Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d944ab55-e596-4301-a331-22631b97a422.roa
File: d944ab55-e596-4301-a331-22631b97a422.roa (raw, json)
Hash identifier: VwgXi0esjEAehfwacTLqfmaflFwBJ3Ql6qvbFGdLDoQ=
Subject key identifier: F9:3F:E1:9D:55:0D:D5:9B:8B:70:01:BC:6B:3C:A3:F4:81:B2:61:38
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 120B4AFE5E6FBE08F0E6B22C4B84191E20EA72CE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d944ab55-e596-4301-a331-22631b97a422.roa
Signing time: Thu 13 Nov 2025 16:23:07 +0000
ROA not before: Thu 13 Nov 2025 16:23:07 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0b:4a:fe:5e:6f:be:08:f0:e6:b2:2c:4b:84:19:1e:20:ea:72:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:23:07 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=955eb29c859a64f72569342adc8b1cd7d79f1c1e17124e6777b1a1b633b305be, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:aa:94:55:cf:7c:de:34:fe:8e:1a:f0:6e:
8f:44:57:4b:00:54:ef:08:3a:79:39:62:e9:c2:f4:
ca:cf:c1:60:e3:8d:6f:cc:38:e4:3a:ee:48:5b:0f:
ea:e9:53:9e:b4:b3:a8:c3:ed:22:99:e3:bb:ae:4c:
7b:c9:af:83:14:35:60:7a:0b:57:c5:47:d8:96:49:
2f:7f:ee:4b:92:77:c8:ea:f5:38:2a:3e:c5:b9:5a:
33:e2:a7:d4:e9:6d:f5:ae:a2:01:15:83:ef:63:95:
b0:c6:b8:24:8c:f4:b3:ba:04:0f:d2:2f:35:d8:c3:
13:9a:7f:50:c7:e0:93:4a:78:92:81:26:9b:df:c9:
ae:d1:de:ec:52:bc:92:be:c9:12:47:2c:c0:5f:f5:
67:98:29:64:ac:66:9b:15:2b:db:74:ed:c6:9e:fe:
bd:67:db:4c:8e:0a:67:17:7a:70:eb:52:b2:03:d4:
99:43:d2:d6:b0:8a:72:cf:8f:63:1a:8f:e9:0a:cf:
c8:03:4b:af:09:de:fa:8f:8c:33:22:ff:d1:9f:bb:
e2:e1:3d:81:fb:fb:f8:d7:d8:88:6b:1a:82:23:10:
29:d8:f3:b8:0b:c3:a4:f9:7e:54:e2:c3:72:ce:66:
2c:a8:d4:c6:47:bb:f0:b5:1b:3d:34:24:58:b9:1d:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:E1:9D:55:0D:D5:9B:8B:70:01:BC:6B:3C:A3:F4:81:B2:61:38
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d944ab55-e596-4301-a331-22631b97a422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ae:bc:41:6e:3e:89:d0:52:96:d8:d4:4b:6b:88:0f:8c:e7:
2b:16:13:01:3d:4a:6f:2e:c5:1a:90:22:0e:84:4a:1e:35:58:
a2:fd:1e:ff:0b:56:f0:13:ff:54:d5:d2:4b:56:2d:ae:0d:3a:
5f:a3:a3:9f:16:d8:ac:3b:90:ed:60:fe:9a:64:43:2d:ee:55:
e3:99:70:d3:47:63:67:46:ee:70:c0:f2:1d:b5:58:96:99:ba:
2b:1d:49:72:f2:a8:c6:90:85:24:7d:78:17:6e:25:1b:ca:3c:
1d:7b:a9:3d:26:c5:da:04:1d:6f:50:a2:35:70:c4:63:4c:90:
3a:2e:af:40:5a:f4:b8:e8:10:8f:76:dc:a9:66:a4:e9:1a:2c:
74:9e:48:8a:44:03:95:e1:c3:1e:63:a0:a4:a0:87:f5:26:19:
1c:0e:d7:67:4c:bc:e7:c5:93:81:43:12:1e:e5:2b:31:79:10:
d8:04:99:dd:1a:f7:33:a2:31:6c:aa:08:7e:b4:38:80:d9:1a:
71:a7:87:c8:13:e5:0d:7e:f3:33:89:55:db:5b:22:65:bc:69:
37:00:82:43:7d:02:20:8b:ec:09:70:b6:10:6b:9e:e0:ba:ec:
60:6e:87:64:3f:61:fd:71:30:39:63:b9:4b:ba:a9:47:27:f4:
2d:4e:4c:47
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUEgtK/l5vvgjw5rIsS4QZHiDqcs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNTExMTMxNjIzMDdaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDk1NWViMjljODU5YTY0ZjcyNTY5MzQyYWRjOGIxY2Q3ZDc5ZjFjMWUxNzEy
NGU2Nzc3YjFhMWI2MzNiMzA1YmUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOcOqpRVz3zeNP6OGvBuj0RXSwBU7wg6eTli6cL0ys/BYOONb8w45DruSFsP
6ulTnrSzqMPtIpnju65Me8mvgxQ1YHoLV8VH2JZJL3/uS5J3yOr1OCo+xblaM+Kn
1Olt9a6iARWD72OVsMa4JIz0s7oED9IvNdjDE5p/UMfgk0p4koEmm9/JrtHe7FK8
kr7JEkcswF/1Z5gpZKxmmxUr23Ttxp7+vWfbTI4KZxd6cOtSsgPUmUPS1rCKcs+P
YxqP6QrPyANLrwne+o+MMyL/0Z+74uE9gfv7+NfYiGsagiMQKdjzuAvDpPl+VOLD
cs5mLKjUxke78LUbPTQkWLkdBhkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT5P+Gd
VQ3Vm4twAbxrPKP0gbJhODAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
ZDk0NGFiNTUtZTU5Ni00MzAxLWEzMzEtMjI2MzFiOTdhNDIyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADMA/DAN
BgkqhkiG9w0BAQsFAAOCAQEAn668QW4+idBSltjUS2uID4znKxYTAT1Kby7FGpAi
DoRKHjVYov0e/wtW8BP/VNXSS1Ytrg06X6OjnxbYrDuQ7WD+mmRDLe5V45lw00dj
Z0bucMDyHbVYlpm6Kx1JcvKoxpCFJH14F24lG8o8HXupPSbF2gQdb1CiNXDEY0yQ
Oi6vQFr0uOgQj3bcqWak6RosdJ5IikQDleHDHmOgpKCH9SYZHA7XZ0y858WTgUMS
HuUrMXkQ2ASZ3Rr3M6IxbKoIfrQ4gNkacaeHyBPlDX7zM4lV21siZbxpNwCCQ30C
IIvsCXC2EGue4LrsYG6HZD9h/XEwOWO5S7qpRyf0LU5MRw==
-----END CERTIFICATE-----
Generated at Tue Nov 18 06:47:12 2025 by rpki-client