Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
File: b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa (raw, json)
Hash identifier: x48VpvWJlXK+VRSn2Nu5EDucmWZtPgTnTdMZfAYtrJ4=
Subject key identifier: 49:3B:B9:7A:AB:2F:EB:DC:BD:F1:B6:4E:24:02:28:25:1C:9F:AE:98
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 5BAD0BF964EE76FCE39C42B2A07E7F13673BBB59
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
Signing time: Tue 21 Oct 2025 14:40:38 +0000
ROA not before: Tue 21 Oct 2025 14:40:38 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.85.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ad:0b:f9:64:ee:76:fc:e3:9c:42:b2:a0:7e:7f:13:67:3b:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 21 14:40:38 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=cc5e035427faa7efcb76a479466aeee6de3067f01070bed203d58766b7828931, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:91:af:b3:d9:69:2b:90:4a:75:c4:13:f7:
6f:24:ba:82:f5:ff:2c:6b:8f:ef:ae:e5:9d:59:7e:
2e:0a:ba:4d:ec:ae:3e:fb:b9:6e:bf:ca:38:ab:31:
9a:0d:31:a8:78:51:47:7c:14:95:97:eb:6c:66:0a:
d7:bf:b5:80:5c:a9:ee:07:2b:95:80:37:1d:03:3c:
c9:ef:8c:8c:26:a1:23:60:0d:ea:d5:7f:60:56:26:
d4:cd:e0:37:c7:0f:26:d0:fc:be:1a:bd:8d:59:0e:
c9:f0:cd:87:70:ab:92:b0:ac:7b:73:dc:a9:b4:0d:
a1:77:a7:4f:d6:10:4a:8a:c3:71:ee:2b:95:0c:d4:
19:37:9e:81:8e:15:f7:04:86:ad:2f:13:ed:1e:13:
66:c9:01:64:d2:1f:bf:c0:65:4c:fa:4f:7f:51:de:
b1:8b:39:f8:cf:b2:ca:d3:26:5d:ae:28:28:40:13:
05:ce:8a:32:ec:a7:76:ed:47:ad:41:b1:0a:f9:c4:
f4:fe:59:d0:7b:d2:76:60:80:7d:77:93:09:f5:0f:
9c:11:a0:fd:a0:78:63:40:a4:e2:06:62:78:32:29:
12:b8:70:84:12:ce:45:dd:20:6b:51:d1:8a:1e:df:
87:df:26:55:92:74:ad:40:80:84:f0:f8:67:93:56:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:B9:7A:AB:2F:EB:DC:BD:F1:B6:4E:24:02:28:25:1C:9F:AE:98
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b94c01ab-78c9-4dea-8605-206edf4f4ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:46:e9:ed:96:4a:2e:ba:6c:8a:48:7b:74:47:99:fc:ff:99:
e1:97:32:24:eb:5d:b2:4e:45:f8:36:96:ac:82:ee:50:35:9a:
f4:8e:f4:85:30:63:da:28:61:c8:0e:a7:0b:90:cb:0d:72:86:
12:ef:a2:3b:73:41:9e:14:e5:f4:60:5e:f1:f2:af:46:33:1a:
66:2a:0a:ba:8b:78:6a:2b:01:dd:e5:c6:84:a2:01:0b:7a:b3:
ad:7e:b0:ce:2e:88:23:5e:4d:80:58:8b:b4:88:0d:64:69:73:
52:e3:d4:21:45:89:fb:9b:55:3c:59:a4:0e:04:0c:9d:ab:f0:
cf:93:3e:75:2c:be:37:68:4f:49:ab:68:cc:b8:56:78:10:2a:
a2:3c:d4:db:b0:76:fd:65:5d:ae:25:e9:fd:31:54:b5:80:84:
b3:5c:94:5f:8a:82:b2:09:a6:7f:64:1d:dc:26:4d:a8:22:24:
aa:d5:e2:ab:08:e9:ef:cf:66:5d:c0:39:02:3b:09:9c:f6:8c:
bf:72:4c:53:26:3f:7b:f0:6a:d1:6c:b6:2d:e9:1c:b6:9b:be:
8b:7d:a2:fb:5d:ec:dc:67:08:53:52:52:aa:19:4a:60:df:07:
a6:72:1c:44:60:42:b8:77:01:20:21:12:b7:fc:51:d9:b0:70:
a7:7e:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:03:24 2025 by rpki-client