Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
File: 932067a7-3440-4f62-98a4-f23b9058ac95.roa (raw, json)
Hash identifier: fSFApjvL4WPgc+ohTw4btMPZWz2d2Qx75aH/vCmTt/I=
Subject key identifier: E6:A9:E1:19:9B:EE:20:B2:B1:B5:1C:07:13:E5:35:E0:A4:BB:20:F8
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7849F10370EFAE8E2A42BD8C28C2ED0095F3DBA6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
Signing time: Fri 07 Nov 2025 20:36:51 +0000
ROA not before: Fri 07 Nov 2025 20:36:51 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:49:f1:03:70:ef:ae:8e:2a:42:bd:8c:28:c2:ed:00:95:f3:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:36:51 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=05c5fcf06aac9448ae2bf2e1e00a3083975eb4915d2a106e5da312255df31aea, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:bb:b0:80:2b:a4:6c:fd:9a:5f:4e:c5:44:
7f:87:28:bb:05:27:60:ac:d9:24:90:56:b7:05:b2:
a4:9f:a0:4c:9c:05:9d:4e:10:53:69:36:be:a0:4f:
af:75:be:f8:6b:bc:71:05:cd:2b:06:f3:ed:89:25:
5d:6b:7e:77:8e:d1:df:f1:e9:89:82:79:ab:37:4b:
3a:0c:37:31:bb:f8:0a:ca:0e:9f:dd:77:de:f2:ee:
a4:28:e0:20:9f:a5:74:c2:ff:a1:1e:96:36:dc:0e:
22:74:27:31:65:34:76:cc:4e:7b:fb:84:48:ba:f0:
86:bd:4a:b0:01:fc:6c:d2:4a:05:7c:b6:ff:e4:df:
ea:57:cb:68:71:10:f5:c3:0d:21:67:2b:cc:c7:d1:
26:5e:33:46:7e:4e:27:dd:30:75:28:81:15:fe:1c:
d4:10:ec:95:4c:c8:b6:35:e7:cd:ef:bd:fb:7e:0c:
e4:be:45:cf:55:df:de:4d:fe:9c:ca:c1:f3:a5:27:
08:a5:c0:25:e7:b8:1f:f8:8b:36:ab:04:e7:d7:22:
7f:14:97:61:63:75:61:3d:04:d0:c2:2b:78:da:aa:
71:7c:04:dc:01:44:e2:54:a4:ad:65:9a:47:ca:b2:
04:3d:bb:c4:58:89:9f:15:fd:32:4f:12:33:79:69:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A9:E1:19:9B:EE:20:B2:B1:B5:1C:07:13:E5:35:E0:A4:BB:20:F8
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6::/40
Signature Algorithm: sha256WithRSAEncryption
06:75:95:58:70:99:48:bf:ac:a4:61:8f:67:62:03:3e:0b:97:
fb:2a:8e:74:bc:00:1e:34:5f:a0:98:18:b1:86:cb:33:08:61:
eb:76:ee:12:17:c7:29:10:c0:69:79:13:4a:68:f6:ce:16:4f:
ed:ca:8f:a0:95:f7:76:ea:10:28:af:c1:85:b6:2a:71:52:8e:
67:8b:81:fc:29:34:48:64:ac:37:76:3c:ea:e1:3d:e3:fd:ca:
ba:49:d8:92:8c:e7:b2:8d:99:2b:51:59:01:46:a4:6a:57:9f:
3d:14:2a:f0:98:de:81:8f:ed:ac:8c:46:6b:7a:85:39:85:8d:
33:5d:81:00:49:e4:b3:13:fd:6f:2a:4f:55:95:58:ac:bb:89:
af:2b:1b:90:ce:8c:37:ff:70:92:b3:ed:f0:2f:45:40:1e:57:
17:55:f4:bb:0e:a1:d4:47:6d:12:39:8e:84:a3:ee:74:47:cb:
4f:c0:01:b0:54:1f:23:b9:7e:35:0c:58:b7:8e:c4:c1:02:67:
84:a6:65:cd:1d:2e:0e:53:61:72:6f:a7:15:77:4d:4c:85:5a:
7d:3f:7d:40:d4:c4:b5:fc:34:66:89:9c:ac:b5:b6:8b:58:05:
9d:fc:89:a8:23:03:29:6d:51:09:7e:a4:9c:48:9a:d1:a8:6d:
c5:cf:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:58 2025 by rpki-client