Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
File: e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa (raw, json)
Hash identifier: svnSI0ljcHoFajWM/T9J+zccCRorcg9EZAjNTtWmytI=
Subject key identifier: 1A:77:27:02:BD:A5:86:09:CD:F7:72:BB:6F:49:05:E4:56:C8:06:AD
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3E0891F770C655DE2FD5F9DA93B4DC55C76CD9BA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
Signing time: Thu 13 Nov 2025 16:37:47 +0000
ROA not before: Thu 13 Nov 2025 16:37:47 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.224.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:08:91:f7:70:c6:55:de:2f:d5:f9:da:93:b4:dc:55:c7:6c:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 13 16:37:47 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=9195b1bf3250acb3ac6b3d7c79a9b33274b1518d630e7c36ab5ed31cbb336c73, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:b5:54:af:4d:0c:00:ac:8e:93:b1:d1:42:
1b:d0:f2:84:6d:88:23:df:39:32:d6:f9:ab:30:aa:
82:00:a7:d7:61:f3:21:63:69:f9:32:b0:52:00:4a:
a2:b7:47:55:4e:16:e9:96:0a:95:89:8f:00:80:fb:
4e:85:fa:32:11:67:22:5c:b1:4b:11:9e:7f:b1:28:
42:fe:be:89:5a:89:39:6f:2c:19:09:8a:1b:56:e4:
18:44:73:93:e0:9a:5a:de:a1:68:62:85:dc:bb:b0:
08:b1:9d:81:02:91:f9:d9:8a:12:ed:40:c4:ed:63:
8a:2b:74:94:84:f7:36:25:cb:1d:56:13:a7:7b:ba:
06:0d:0a:22:b2:0b:49:f3:24:2d:cc:7f:bd:ba:62:
0a:23:08:cc:f3:d3:45:14:18:23:7c:3e:06:c7:58:
ed:ef:7d:27:2b:9f:b1:d1:8a:f6:c4:45:cc:0b:2b:
f6:16:d8:ec:30:05:29:1e:92:47:27:15:1f:d7:6a:
5d:74:dc:95:8e:77:c6:50:e8:d7:87:02:c2:1e:73:
0f:2c:71:f2:b3:34:91:81:03:c4:f9:c7:58:34:11:
84:fa:d6:0d:6b:3a:7a:f0:7a:1c:08:33:36:15:c5:
ad:a2:71:57:52:1f:cd:e1:fc:c6:aa:76:a7:ac:e4:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:77:27:02:BD:A5:86:09:CD:F7:72:BB:6F:49:05:E4:56:C8:06:AD
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.224.194.0/23
Signature Algorithm: sha256WithRSAEncryption
64:e2:91:13:35:0c:ac:fa:a4:7a:b9:39:f6:d7:5e:eb:f6:30:
f2:e1:99:95:91:ec:d2:b3:27:65:9f:c7:61:05:97:0b:0a:d1:
e2:08:0c:37:d1:64:de:27:cf:73:0e:88:8f:53:58:fa:11:a4:
2f:d6:71:06:3f:ce:f2:c0:94:8a:c4:de:e9:45:16:8e:9c:fd:
8a:9d:6d:73:49:3e:96:b1:59:46:7d:2e:ad:0d:6a:2c:c4:e4:
2b:b1:73:cf:bb:df:a7:db:62:ef:aa:ef:67:45:a2:c7:78:c0:
97:8e:a1:1d:38:d0:94:5d:24:78:1c:c8:a6:14:75:1a:c5:f4:
7e:c4:13:b9:63:07:e5:a0:8e:e7:e3:5a:4a:db:ca:19:b0:1e:
29:38:62:3c:96:59:2b:c1:56:d1:5c:ab:a2:93:9e:c2:50:f2:
a6:3a:0d:6d:6a:3d:4d:8b:a7:85:69:f7:87:5c:fa:04:1d:22:
9e:d0:f3:4f:df:02:ab:40:7a:80:d3:3f:eb:31:e7:0f:b5:6e:
dc:00:73:8b:c9:38:d0:15:f6:86:5a:20:c6:bb:75:13:1a:48:
c4:2b:db:1e:4b:57:5c:8a:3f:78:ef:ab:9b:29:70:0b:12:cd:
e1:ce:b5:a2:97:6e:f0:f4:d4:9d:08:0d:81:de:03:04:20:08:
57:93:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:46:07 2025 by rpki-client