Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
File: f1ac118e-e6d3-4c1a-be43-c76f57238339.roa (raw, json)
Hash identifier: KJgwd8ZzOHSVK6W/keLLk29d5yrgglzSJV/4mt91zmo=
Subject key identifier: B6:9B:12:BC:7F:B7:87:1A:E8:F3:69:F5:BF:69:8D:EB:6E:49:45:4B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 60E3CCD79DB5287812581DFB1523B85A42641790
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
Signing time: Fri 07 Nov 2025 20:21:54 +0000
ROA not before: Fri 07 Nov 2025 20:21:54 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc5:9800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e3:cc:d7:9d:b5:28:78:12:58:1d:fb:15:23:b8:5a:42:64:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Nov 7 20:21:54 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=556a9fe1b2063ac33f37681d5089a507dd96ffed355ae7df7ce003ec829da2bb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:5f:07:f6:4b:c6:24:03:56:91:30:1a:1e:
67:7e:f9:c2:44:a1:04:52:d5:9c:cb:7a:4b:43:6b:
39:7b:a1:7d:a8:06:1f:0e:1e:c8:ad:4e:52:5a:76:
37:4b:38:40:56:1f:dd:10:05:60:ac:db:f7:7a:98:
33:5a:d8:84:d9:b3:08:af:c5:83:7b:b3:4c:0a:a4:
ae:59:6a:6c:77:cc:d3:5c:ba:64:44:12:c9:7b:3f:
c6:86:6d:ef:3f:2b:95:08:33:ed:1d:9e:24:0c:da:
60:cd:9f:41:0e:a7:0a:9f:b4:af:93:a0:f9:a3:77:
f7:f5:aa:2a:8c:fd:c0:2a:25:72:46:9a:62:7f:c8:
25:5e:84:aa:e2:cd:3c:07:7a:51:14:65:03:87:ee:
d9:b0:5c:9b:b7:57:1f:45:ec:44:d0:62:0c:7c:2a:
25:1f:b1:c3:7c:61:09:35:74:f2:69:28:0d:fe:44:
bf:18:da:e2:a5:11:fc:6c:4f:48:aa:f4:09:b6:0b:
9c:8a:74:8a:ce:12:4e:ce:98:2c:4c:09:22:11:f2:
5a:db:cd:8d:81:75:50:2f:dc:44:ec:e2:69:22:e2:
f3:a2:20:f2:61:b9:ed:a5:96:5b:44:63:53:77:cb:
05:6e:0f:85:eb:36:cb:68:b3:be:a8:a5:f6:05:a4:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:12:BC:7F:B7:87:1A:E8:F3:69:F5:BF:69:8D:EB:6E:49:45:4B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9800::/40
Signature Algorithm: sha256WithRSAEncryption
c3:8f:8a:ab:06:a2:17:34:dc:1e:1e:ff:d8:61:32:75:0a:ec:
89:3d:eb:0d:32:12:35:8b:4a:ee:37:e4:ca:6a:4b:88:0e:4b:
5d:63:77:3b:07:8b:8d:b0:0a:34:25:2e:d8:fe:de:88:fe:a3:
1e:cb:37:ec:0e:cd:bc:04:2f:c9:65:eb:22:1b:57:e8:71:48:
49:fc:87:8b:4a:e8:fe:95:9f:2c:45:13:72:c8:d5:c2:8b:19:
b2:65:58:78:d1:39:10:d5:b6:3a:8c:9b:22:cd:bf:ef:b5:18:
42:4b:59:b8:90:60:09:24:76:0c:e3:2d:56:be:0e:ac:7a:08:
4a:d5:84:68:cf:16:ca:a0:fb:b0:5e:22:45:0c:93:f8:96:9a:
0d:7b:f8:84:37:15:ac:8c:af:b6:38:f5:08:90:da:c1:7a:7e:
e4:6b:1d:9a:97:f2:04:fb:1d:91:d3:f7:6d:7a:c2:71:66:b6:
ca:4f:ce:bf:6a:b2:8e:b7:92:5a:df:52:19:dd:5b:ba:81:91:
a5:f2:3a:21:7d:61:74:3f:02:a6:b9:46:cc:f3:87:b4:e5:84:
89:fa:d8:be:04:f7:b8:f5:72:da:aa:0a:62:0b:d9:49:9b:2e:
fe:f8:1c:7d:bf:48:26:95:79:cd:77:cb:3e:9f:3e:a1:f6:e6:
9a:1e:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:03 2025 by rpki-client