Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
File: e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa (raw, json)
Hash identifier: Ly4Pve/dxLKRsvb5BS/s+E2HrkS3y9swMELfUVmGqyk=
Subject key identifier: FD:CE:96:0E:E2:A1:37:4A:72:9D:5A:A0:8E:B1:17:9C:E5:AD:5F:D6
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 731E349DE0EC98D1A36AA4F15EEE453324985AAB
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
Signing time: Sat 15 Nov 2025 06:50:12 +0000
ROA not before: Sat 15 Nov 2025 06:50:12 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 57.101.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1e:34:9d:e0:ec:98:d1:a3:6a:a4:f1:5e:ee:45:33:24:98:5a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Nov 15 06:50:12 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=b10f63ff0f6d791d96133660b9fc6a925ecf4dd3f80518fd71f2b966eb9cf05d, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:6a:95:92:6d:5f:29:20:db:d6:9e:41:cc:
67:1a:3b:b6:90:d5:75:74:fa:ac:68:a7:2a:77:da:
91:cf:a2:f9:8e:28:46:e4:2a:1a:94:8a:bf:60:0b:
8b:8f:78:64:01:82:1b:49:0b:0d:df:c7:6c:d8:86:
1b:d5:ac:85:11:4c:5c:82:27:86:e5:c6:6c:17:c3:
09:6c:c5:3c:97:25:b5:98:31:13:df:9a:9b:e1:dc:
48:10:64:9f:99:03:90:ef:65:de:e6:71:2d:3c:de:
7f:26:b6:98:68:38:59:66:aa:94:8d:fc:82:40:42:
49:a9:c5:cb:bc:a1:2d:40:eb:b7:3b:50:9a:c6:5f:
f3:6d:db:fa:20:72:26:97:ea:e3:6a:56:21:a5:b9:
c8:ec:fe:e2:eb:0b:09:70:ce:11:fa:c7:47:9c:5e:
1f:38:59:db:29:32:13:6c:cb:2c:a5:b2:74:5a:b0:
8f:e2:48:8d:49:66:73:a3:8f:bc:bd:27:c2:47:36:
5c:77:ac:4e:28:59:3c:1d:17:d9:da:c4:db:f8:c7:
43:b2:4c:28:be:28:40:aa:a4:d0:cf:15:7e:e2:f2:
c2:df:36:09:3e:6b:b3:a3:5a:6c:0a:2f:27:4c:da:
19:39:00:6a:82:8b:0d:98:ef:29:c4:c6:27:43:f7:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:96:0E:E2:A1:37:4A:72:9D:5A:A0:8E:B1:17:9C:E5:AD:5F:D6
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e7ebe29c-b29a-41b9-8205-cf9e03925e93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:e5:47:90:38:34:87:08:3d:b8:65:ba:05:e2:3a:f2:d7:65:
95:c5:bc:6a:e7:7f:6e:8e:15:f2:f8:00:9b:e0:db:23:b7:db:
13:ab:9b:5f:24:b3:76:69:db:50:08:31:a5:3a:d1:1c:e8:66:
bb:d4:25:ba:52:f3:fb:c8:fb:ba:45:70:71:8f:f4:08:e3:9e:
5b:f4:6a:3e:02:3b:59:95:e5:ba:e9:e4:ff:af:6a:af:a9:be:
00:d9:cc:48:aa:66:6c:77:75:62:9c:21:85:53:a8:fe:92:76:
cd:0c:97:8f:03:e0:24:37:30:89:6b:d1:aa:9e:ee:c3:b7:8a:
08:df:50:40:92:e6:76:b2:f1:82:6e:eb:db:44:14:77:ca:33:
06:66:de:1b:0f:a8:fb:eb:81:46:34:e6:ba:f3:35:e6:ff:91:
94:ca:db:ae:ce:c9:dd:6a:a7:3f:43:2b:f3:17:a3:8f:b6:47:
b5:e0:2e:80:21:75:1c:55:eb:5e:07:4b:18:4c:3c:11:75:69:
d4:c1:d0:5e:cf:b8:d2:94:f7:27:16:96:01:4a:cc:a5:f6:36:
a9:29:f5:9e:03:66:d6:31:6b:8b:17:2d:85:8d:8a:30:7a:96:
95:63:41:78:53:f2:54:08:6a:3d:a1:d4:38:45:ed:e2:44:5a:
1b:75:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 19:10:56 2025 by rpki-client