Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: FAwGrcqE4P+ZycEZTsKbOOZrS67K6U1xrsEG+XLpZms=
Subject key identifier: A2:64:E2:69:91:86:44:7F:99:A2:94:DC:0C:44:52:65:CF:02:68:1A
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 0A33A5482AEA8146BC69C3577425757C8A11CAE3
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Sat 15 Nov 2025 06:40:32 +0000
ROA not before: Sat 15 Nov 2025 06:40:32 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:33:a5:48:2a:ea:81:46:bc:69:c3:57:74:25:75:7c:8a:11:ca:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 15 06:40:32 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=bd0d9eaabb8b6767b9d83ffc60e3a717e2b5c374eb610b6dfccea2233a38dae6, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:61:0c:3f:4e:9d:f1:75:9d:f3:7e:d1:c7:
49:bb:3f:40:80:89:b3:9f:28:e8:40:bd:e4:69:7f:
67:8e:40:24:ea:b9:99:06:b5:6f:03:d4:73:79:29:
2e:88:5b:5d:e7:82:ab:17:35:6d:c6:d7:43:b5:f1:
e3:9b:ca:31:ae:90:c4:bc:3e:0b:74:78:25:98:a6:
67:f7:a6:0e:db:78:07:46:46:a1:03:70:3c:48:58:
38:8c:38:53:f9:4d:33:fb:5d:65:6f:08:a7:ce:f6:
d1:9f:7b:f9:61:92:f9:fc:1d:e8:58:6f:7f:74:7a:
17:9d:42:3a:31:08:87:dd:60:62:de:e0:29:16:58:
20:ee:76:b8:4e:78:a3:8f:b1:ba:34:07:37:07:38:
64:03:20:47:9a:a0:8e:17:ec:d5:e0:9a:dd:f5:64:
5e:f2:97:f6:10:37:03:6a:27:fe:01:b6:3d:9f:8e:
a0:d8:5e:bb:4c:1d:4f:de:55:d8:6c:f4:0b:d1:8f:
cc:b2:20:d1:2f:69:9f:07:59:4c:37:62:92:dd:54:
95:7f:b9:78:14:a9:a3:26:81:9f:44:d2:cc:3d:b5:
f3:b6:b7:d0:51:ca:ef:ea:e3:c9:7e:6d:65:3e:69:
23:f5:7c:58:1f:72:71:24:74:fb:1f:1e:64:9e:c2:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:64:E2:69:91:86:44:7F:99:A2:94:DC:0C:44:52:65:CF:02:68:1A
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:84:2d:d8:95:0f:43:4c:15:7d:f4:2b:c2:d5:fc:b3:19:01:
8a:66:94:f1:ef:7c:36:1d:b7:80:70:8b:10:cf:c5:c4:86:5b:
3d:3b:27:e5:3e:f4:cc:bb:0b:be:2c:bb:47:f2:23:2a:0d:35:
d8:15:c4:69:84:35:d0:c9:a4:ae:23:7a:94:10:5c:d8:77:d9:
27:9f:be:5c:98:25:a5:7e:dc:49:ae:12:90:46:75:5e:47:6d:
a3:82:1a:44:6a:90:4f:b1:6b:df:74:c8:cd:34:60:3a:79:a7:
a5:31:08:15:a9:a6:9e:bc:76:ae:5f:7b:68:30:c7:44:3a:99:
d2:e3:ec:a1:d3:8a:a4:41:9d:c0:d3:62:1b:79:9e:31:be:39:
39:89:53:e5:b6:21:d3:24:8a:e6:97:78:64:d9:a5:94:88:f0:
d1:b2:66:e4:75:7e:62:76:ba:1d:97:b8:6b:d2:b2:67:8c:6a:
7b:40:5d:e7:fe:0b:cd:ad:1c:5b:82:11:36:98:a2:f2:3e:cc:
b2:f2:52:e7:10:d7:bf:8e:66:7a:da:d1:ac:05:36:a6:c3:60:
b8:c2:51:c6:5d:b4:07:53:bc:db:29:1c:0a:46:1f:9e:50:9b:
32:cd:57:0c:51:2c:d7:ba:14:81:31:2f:5e:cf:0f:ec:27:af:
c9:82:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 02:02:14 2025 by rpki-client