Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
File: 1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa (raw, json)
Hash identifier: CzlfxtRsxrh/s/iuD56zlNGaLE1k9syaEI6dIeBG0GM=
Subject key identifier: 1D:01:A7:FE:4A:B7:0D:8D:98:73:42:05:3A:3F:19:39:74:0C:E5:68
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1C4C76940B56644D346A7C7EF012124915EF0395
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
Signing time: Fri 07 Nov 2025 20:23:10 +0000
ROA not before: Fri 07 Nov 2025 20:23:10 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4c:76:94:0b:56:64:4d:34:6a:7c:7e:f0:12:12:49:15:ef:03:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:23:10 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=fa86ca96e94ba0485e4d5bdc8c86817981d1584b36bde759970f30df7d963452, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:5b:53:cc:5f:8d:b3:06:dc:fd:29:f3:98:
c1:9f:da:60:17:ce:68:f7:34:0e:d4:6e:91:fa:2d:
5e:08:e1:6e:52:80:6f:a3:8b:f3:b7:2e:12:59:d7:
f7:ac:8a:7d:ea:e6:b0:73:ee:8d:63:5d:47:5e:f6:
04:2f:af:89:28:c4:92:c4:6c:33:26:8a:c3:ea:eb:
84:47:e6:f5:cd:80:ab:70:ed:e6:8c:46:61:c4:0a:
8e:98:b1:7c:56:2f:81:07:6a:a8:54:7e:f7:14:79:
ce:ab:43:f9:18:15:a1:95:73:9d:d2:ee:1b:26:53:
14:72:0c:ff:d1:7f:77:3e:6c:77:11:46:56:2a:6c:
4d:42:61:61:76:87:cf:ff:1e:8e:7b:65:4c:43:fc:
21:3e:f2:93:cd:82:20:23:db:9d:aa:1c:51:68:0b:
c3:39:eb:24:2e:31:b0:45:10:b4:dc:a9:14:36:b5:
9f:f1:7a:2b:d3:5a:16:47:91:6d:07:de:34:13:3f:
13:ed:4a:d4:4f:48:75:d2:45:1a:58:44:c4:38:7d:
a4:99:71:91:6b:56:78:13:66:f9:da:cc:69:fb:ce:
a8:8d:f3:df:2d:fe:05:8a:28:85:1a:d9:45:c4:41:
fe:7f:c5:fe:e0:3f:01:a2:36:89:28:c3:6a:fb:7d:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:A7:FE:4A:B7:0D:8D:98:73:42:05:3A:3F:19:39:74:0C:E5:68
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:8::/47
Signature Algorithm: sha256WithRSAEncryption
40:d9:15:17:cf:db:0d:0c:92:40:35:af:03:5e:3c:4e:c4:de:
fb:58:83:9b:90:68:5b:ed:68:82:71:9e:78:b2:01:39:2c:13:
c8:d0:e7:7b:c5:7c:93:d6:fb:c2:88:b6:61:e2:4c:24:7f:a9:
2f:33:10:26:4d:b3:e5:5a:83:9a:6d:c7:94:85:cf:9f:44:63:
ac:c7:56:41:ec:82:c3:3f:0a:e0:a1:9d:d9:07:0a:5d:b1:92:
64:c2:19:d6:2c:7a:81:35:fa:82:0f:04:8b:47:f7:74:7f:b0:
5f:59:61:b7:93:dd:74:e5:33:1e:28:72:2f:eb:dd:95:fd:6b:
2e:3b:ca:e1:81:bc:74:6c:b8:34:af:9d:23:c7:58:41:fd:9b:
a6:97:70:3b:63:ce:68:d3:13:74:84:17:77:dc:e6:cc:23:e8:
93:b5:b9:dc:6d:d2:31:f8:57:2a:9d:38:dd:7f:76:65:03:dc:
a6:2d:82:1c:a1:6c:de:16:85:02:5b:cd:ed:9b:80:ec:47:39:
f1:04:30:51:be:1d:ad:6f:1e:ec:de:b3:e0:d2:4a:fa:d2:84:
88:20:5b:a8:51:f7:95:4a:64:4d:0f:37:3a:17:a6:9c:53:5e:
69:48:05:c6:67:16:7e:20:0b:e2:c7:ca:be:c7:d9:00:fc:7a:
37:18:bb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:05 2025 by rpki-client