Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
File: 4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa (raw, json)
Hash identifier: zqiwTyKSiEbaaB9xrkSNBCtdM4MZGic14OOVTXBPLr0=
Subject key identifier: 1C:2B:15:1B:16:86:1B:2A:35:4B:69:F6:C2:45:64:D8:AE:A7:13:5B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 250E1AC7260EC0EEE8D9183A556D9708CEA03A36
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
Signing time: Fri 07 Nov 2025 20:23:19 +0000
ROA not before: Fri 07 Nov 2025 20:23:19 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0e:1a:c7:26:0e:c0:ee:e8:d9:18:3a:55:6d:97:08:ce:a0:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:23:19 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=13ed1c039bfc7b2e56f90c74e3222aea748645249044db2de3b7e3f845e19d45, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:2a:a8:54:72:c3:e3:40:7f:f2:a7:9d:ae:
3b:47:42:a7:62:61:f1:db:d6:b3:6b:24:96:bb:64:
bb:0d:e3:c5:33:38:09:d4:39:56:db:74:f5:95:16:
9f:a0:70:96:03:db:1b:a3:23:6a:b7:16:51:c9:f8:
50:3b:7e:1c:1f:38:7f:62:2c:af:06:d2:31:ec:af:
bb:6e:bf:a6:6c:64:50:1e:04:4e:24:7c:69:e6:d9:
2f:c4:5a:81:cd:d2:da:8a:63:b4:be:03:7c:12:f9:
8e:42:66:33:db:dd:2c:18:2e:6d:0a:ab:76:29:af:
f0:6e:0f:41:92:24:78:9a:76:b4:e9:b9:17:7f:a3:
96:bc:a1:b6:60:0d:8a:60:26:fd:44:09:91:74:24:
85:98:5b:09:59:c2:09:5e:b8:f9:72:06:1b:de:ad:
73:1b:89:0b:f0:e0:af:62:ea:c8:a8:a9:f6:1c:b7:
61:23:a5:3e:7d:bd:4d:5d:bd:ae:d7:be:a8:18:76:
36:43:24:a4:2d:94:51:ee:7d:69:2b:46:09:0e:66:
c2:27:45:92:33:14:1f:29:d8:e5:28:4f:d4:b5:d5:
59:5c:f7:18:4e:93:13:7c:c2:07:c6:87:0b:50:40:
12:31:93:c5:ac:49:1b:34:bc:04:64:69:2c:b4:35:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:15:1B:16:86:1B:2A:35:4B:69:F6:C2:45:64:D8:AE:A7:13:5B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2800::/40
Signature Algorithm: sha256WithRSAEncryption
ac:cb:6b:5f:81:ab:84:c0:db:43:16:c5:3a:6e:c0:16:7a:01:
39:0a:22:77:7c:1c:e7:75:fc:12:af:21:34:2e:dd:82:a1:f8:
46:31:27:cf:c8:4e:da:64:0a:86:a2:56:59:1f:6e:7e:cc:2d:
4e:30:ab:36:8b:d1:4d:7d:ac:6b:46:58:01:c0:ec:d7:9d:5e:
2d:1c:c8:4c:a3:90:54:bc:db:51:d6:18:4f:46:c4:fb:32:86:
7a:cb:1e:e9:14:49:c2:cd:9a:3e:5b:07:d2:b9:b8:07:87:76:
9d:31:7b:ca:94:c3:69:08:d8:65:56:ee:ec:23:12:d1:99:82:
e4:be:91:54:a1:59:be:b3:0b:eb:bb:85:fd:a0:ca:d5:c0:e6:
d4:6d:cd:e4:e2:61:f3:0b:9c:e4:d9:1f:a0:21:27:08:16:1f:
1e:3d:bb:40:13:1c:34:41:f0:c6:7b:3c:05:56:c5:37:35:ce:
a5:6e:4a:77:96:fe:92:f1:53:c1:05:f0:dd:82:23:c9:2e:b5:
ed:88:0b:2d:2e:9c:bf:f1:f1:48:70:3c:e5:d8:35:80:48:bc:
6e:f1:e0:21:83:d1:51:69:4b:c6:cc:32:46:12:b2:e4:c8:0e:
88:96:0e:fa:cc:7d:7b:8e:48:7a:9d:7c:08:74:f7:0e:a1:c7:
d8:df:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:05 2025 by rpki-client