Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
File: a833bcbc-91ad-4e89-8666-86ec46002db6.roa (raw, json)
Hash identifier: hbJ7d5fM2JguoyPwWxeBNgTIuv1+HGeKejuIlisT9qs=
Subject key identifier: A0:17:A2:AF:C9:9D:11:7D:9D:F7:A7:44:F8:05:11:B2:0D:93:40:14
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6F9F1D5D1EDBCE2051FA25030EF13DAAE8430325
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
Signing time: Thu 13 Nov 2025 16:23:06 +0000
ROA not before: Thu 13 Nov 2025 16:23:06 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9f:1d:5d:1e:db:ce:20:51:fa:25:03:0e:f1:3d:aa:e8:43:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:23:06 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=55cf8626e7599e4cee248606c01fd372a80e1bc68e73a5d98cced8c84654dafc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:ee:62:37:47:24:46:7a:00:ae:f8:4a:f2:
d4:af:40:f7:fa:45:d3:f9:b6:fe:2a:27:47:14:35:
06:7a:4b:b1:2d:4f:e6:5c:fc:d3:a6:06:ba:3e:ef:
8f:37:39:e9:08:5e:3f:0d:90:7d:5a:ce:6e:01:8a:
6b:5f:16:29:ea:6e:6e:c9:1a:c6:50:53:40:93:b3:
b1:08:4b:a7:55:a0:53:65:49:9a:32:09:97:88:c0:
03:33:ff:a5:e5:3e:1e:04:fd:f0:a4:ec:91:ee:0c:
62:08:d6:22:33:d3:7b:d4:21:7d:9b:c9:1d:1c:ca:
57:6d:84:82:cb:8a:e9:e7:d1:5f:b4:83:6c:4f:fd:
e3:6f:51:29:cc:93:e8:87:82:40:f0:79:81:eb:ca:
ed:77:fe:ea:37:47:01:46:0a:88:a3:78:d2:1f:9b:
19:3c:29:3f:36:db:34:74:61:5b:5e:e6:12:ab:b5:
6f:27:f3:ae:ce:b6:0b:8f:84:7e:3e:8c:cf:58:2c:
7b:46:6d:57:7a:a1:c6:d4:ff:5e:87:ca:5b:93:ad:
6f:89:19:8f:76:1e:8a:ba:08:9d:1e:e6:a2:be:87:
b5:3b:32:ad:81:20:0d:9d:d4:cd:bb:f4:25:ba:f4:
ee:87:a3:92:07:bb:dc:52:7c:73:f1:58:33:8f:d3:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:17:A2:AF:C9:9D:11:7D:9D:F7:A7:44:F8:05:11:B2:0D:93:40:14
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a833bcbc-91ad-4e89-8666-86ec46002db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.142.0/23
Signature Algorithm: sha256WithRSAEncryption
71:fc:3c:c0:7e:59:eb:9d:9e:06:66:99:19:a6:4e:55:ec:ce:
79:e6:9e:27:ee:d0:cf:e0:25:e6:21:0b:97:6b:8f:8a:70:75:
16:cd:cd:b4:5d:1e:39:af:59:44:b5:32:59:a2:5e:54:78:bb:
22:22:57:9b:7f:51:c8:f8:21:72:95:8c:7f:64:33:2b:ae:c7:
67:08:08:2c:04:e4:3b:a7:76:ac:93:45:cc:a4:82:a3:46:38:
3e:a9:1e:c0:e4:87:3c:95:b1:ec:ad:7a:96:85:44:2e:8c:dc:
b6:42:7a:95:27:ed:b6:64:5e:e0:9b:56:60:63:17:d6:ae:61:
57:48:fe:86:4c:90:6b:2c:d0:31:37:20:96:06:6b:ef:22:86:
4d:91:0d:f4:9c:c9:a5:65:9e:91:80:88:5b:f2:c1:32:5c:43:
eb:14:49:8e:01:ca:21:4f:ef:51:03:05:06:12:94:cd:9e:b1:
1d:a4:d4:4a:cd:a8:87:27:eb:90:22:df:44:55:1d:2e:62:d9:
8c:a8:fb:5f:af:ed:d3:e8:e1:b5:31:9d:49:83:33:9b:b5:6e:
ae:9a:21:0b:ea:0d:83:9f:f1:47:62:1d:15:8f:c0:b8:28:a0:
9f:09:43:ef:fe:a6:89:83:59:31:53:cf:88:85:2d:c9:1a:b0:
03:12:04:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:25:53 2025 by rpki-client