Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00d32677-2dbe-47e3-a4b3-be1e601729bd.roa
File: 00d32677-2dbe-47e3-a4b3-be1e601729bd.roa (raw, json)
Hash identifier: IixKYAj6OAnX6oHraKqgNgLCTFOZyQiPpGnUjGj4vPA=
Subject key identifier: 80:D4:58:05:04:62:BD:40:0B:2A:23:FA:78:C8:AC:BA:CC:73:FB:2E
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 1DE7F208F84C9B2556E42FD5746FD08641C3741B
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00d32677-2dbe-47e3-a4b3-be1e601729bd.roa
Signing time: Tue 02 Sep 2025 00:40:06 +0000
ROA not before: Tue 02 Sep 2025 00:40:06 +0000
ROA not after: Tue 07 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e7:f2:08:f8:4c:9b:25:56:e4:2f:d5:74:6f:d0:86:41:c3:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 2 00:40:06 2025 GMT
Not After : Oct 7 23:59:59 2025 GMT
Subject: serialNumber=902a5e416badefee455891c9f7c131e3d533f5130f03a248b8755bcf189d3afd, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:05:66:5e:fa:a4:64:b0:d3:8a:84:ed:83:
9e:67:11:d6:3e:ad:1d:ce:66:50:02:62:53:f8:a2:
50:88:30:02:a5:5d:38:e0:d8:3e:1c:c9:dc:3c:86:
9d:6f:38:de:80:8b:81:7c:55:79:40:07:75:dc:47:
fb:4a:3d:a2:b3:41:d7:c9:6e:14:1b:ab:fa:cf:04:
fc:9a:28:95:be:0b:f4:fe:f1:5c:ca:d9:e2:5f:13:
2b:d7:38:0c:f2:7f:9c:e3:01:b0:c2:48:9f:a1:1e:
45:44:70:70:e7:ec:56:36:06:e4:ba:2d:a5:a3:02:
a5:ca:94:2b:a2:81:29:60:3f:b8:ae:bc:70:46:53:
5e:48:96:55:ce:79:38:c9:86:d8:af:62:14:91:ec:
5b:24:11:17:54:66:9d:8f:4c:b6:ea:b3:42:94:ad:
e1:27:36:0c:49:80:af:be:5e:1f:b3:2f:a9:99:7d:
06:ff:80:75:b2:fc:af:d7:8e:2a:32:bb:cd:60:b8:
a1:39:2a:09:be:a4:0c:0b:51:11:e4:7e:26:67:6e:
fc:7a:85:dc:8b:c2:28:7a:88:97:16:44:0f:06:84:
82:95:6b:03:24:53:e4:d8:d0:37:23:83:bf:76:d1:
27:02:c7:3b:35:71:e5:c0:d6:c5:ad:07:3d:0e:0d:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:58:05:04:62:BD:40:0B:2A:23:FA:78:C8:AC:BA:CC:73:FB:2E
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00d32677-2dbe-47e3-a4b3-be1e601729bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9000::/36
Signature Algorithm: sha256WithRSAEncryption
7e:ff:d9:ea:7b:16:bd:83:98:11:9e:ff:cc:20:62:41:41:6e:
c1:de:73:12:60:83:07:f8:79:3a:35:eb:73:ff:f0:74:b6:dc:
fa:f4:be:c2:af:59:e4:98:1c:07:fd:64:db:33:4b:03:e2:1f:
d5:79:97:40:7c:b9:58:ba:c3:7c:b5:dd:67:b0:a2:85:cd:78:
08:4d:04:fb:2d:cc:89:08:31:15:68:b4:8a:d5:b6:46:c6:6f:
08:58:4f:26:8d:60:4a:c9:b3:bf:c6:df:8f:4f:cf:34:6d:5e:
99:bc:60:5d:41:94:aa:f0:95:83:03:e2:1c:cd:59:d9:1b:85:
ac:03:c7:40:d1:8f:a8:73:02:0e:62:47:43:1a:bb:21:8e:91:
66:eb:91:0d:c3:36:34:58:56:d2:ce:97:6a:8d:a4:84:18:75:
27:05:a6:6f:7c:1d:dc:06:84:8e:1a:50:ab:e9:ed:fd:8b:80:
47:35:9a:6b:26:5c:ef:f7:5a:10:d9:ee:2e:f5:ab:b8:fa:20:
94:17:48:bc:aa:44:aa:74:a2:53:a1:86:85:1f:c5:db:be:72:
bf:87:bb:73:8c:0d:92:90:a3:41:c4:dd:32:c5:ca:e7:1d:26:
f6:91:18:e9:73:be:1a:31:cb:4d:21:3c:9d:25:4c:00:cf:18:
79:02:47:ca
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHefyCPhMmyVW5C/VdG/QhkHDdBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTA5MDIwMDQwMDZaFw0yNTEwMDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDkwMmE1ZTQxNmJhZGVmZWU0NTU4OTFjOWY3YzEzMWUzZDUzM2Y1MTMwZjAz
YTI0OGI4NzU1YmNmMTg5ZDNhZmQxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvWBWZe+qRksNOKhO2DnmcR1j6tHc5mUAJiU/iiUIgwAqVdOODYPhzJ3DyG
nW843oCLgXxVeUAHddxH+0o9orNB18luFBur+s8E/Joolb4L9P7xXMrZ4l8TK9c4
DPJ/nOMBsMJIn6EeRURwcOfsVjYG5LotpaMCpcqUK6KBKWA/uK68cEZTXkiWVc55
OMmG2K9iFJHsWyQRF1RmnY9MtuqzQpSt4Sc2DEmAr75eH7MvqZl9Bv+AdbL8r9eO
KjK7zWC4oTkqCb6kDAtREeR+Jmdu/HqF3IvCKHqIlxZEDwaEgpVrAyRT5NjQNyOD
v3bRJwLHOzVx5cDWxa0HPQ4NSW0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSA1FgF
BGK9QAsqI/p4yKy6zHP7LjAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
MDBkMzI2NzctMmRiZS00N2UzLWE0YjMtYmUxZTYwMTcyOWJkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8WQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB+/9nqexa9g5gRnv/MIGJBQW7B3nMSYIMH+Hk6
Netz//B0ttz69L7Cr1nkmBwH/WTbM0sD4h/VeZdAfLlYusN8td1nsKKFzXgITQT7
LcyJCDEVaLSK1bZGxm8IWE8mjWBKybO/xt+PT880bV6ZvGBdQZSq8JWDA+IczVnZ
G4WsA8dA0Y+ocwIOYkdDGrshjpFm65ENwzY0WFbSzpdqjaSEGHUnBaZvfB3cBoSO
GlCr6e39i4BHNZprJlzv91oQ2e4u9au4+iCUF0i8qkSqdKJToYaFH8XbvnK/h7tz
jA2SkKNBxN0yxcrnHSb2kRjpc74aMctNITydJUwAzxh5AkfK
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:52 2025 by rpki-client