Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ee92bf5-7859-418f-a8de-079d16a6aeff.roa
File: 7ee92bf5-7859-418f-a8de-079d16a6aeff.roa (raw, json)
Hash identifier: wUWsra1dvIu+zx9KfqIGVORVdTTAP4sA4H861YwapnU=
Subject key identifier: 68:B0:3F:51:CE:47:DD:88:67:EC:7D:AE:BF:78:FB:1B:BD:98:03:D7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 28E3498812CAE9F30B04E03DE2A9950DE1757E6D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ee92bf5-7859-418f-a8de-079d16a6aeff.roa
Signing time: Fri 07 Nov 2025 20:36:57 +0000
ROA not before: Fri 07 Nov 2025 20:36:57 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e3:49:88:12:ca:e9:f3:0b:04:e0:3d:e2:a9:95:0d:e1:75:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:36:57 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=c40769a84945ae9a189ae161104efcefed35e2194c467bda2bffce584acff1f7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:e8:9e:76:d8:ec:89:92:68:77:b1:73:45:
ee:6a:33:70:b6:ef:6a:9e:e3:43:95:91:8c:f9:e7:
fb:b5:cd:39:04:b8:ff:b0:8e:b3:00:5c:1d:01:ba:
18:ce:bf:14:c9:b6:46:51:67:48:7f:a7:24:a0:43:
72:ef:2c:78:8b:ef:4e:b3:bc:b1:7b:1a:5d:20:38:
a5:62:24:2f:ae:87:c5:29:80:ca:d7:de:2d:a4:b3:
b1:d2:d6:d6:2d:b3:7a:6d:e9:62:6c:5e:1b:e1:4c:
da:f5:92:1d:b8:c9:05:3b:c6:66:01:ba:8f:a9:8a:
bc:13:36:d8:f7:a3:07:87:dd:11:8e:3d:4e:a8:fc:
10:9c:51:c1:1d:57:a2:71:84:61:23:6f:f9:bd:43:
9b:81:ba:56:22:c8:b4:4d:1d:03:73:5d:5c:e3:06:
3d:ab:f6:7c:84:5c:41:e6:b3:89:d1:a7:88:0c:da:
09:0b:92:57:66:be:4b:67:99:1a:f8:46:cd:f1:08:
a9:50:3c:78:ca:05:48:9b:10:d0:29:f6:a1:3c:59:
f5:3e:af:40:7f:ea:10:17:3a:d8:bc:41:49:ed:7c:
5a:61:6e:7f:c0:e6:d3:42:ee:ff:12:1d:f1:3f:ba:
33:26:02:c2:fc:6b:6a:b5:3b:be:dd:19:71:f3:9f:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:3F:51:CE:47:DD:88:67:EC:7D:AE:BF:78:FB:1B:BD:98:03:D7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ee92bf5-7859-418f-a8de-079d16a6aeff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
3d:68:40:fe:89:70:67:9c:d9:7e:ee:db:cc:92:20:c2:e9:f7:
4c:55:4c:53:77:51:24:ec:82:35:e5:8b:94:9d:b9:b3:4b:84:
cf:6e:31:d5:0f:93:63:80:3d:a8:ed:ed:df:e7:6c:a2:67:b7:
9b:0c:cc:24:fb:30:dc:0d:e1:fe:1b:92:27:1e:ac:be:5a:85:
3e:71:39:0e:62:c9:40:ce:59:07:5e:9b:1f:e6:db:fe:56:29:
7f:bc:77:5d:cd:a2:8e:b2:42:92:f2:2c:3d:7b:d1:16:cc:a8:
5e:53:07:db:c2:4c:aa:a3:1b:32:ff:c0:aa:2a:69:dd:d3:85:
b3:4e:41:6a:da:c1:e3:86:23:0a:f3:b4:fb:c3:a9:f3:c4:22:
ae:c2:b2:b0:c2:d5:1f:3d:95:a6:c3:40:f0:1b:2c:40:b6:4b:
d7:d3:9a:78:7b:ea:b9:ab:04:48:4d:d7:99:15:ec:c8:e8:1a:
5d:3d:e8:5b:ab:cf:fa:da:ab:7f:d7:ca:ff:55:ee:bb:d6:c5:
91:a9:00:79:7a:f2:c7:3f:8f:df:7c:90:6d:e0:e0:df:47:c1:
45:0e:3d:28:42:0a:64:b5:fc:26:09:38:f9:0e:da:e0:92:5b:
d4:c6:78:3a:0e:05:67:8e:d8:95:a5:56:cc:2f:3f:4f:41:cc:
3d:ca:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:05 2025 by rpki-client