Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa
File: 6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa (raw, json)
Hash identifier: bji8N6AMbsG3VVQlGDqgtuMPNOnhX2CbvMyn7Vfd2B4=
Subject key identifier: E9:22:75:9F:94:65:03:78:F8:CF:AA:4A:1B:6B:BA:4E:62:B1:20:80
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7E19ECE30C9D7E197B95A308E4005459889E01A7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa
Signing time: Fri 07 Nov 2025 20:23:13 +0000
ROA not before: Fri 07 Nov 2025 20:23:13 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:19:ec:e3:0c:9d:7e:19:7b:95:a3:08:e4:00:54:59:88:9e:01:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:23:13 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=f11384ef7defeec883b00fecb154b51655a8fe1b8312c82a38877d523ba51cb9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:6a:09:39:d1:7e:0e:42:1b:f1:8a:13:41:
b2:f2:8a:fc:52:08:82:b1:44:db:34:d0:64:81:c7:
70:f8:e2:09:61:be:04:88:62:48:2a:1f:72:e2:30:
4d:aa:31:41:27:ea:6a:5c:b8:f8:54:ea:51:43:59:
e0:0a:d6:e6:1f:da:7f:20:79:55:9f:2d:fa:8b:07:
c5:67:5d:70:87:24:83:72:92:1d:e4:3b:58:fc:b0:
9b:58:e3:9c:b3:30:ab:99:fc:24:7a:22:7b:d6:5e:
cd:cc:69:6f:9d:55:b6:41:e4:95:88:7e:34:f6:21:
01:d2:3b:81:e8:8e:ab:39:d4:c5:9a:d6:59:24:f5:
dc:85:72:fe:da:07:72:2f:e2:ee:cb:57:da:12:50:
1d:35:4f:b4:c4:e7:98:e0:9e:34:e5:ba:5f:ea:be:
b5:e7:85:78:29:1a:1c:97:23:1b:4d:50:d1:57:fa:
08:a2:87:b9:37:12:c7:86:47:9f:a5:bd:c3:50:a0:
04:6c:f6:d7:86:f5:e3:4b:20:0e:7b:3e:e9:24:94:
f9:89:81:fb:c8:da:96:6f:19:07:b6:d3:03:0b:ff:
ef:aa:8c:c9:6d:10:d1:fb:da:df:d5:4f:b7:1d:24:
5d:35:5c:87:81:3e:a2:59:36:71:aa:6e:62:e2:bb:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:75:9F:94:65:03:78:F8:CF:AA:4A:1B:6B:BA:4E:62:B1:20:80
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d3e02ed-2848-4dc2-a85f-00ff6a0fed88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:76:8a:90:01:99:1f:97:85:9b:2a:b9:46:8e:6c:25:41:d9:
00:ca:61:e5:72:63:15:5b:5d:9f:42:19:2f:5b:2e:0f:11:15:
a7:8f:e0:b1:32:1f:69:c2:b9:cf:21:0f:2e:0a:d8:9c:73:41:
c4:58:b0:3d:36:c4:54:38:d9:83:f0:4d:8f:99:24:a3:36:4b:
d6:12:3f:42:63:8b:bc:a4:d7:d6:89:72:04:15:81:c8:db:17:
35:81:50:61:df:fb:cc:8a:4c:f4:e7:c3:22:ab:85:5f:cd:a8:
c3:26:9d:a0:2b:22:9c:a4:06:51:4e:af:a2:1d:54:68:82:f6:
e2:87:6d:29:82:a4:a7:5b:20:b4:ae:85:84:12:79:1e:c7:96:
91:6e:a8:0f:9f:0b:07:07:aa:6a:e8:ef:80:7c:3d:6d:3c:f5:
d7:a1:b9:28:ee:38:14:8e:f1:f2:28:e2:ae:5e:9a:d8:1f:2c:
c7:c8:27:60:94:a6:77:f9:10:9d:42:02:39:86:5f:47:89:6e:
19:43:a1:6a:d5:6c:1f:39:6f:42:fd:7f:95:97:16:70:71:9f:
23:46:41:49:d0:ac:6b:24:53:0b:0e:48:aa:dc:6a:10:b9:13:
9d:60:b2:db:e3:88:52:29:b8:f0:d4:df:42:02:97:9f:fa:9f:
91:ca:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:04 2025 by rpki-client