Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
File: 3ad06e7c-7473-4104-a394-28daf30bc72f.roa (raw, json)
Hash identifier: xQOSLCe/u9FSYpK2MC5XrMPyXu2zGZyVcQpZZd8Yk7U=
Subject key identifier: 18:DC:A0:8C:EC:BB:EF:3E:AE:24:FE:1D:34:E6:0F:C3:71:60:03:4E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6A2C65E16A954BF43EE5D2FEBF2C868C13786DA3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
Signing time: Fri 07 Nov 2025 20:36:53 +0000
ROA not before: Fri 07 Nov 2025 20:36:53 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:2c:65:e1:6a:95:4b:f4:3e:e5:d2:fe:bf:2c:86:8c:13:78:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:36:53 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=889de8ad507a0d8ce00f6b4e3798dfbdc2db09f6295564692cb20e60eeb6acee, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:b9:db:6d:ac:4e:b5:20:6d:a9:f9:dc:02:
fe:12:33:d1:7c:ba:fd:a8:1f:4a:fc:b2:c8:81:f0:
48:62:c2:59:44:1b:25:5e:f4:9c:d9:98:dd:8f:7e:
9d:c0:58:ad:2f:4c:ce:43:16:6e:70:36:a7:d8:28:
0e:0a:d8:62:a3:b9:92:26:1a:76:fd:a2:36:2b:e3:
85:23:9b:eb:d2:89:33:02:94:d4:ae:31:2c:66:6c:
c5:a2:46:57:89:c0:e2:84:3d:15:89:d2:c4:86:47:
a3:7d:2c:b6:b8:8b:de:df:f9:bc:05:af:36:04:a6:
10:c5:3c:a7:3d:7c:e3:ad:1e:4b:65:8d:1f:54:f2:
21:5b:8e:c2:5c:be:ae:12:a2:15:7e:e1:c8:98:c4:
51:35:08:93:2f:fd:02:df:bc:2e:c1:cf:34:2e:fc:
f7:7e:8b:98:7c:38:1f:66:71:b7:eb:e1:18:d5:3a:
d8:ad:1d:63:75:5e:d2:ee:00:2f:b8:a9:18:40:8e:
5f:13:57:6d:d2:96:dc:72:8b:b6:5f:d3:e0:40:4a:
6f:b7:e7:86:fe:b9:ef:0b:2f:8c:ec:45:70:2f:51:
71:2f:1c:33:f5:35:4a:8a:93:2e:91:e1:df:b2:ea:
54:b3:b4:98:b8:b0:e8:4a:54:e4:84:7b:2a:52:58:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DC:A0:8C:EC:BB:EF:3E:AE:24:FE:1D:34:E6:0F:C3:71:60:03:4E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5800::/40
Signature Algorithm: sha256WithRSAEncryption
a7:e8:b7:79:be:e7:e5:ad:87:c7:d0:09:9f:7f:af:9d:9f:85:
7a:3f:6b:18:28:5c:22:e5:75:72:b7:13:3b:0a:40:72:d5:e1:
42:06:5c:fa:57:4c:17:5a:7c:06:d6:3d:d5:ce:d0:13:83:e0:
ff:ce:2c:5a:86:2e:bd:33:f9:0c:43:0e:15:5f:50:96:41:6e:
33:3c:05:36:20:71:03:22:e0:3c:46:fd:0c:d5:31:0d:7a:28:
0a:1f:97:11:87:6d:38:a7:1e:a3:a2:34:92:9b:8a:ff:db:d1:
00:fa:49:18:c0:20:26:f5:63:b5:24:22:68:3d:e7:b6:56:0c:
b2:cd:40:0f:df:c5:8d:4d:66:ea:10:2b:8a:c6:98:c3:58:5f:
b6:75:46:03:a9:d4:a1:1d:27:f2:a8:ca:e8:cb:cc:5e:10:a0:
ff:ee:46:d3:9d:e4:fe:fa:77:df:a0:5f:b3:9a:a9:b1:e4:68:
05:4f:a2:cc:11:ec:08:b1:8c:56:6b:40:b6:e9:10:c4:75:d6:
5f:a0:3c:3b:c6:dd:28:bd:1a:ab:d7:43:50:a8:4e:82:f3:e0:
ce:de:af:e7:a5:6b:7f:92:60:99:80:ed:86:f6:77:cf:4f:4b:
a6:e6:46:d0:e2:d5:e2:dd:79:cf:07:2a:66:76:16:07:f9:58:
1b:4a:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:04 2025 by rpki-client