Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
File: aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa (raw, json)
Hash identifier: vyZxnDkN8m5gsOyvvwJnKiF7TuwJdnJ1xUGaOIvslh8=
Subject key identifier: 6E:9E:78:59:B0:A1:85:C2:75:26:9E:F7:19:42:74:B4:91:B2:F3:05
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 156796C9E75C58E1A5511D977C3896C09E96E050
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
Signing time: Thu 13 Nov 2025 16:37:46 +0000
ROA not before: Thu 13 Nov 2025 16:37:46 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:67:96:c9:e7:5c:58:e1:a5:51:1d:97:7c:38:96:c0:9e:96:e0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:37:46 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=8f6d23cf9194c9df5e2dd53b6aa36f93540f1ad75a5ca74920f613b7b869f93f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:ba:55:18:97:30:c2:6c:dd:65:fe:2e:dc:
36:f5:5e:ff:24:6d:3d:89:f2:fa:d1:4e:92:37:4a:
c0:f6:66:21:8d:da:52:94:f5:ea:5a:20:bb:f0:0f:
a7:d5:a5:13:54:cd:1d:ec:c1:24:1b:2d:85:fd:66:
1c:08:f0:2d:21:2d:e8:04:05:9c:56:45:c1:5a:ac:
ea:67:23:11:67:0f:5c:cb:c2:26:df:5e:3b:b6:22:
10:d2:cb:0c:bf:af:44:db:c7:58:a4:23:b2:b9:74:
ab:4b:aa:00:f3:bf:9c:64:7b:f4:0c:d0:12:bf:8e:
4c:3f:d5:bc:c6:4e:c2:c3:73:82:df:de:3c:99:cb:
8e:bc:f2:5b:77:e8:15:7a:ac:ce:f9:41:5d:9a:35:
1d:f3:92:63:b0:c6:f0:50:9b:9c:20:ca:2a:84:1b:
aa:56:ca:d7:73:a3:8a:d5:e9:f0:97:17:27:b1:d6:
ee:3a:19:54:11:f2:ed:0f:11:c3:38:37:ed:cb:ad:
88:84:ac:06:f8:5e:c2:10:84:77:45:36:5b:b6:e7:
7e:46:89:22:bb:df:f0:72:2d:3b:ad:9a:38:5c:c0:
1b:d8:9d:89:5f:78:68:ab:ba:2a:c0:59:d5:bf:1a:
ba:91:ad:e8:ce:92:4a:00:cb:e1:d9:0a:2d:ce:0c:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:78:59:B0:A1:85:C2:75:26:9E:F7:19:42:74:B4:91:B2:F3:05
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.188.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:ed:7b:db:e9:ba:42:d7:79:d6:d5:2e:a3:4c:69:f5:c6:79:
8d:40:de:92:10:c7:ff:44:e2:ac:f9:e7:e9:0c:54:b0:f7:e0:
6c:1e:1b:37:eb:17:94:8d:a1:98:8d:2a:01:5c:d3:13:a6:bf:
1d:00:e3:85:43:12:77:7e:27:5b:ba:d6:e1:24:37:e0:80:0f:
df:9b:8e:6d:b5:65:27:b7:94:df:27:19:94:16:7f:cf:bf:34:
a5:db:78:d3:8a:f0:e7:ec:1a:34:fe:fc:d8:3c:09:e6:e3:97:
77:d3:cb:2f:c9:f1:d6:c9:81:96:cb:1e:94:82:60:e6:53:41:
17:f8:54:99:e5:a2:37:2b:f0:01:c8:a8:a4:93:22:d0:ea:31:
99:e2:78:59:f9:ed:48:77:eb:13:8f:b7:e0:91:75:16:78:b0:
84:01:76:75:2c:15:3b:51:d0:d6:05:5e:f7:41:5d:44:3a:15:
65:ac:50:d8:24:92:b8:23:32:9d:0a:11:7f:72:ab:68:e7:53:
f5:22:ae:b5:73:96:bb:27:a8:34:1e:80:f6:70:0a:8e:4b:35:
02:68:da:f5:c1:13:81:83:df:39:53:53:04:c5:18:a5:ca:06:
12:14:ee:a5:0d:1c:f0:23:e0:b7:58:a4:0b:2e:3d:9f:9d:33:
95:b6:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:59:12 2025 by rpki-client