Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
File: ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa (raw, json)
Hash identifier: pYZKOTl5JtPcE1W5wHeC5lAn9jqQjhzS+2vPb7cLF7o=
Subject key identifier: 82:DE:22:03:BF:47:A7:9E:9A:62:A4:7F:F7:13:69:99:48:2C:52:A0
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 070D13E9F02A3A24EBD5C92EFC4F93191D627CAF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
Signing time: Fri 07 Nov 2025 20:21:54 +0000
ROA not before: Fri 07 Nov 2025 20:21:54 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:13:e9:f0:2a:3a:24:eb:d5:c9:2e:fc:4f:93:19:1d:62:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:21:54 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=b76baf2021df4c552ff8667cd28b4ef7d6b87db65d4dc1f86c2ea807a720d0fd, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:0d:3e:aa:66:a5:08:8d:20:00:0b:62:94:
a8:6a:50:c3:d6:1e:c6:de:6e:ab:0f:50:be:06:c3:
39:83:bb:38:80:f2:c9:c3:d8:dd:cc:e2:a1:6f:a3:
dd:f1:27:60:81:a1:a7:b6:27:00:89:26:0c:eb:b5:
76:79:10:39:2b:b2:91:72:ac:2b:63:9b:ae:99:c8:
b2:08:b4:4a:f8:ce:87:3d:8b:a3:0c:38:5a:7c:05:
c1:c0:89:ca:93:e8:16:f9:e7:54:53:42:2a:de:bf:
6c:9b:9b:5f:f9:eb:ca:18:fe:15:7d:81:7a:69:b8:
b2:29:5f:40:7f:44:33:06:4e:5a:bc:36:3f:c9:32:
95:6e:80:c9:d2:02:6f:9d:05:f4:6d:21:6c:8d:e1:
f2:ba:15:70:1c:82:ec:9e:69:2d:ca:be:45:81:95:
7d:83:10:52:11:74:16:2e:6f:e2:30:40:97:7f:cb:
e7:00:d7:af:fb:51:e0:5b:9c:17:fb:a9:aa:01:ba:
c4:c8:5b:38:f9:63:df:09:67:1a:5c:7a:45:c8:80:
56:bb:88:73:6b:1b:c5:da:69:84:cc:34:bb:b9:5d:
51:cb:58:3d:5b:ac:6e:fb:d4:9d:94:c5:60:83:17:
ad:9e:be:75:14:ca:95:96:58:61:56:4a:f0:2f:70:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:22:03:BF:47:A7:9E:9A:62:A4:7F:F7:13:69:99:48:2C:52:A0
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ee70ca3e-a7dd-43d8-bb30-01cc2f46e1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
c6:07:0f:b6:a0:a4:29:61:0e:55:84:7e:3b:df:c4:2e:a7:85:
43:2a:ad:d3:9d:50:ee:f4:25:b0:cb:4a:88:c9:0d:c4:f4:2c:
4e:6a:bf:bb:e9:a6:99:0f:fe:db:31:80:37:2d:45:87:cc:65:
43:5d:91:03:b6:5f:c4:84:6b:ff:4e:34:37:92:f8:96:80:3b:
ce:2a:ed:d2:03:c7:25:ae:90:e4:82:76:0f:d0:d6:f2:74:0d:
ce:8b:97:a3:bd:a6:59:70:2c:ed:f5:c9:1d:9f:42:3c:a9:18:
7f:27:5e:79:44:8d:94:23:54:e4:2e:31:b5:76:1e:c3:5b:c0:
14:cf:a3:c4:0b:42:7c:b1:34:e4:5c:b5:e6:ae:08:3d:18:00:
db:a2:c8:22:3b:7d:7e:e5:bf:72:9d:6d:b4:5c:c8:f4:ca:2d:
84:55:d6:51:a4:c5:fc:53:ae:19:6d:30:5e:36:a0:5e:76:7e:
ab:5e:86:30:c5:1b:15:47:c0:91:6f:e7:83:ef:61:12:1e:62:
87:f6:ee:06:91:5f:f4:e5:97:9b:00:cb:0b:97:e1:5e:63:32:
8b:df:25:ea:36:5c:7e:cc:3c:0e:ce:a5:79:35:05:e7:69:01:
00:50:57:90:bf:83:37:68:4d:c7:c9:c0:ee:32:e0:28:e9:3f:
a5:f4:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:07 2025 by rpki-client