Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
File: 81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa (raw, json)
Hash identifier: j9vkNIgxpER8UpZzwqwfa11kOz/LF6XOEJCgA5/wW18=
Subject key identifier: BE:3D:24:E0:32:F4:0A:71:75:3D:E3:1F:F5:3E:72:A9:58:18:E9:44
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 785D683C10017A488D7503DF7AC7C806CD21569A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
Signing time: Fri 07 Nov 2025 20:38:16 +0000
ROA not before: Fri 07 Nov 2025 20:38:16 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5d:68:3c:10:01:7a:48:8d:75:03:df:7a:c7:c8:06:cd:21:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:38:16 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=ec165c70e335dd3b651c62d740c799e9cde840dfbb29228b453ebb0035686446, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:0a:89:59:a2:0c:82:4e:42:6d:b0:a0:03:
40:57:f0:3e:5a:3e:d3:6c:1d:9f:c1:1d:44:41:e0:
c0:24:60:c0:b0:71:5d:ea:c2:e7:7e:3e:d9:7f:07:
55:b8:e3:09:ad:3f:29:09:f1:d0:69:24:ef:ac:b4:
78:2a:71:96:ea:34:12:69:e0:89:a0:3b:87:1e:d6:
07:7c:4b:0c:d7:bb:71:7c:5e:7d:11:c0:db:1d:b3:
e2:6c:3e:2b:25:e3:e4:82:e9:4f:be:09:66:ee:cc:
de:8a:0d:9d:3d:17:67:5e:a4:5f:6f:13:48:87:27:
52:78:a5:57:4f:dd:43:7b:9c:4c:6f:d0:26:4d:ff:
e8:42:0b:93:d3:4f:4a:a3:62:5e:40:7c:a2:82:c1:
80:36:27:e1:44:44:f6:dc:48:94:1a:ea:07:ec:82:
4c:d5:25:33:30:18:1d:f9:43:83:d7:f9:ab:70:b3:
a7:1f:2b:5a:7e:76:9a:88:1d:b6:aa:08:9e:ba:e0:
31:f4:8b:b6:6e:b5:c4:5d:9e:b1:1a:75:74:a2:93:
2b:32:f8:9b:ec:6e:8b:0d:40:60:aa:5b:0e:db:cc:
0d:62:a3:72:c3:22:cb:9e:39:a8:48:00:6b:ef:b9:
0c:d0:44:90:25:7c:58:cd:ac:b2:20:65:e1:3d:e6:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3D:24:E0:32:F4:0A:71:75:3D:E3:1F:F5:3E:72:A9:58:18:E9:44
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
42:52:71:a3:3b:33:68:ac:1d:48:57:d5:0c:74:05:97:8d:55:
0e:f9:93:81:be:e4:30:19:d5:e1:fe:23:d1:6a:af:9b:3d:69:
f3:d9:73:4f:1f:bc:5d:de:08:55:2b:00:f8:68:17:b5:17:90:
68:da:e8:86:d9:bb:65:e9:fe:80:cc:db:41:ef:a8:36:a0:27:
7c:ad:91:1f:b7:ba:20:86:3d:1c:e7:4f:5d:56:ee:5b:45:2a:
dd:f7:45:88:52:56:63:96:e7:e1:84:81:c0:ba:1c:9d:38:9f:
df:e0:cf:df:ec:7f:97:3d:76:11:90:6c:ee:e7:d3:a9:81:3e:
19:77:f6:29:52:61:c5:af:5f:9a:52:ee:38:40:39:bf:56:97:
5a:b8:70:18:ef:31:6a:ff:87:81:cb:1d:95:59:43:04:39:fe:
33:97:6c:e5:8f:37:71:de:84:02:3a:6d:8f:ba:c6:13:9c:f8:
11:d8:36:f6:e7:ac:c5:da:71:ba:1f:63:a2:8b:ba:ed:a3:fe:
db:eb:3a:f2:0c:77:bb:41:aa:ba:e3:f8:d2:43:f1:8e:25:1c:
81:22:ae:a5:b2:1a:f2:9e:95:ff:a4:19:66:2a:24:1b:5b:70:
80:a7:3a:3d:20:b2:9b:1c:73:81:55:78:42:f0:95:ad:e4:ed:
39:1e:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:06 2025 by rpki-client