Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
File: 7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa (raw, json)
Hash identifier: IIrxKsKMl07FYGG7q+6urQrX7aoJhcl3wcmzTOizclQ=
Subject key identifier: 2A:00:AF:0F:1E:48:38:D0:47:AD:E0:92:9D:6B:EF:AA:8F:EE:A9:E0
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4E2F130552736F12D867DBE7406E2CAD6495DAFC
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
Signing time: Mon 06 Oct 2025 18:10:30 +0000
ROA not before: Mon 06 Oct 2025 18:10:30 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 185.143.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2f:13:05:52:73:6f:12:d8:67:db:e7:40:6e:2c:ad:64:95:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 6 18:10:30 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=61f51da2429a780eff98a89197bf72a05b2b37bd34508f07b91abb7192754ec2, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:15:b5:c7:f3:e2:3c:89:df:6b:1f:4a:4e:
ff:84:8c:1c:f1:75:6d:13:e5:7e:66:da:ac:7a:15:
16:29:45:f5:c7:1b:89:e4:06:c9:04:c7:ef:1a:9a:
bb:af:79:b1:0a:0f:80:3d:ad:94:8a:4e:1e:c5:6c:
b2:d5:5b:df:89:49:40:0f:9c:df:be:e7:28:af:1d:
f6:e8:09:39:d1:1f:13:23:bc:03:4e:61:21:72:21:
e6:35:14:28:19:49:25:10:5a:7f:5d:80:d3:59:fd:
c0:a1:ea:9f:0b:23:07:f4:57:24:db:b5:fa:b3:ac:
83:0b:54:3e:57:95:5d:94:b8:8d:38:45:f7:36:be:
42:09:33:cf:11:ee:28:ba:0e:b9:a4:21:60:3e:9e:
35:c8:df:3c:3a:1c:f3:97:be:fd:05:ff:0b:75:7f:
bb:f4:6f:69:83:de:61:8e:64:49:72:0e:05:c1:a8:
fc:65:fa:0c:51:21:f2:d6:66:5e:6a:3c:6f:dc:a3:
58:64:ec:ff:53:16:a4:70:70:a4:5f:85:91:ae:2d:
41:6f:c1:84:9c:09:e4:dd:80:86:b3:cb:32:49:40:
a7:a2:b9:d5:d6:89:26:db:c5:d3:f1:c8:86:d1:68:
10:69:80:74:81:54:a7:1d:e4:29:72:af:04:e9:95:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:AF:0F:1E:48:38:D0:47:AD:E0:92:9D:6B:EF:AA:8F:EE:A9:E0
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7a9d4970-8e9c-4d11-a1c6-772a571334fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:7d:9a:e4:24:93:11:50:78:0e:df:0b:51:c1:66:b5:c9:cf:
83:6d:af:70:36:38:1c:1a:78:6c:78:d1:ea:be:09:fa:52:cd:
33:44:f4:5d:60:04:ee:64:5c:14:5e:10:13:56:55:24:00:6e:
63:ee:6e:bf:81:79:79:89:df:d2:cc:5d:60:ad:20:4e:8d:5a:
4d:70:a3:60:cc:8f:38:ad:61:fa:7d:fa:e6:0b:57:0d:73:4b:
83:05:ab:89:b0:9f:10:88:8c:50:4d:8e:d6:94:bc:5c:88:bd:
c0:01:35:14:2b:bc:ae:ef:eb:c0:4b:c3:c0:41:da:d8:99:bf:
5a:11:69:9a:d1:d3:88:f7:ed:17:ff:1f:04:cc:38:d9:44:a5:
12:6e:91:d6:1f:16:ee:01:39:c4:b6:f0:9d:88:07:a5:fe:bf:
ee:14:78:78:90:0c:4e:7d:38:45:bc:cb:14:db:36:1e:4f:b0:
48:f4:fe:79:4f:f9:66:db:8e:7b:1f:7c:08:a5:0a:e1:d4:50:
56:73:62:16:b1:d9:a4:7c:90:7d:07:c0:cf:d9:73:4f:be:3b:
6c:90:79:1d:67:65:b4:4f:b2:6c:d2:de:06:b6:89:0e:4e:3c:
48:65:53:b3:f7:03:01:e3:3e:29:ae:8c:4e:59:d5:c1:74:a3:
b5:1b:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:35 2025 by rpki-client