ae:c9:7e:8c:a4:55:
16:81:9f:b2:2d:66:dc:b8:7e:6b:bd:32:f2:5d:de:
e4:28:cf:a7:76:c4:86:c5:24:2b:59:8e:37:c6:b3:
1c:03:9c:89:b9:ea:0c:96:48:b3:bd:81:42:4a:e8:
13:bc:37:e2:fc:55:4f:bc:60:c3:6b:14:1d:89:d7:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A2:BE:67:E8:BF:E6:BD:D8:DC:38:14:30:A0:73:29:33:09:EC:CC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98c39c27-f261-4d67-a85e-ec7479538084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:eb:84:a0:f5:c3:4c:7a:09:1d:4a:90:1d:d1:ca:5d:ce:5e:
c7:e1:0b:34:bf:21:f4:85:8a:2e:4d:30:8b:30:22:e7:95:9b:
4e:bc:9f:40:2a:7f:74:8a:e5:76:78:02:dc:c6:61:2f:a6:75:
17:b1:17:39:f5:18:71:f8:db:e3:da:e0:dd:0e:6f:ee:5d:9e:
4c:14:d7:b1:f3:61:90:36:f1:31:79:d0:f1:de:26:e8:0e:82:
8a:81:47:ec:31:89:23:2a:78:28:29:75:9b:4c:97:87:5c:18:
95:6a:2c:41:8b:24:33:3c:aa:5b:3b:d2:94:83:65:10:64:ac:
fa:41:a3:6f:9d:ba:df:3f:ee:b3:71:de:e3:a3:03:79:c7:84:
55:6f:e8:de:6f:17:c4:40:6f:f5:4c:64:a8:c7:c5:95:68:6f:
76:5f:ec:52:90:19:6e:14:15:79:80:4e:95:5d:37:96:4b:da:
0b:48:85:02:10:03:87:00:04:4c:0e:9e:03:35:fe:77:58:ee:
f1:e9:4a:6a:23:5b:fd:a3:74:17:fc:32:7e:cf:83:bc:ce:2d:
3f:32:c8:c9:df:41:0f:e7:47:1f:86:80:c5:c5:ad:63:01:9c:
fd:7c:20:c6:db:6a:9f:2c:77:82:c2:e2:6b:8f:de:82:2d:e0:
61:77:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:47:49 2025 by rpki-client