Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa
File: a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa (raw, json)
Hash identifier: 9xXK61Bxw1IYGpaH3kPcvmMVIXOcIfepXAYrrxfQJMo=
Subject key identifier: E3:A3:7F:4A:25:D9:97:E0:EB:61:8A:8E:D5:60:E1:94:5B:2D:7A:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5A297D7E0D8EDB4A05C317D078839EE1AB886A92
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa
Signing time: Thu 13 Nov 2025 16:23:07 +0000
ROA not before: Thu 13 Nov 2025 16:23:07 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:29:7d:7e:0d:8e:db:4a:05:c3:17:d0:78:83:9e:e1:ab:88:6a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:23:07 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=33319eb96db5f8d056e656075624261e143e7ffd258e0080bf9d4c1123131214, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:79:07:d4:0b:a9:a5:b6:b1:a0:d9:07:c6:
76:1c:dc:93:17:98:08:ec:31:f2:f3:f6:00:6e:1b:
ca:40:ff:41:9e:0e:05:f5:01:64:3c:d6:ce:4c:02:
49:31:a2:70:b2:89:0f:e8:67:e3:8f:ce:b5:fc:78:
45:5d:4e:50:0e:48:33:f4:b2:be:dd:e1:18:5d:d9:
ca:f8:40:3a:9c:e7:dd:da:c8:a7:c3:1c:f1:2f:a0:
21:ed:5a:8f:a4:7e:39:9c:c9:74:a0:af:55:e8:12:
c0:7b:14:70:dd:e0:18:5a:3a:a4:d5:f2:66:fe:e7:
b7:73:aa:8d:ea:b0:44:0b:b0:77:19:57:00:f0:bd:
45:66:99:7c:ca:9f:b5:46:b9:a1:7c:ab:dd:9c:b6:
9a:70:7f:48:7f:fa:9f:83:c6:3a:72:41:4f:87:9b:
d8:46:a1:17:97:99:f8:f7:ac:81:7d:60:d7:61:fa:
48:16:bf:2b:e2:71:db:6a:ab:67:98:bc:6c:d3:50:
bd:7d:b1:ec:06:89:be:b3:07:a6:0b:fd:9f:5c:1c:
7d:f1:e5:25:3c:67:3b:dd:12:65:55:17:32:36:b6:
d6:64:1c:17:2a:b4:ea:78:93:93:50:1a:c7:96:3d:
f6:49:cd:35:56:3a:20:9f:03:ef:99:7c:bc:37:a3:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:7F:4A:25:D9:97:E0:EB:61:8A:8E:D5:60:E1:94:5B:2D:7A:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2a38309-dc8f-4fea-abcb-43fd0ba79d30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.128.0/22
Signature Algorithm: sha256WithRSAEncryption
19:2a:f5:17:ce:4f:b7:e5:d0:1e:55:c9:89:e9:45:01:0a:67:
c4:b9:f8:fc:43:af:64:28:02:07:91:d9:3d:e1:58:c7:e0:de:
aa:89:24:e8:8f:1b:e9:b5:b0:00:5a:e6:26:c0:0c:cc:77:0d:
00:0d:f3:0d:27:b8:c3:21:3f:4e:c7:66:4b:5e:26:06:c4:ae:
c4:10:6e:70:37:dc:55:b3:4c:19:62:ca:04:a3:43:67:b0:e4:
97:6a:b3:cf:18:4a:91:21:05:7e:df:4c:5f:76:fd:68:bd:15:
94:cd:89:b9:a4:3c:49:4e:cf:27:f6:58:4f:af:63:4b:a4:82:
5d:f0:2f:9e:80:32:a2:11:53:22:19:4b:39:f8:24:5d:68:d4:
c4:84:05:1a:e9:a8:de:18:bc:8c:47:a5:8e:cd:a5:03:95:f8:
59:9c:19:bc:86:cb:ec:36:fe:c1:af:2d:52:35:ed:a8:39:43:
a9:82:cc:d2:54:38:d1:93:be:d4:f9:24:a1:54:fb:aa:0c:98:
3c:07:50:11:3b:11:20:3e:97:ce:cf:c7:01:47:df:41:28:82:
51:f2:4b:fc:92:86:2a:53:39:b9:8d:49:c8:7d:52:49:37:a1:
67:ed:21:25:ba:e6:23:d5:eb:16:9c:b9:b5:ee:cf:ea:5c:eb:
8c:fa:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:46:14 2025 by rpki-client