Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4a0ca7a1-00ab-48be-a825-9123b34b7077.roa
File: 4a0ca7a1-00ab-48be-a825-9123b34b7077.roa (raw, json)
Hash identifier: 7uL5fW5Hv3vhtE7oWPWUkQiYSRNDEtQhYm+nTs/ndSE=
Subject key identifier: B4:D5:26:AA:9E:4B:39:7B:5D:67:46:B7:2B:4A:38:D9:B1:03:C0:C9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 01A5073A63634BD91328B77698DA5E0C132493A4
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4a0ca7a1-00ab-48be-a825-9123b34b7077.roa
Signing time: Fri 07 Nov 2025 20:23:16 +0000
ROA not before: Fri 07 Nov 2025 20:23:16 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a5:07:3a:63:63:4b:d9:13:28:b7:76:98:da:5e:0c:13:24:93:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:23:16 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=9bbe1ca6718862c61b603e6d2160bb90dd81fd520996bf55ccd4d7901809a724, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:97:2a:f2:e9:31:bd:c0:15:e9:cf:8d:a8:
23:69:f3:1e:ab:e7:d9:1d:86:58:91:aa:33:bb:30:
cc:c3:42:14:af:0c:bd:10:34:b8:95:07:02:d2:26:
ef:4f:b3:d3:02:b0:3f:76:94:77:ab:b8:4e:3d:b4:
d7:09:4c:17:1a:8f:81:23:1b:3a:af:61:0b:a7:7f:
59:2b:e7:97:35:2a:6c:7e:1d:c4:dd:63:f7:ed:80:
66:6c:37:3a:48:07:de:09:47:1e:5c:95:95:e5:17:
32:e7:37:d3:f5:73:ef:4d:e1:32:96:3e:ca:88:ad:
af:0b:5d:d5:c7:ab:1c:06:4b:c7:9f:64:4a:a8:67:
11:c1:55:d3:c9:05:d0:ae:e8:6c:20:17:af:de:51:
94:0b:aa:df:a4:00:83:4b:62:2c:94:97:76:26:21:
12:35:dc:6c:7c:17:c1:86:e2:16:f8:87:6e:5a:d9:
7e:b8:bf:45:75:dc:19:5e:c5:3b:17:64:38:de:95:
69:98:a4:1d:6e:e3:2c:a7:32:2e:28:0e:08:ae:b5:
e2:bd:d5:c2:91:48:6f:7b:04:ef:a8:d3:15:9c:0d:
fe:79:8b:11:1b:40:ed:dc:e0:46:5d:e4:a7:f6:58:
10:44:7c:28:06:ca:5b:62:3e:56:b9:28:3e:cf:f8:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D5:26:AA:9E:4B:39:7B:5D:67:46:B7:2B:4A:38:D9:B1:03:C0:C9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4a0ca7a1-00ab-48be-a825-9123b34b7077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f880::/48
Signature Algorithm: sha256WithRSAEncryption
b2:0f:2a:e0:2c:f0:51:fc:ca:cf:2f:ec:43:8e:1d:4a:41:d0:
a5:91:56:51:cf:3e:03:3a:bd:36:96:93:03:f3:b7:dd:75:ff:
2b:d8:be:bd:3e:3d:40:82:bb:bd:bc:c7:13:66:13:ad:05:ed:
ce:77:b4:c8:16:19:01:5b:5a:63:c9:fe:19:3d:47:28:d1:26:
a1:c7:eb:d8:c1:79:e8:cb:01:94:49:c3:13:7d:27:7d:fa:d9:
10:74:b3:66:61:17:66:45:4a:f6:8d:9d:7c:04:49:4e:29:aa:
1b:a1:c6:2f:f3:f3:a4:8a:ac:e5:df:20:a3:ae:38:9d:4b:f1:
42:c5:ef:b9:19:60:d1:2c:9e:e5:10:53:9c:72:28:75:59:66:
45:2f:28:d5:fa:8d:73:40:9f:2c:17:74:5b:9a:70:20:51:df:
df:94:be:de:6d:2f:eb:eb:78:14:93:48:2a:29:99:86:0d:76:
b7:6c:47:64:67:92:03:be:91:24:f4:ce:42:50:07:af:c8:65:
05:eb:4d:b7:7f:01:0f:fd:59:41:4a:b9:8e:51:11:5e:a6:e2:
34:3b:34:23:2c:72:9f:f4:4a:5e:17:28:c3:63:70:f9:6f:5c:
ba:60:ff:5c:e6:35:f6:45:7c:66:42:e2:c8:fd:99:63:99:ce:
83:8f:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:00 2025 by rpki-client