Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/34fb5c7e-e397-4649-893b-332ddda14bd0.roa
File: 34fb5c7e-e397-4649-893b-332ddda14bd0.roa (raw, json)
Hash identifier: Fd2IavHatSRY9pgxA4UenXiUf5KxXG/SvPXuRlEpO6A=
Subject key identifier: 0D:00:B9:E5:A5:5C:9E:78:95:54:34:04:3F:F2:3A:18:3C:07:19:91
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 026F22D99FCB6D9CF104FD3FBAE22EBDC85B2113
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/34fb5c7e-e397-4649-893b-332ddda14bd0.roa
Signing time: Fri 17 Oct 2025 20:10:18 +0000
ROA not before: Fri 17 Oct 2025 20:10:18 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6f:22:d9:9f:cb:6d:9c:f1:04:fd:3f:ba:e2:2e:bd:c8:5b:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Oct 17 20:10:18 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=b96472a77d73527053cc976ca49f3ff54f0e748fb843491907a5102d37d5d6ce, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:a7:cc:b3:aa:13:33:6c:f6:23:c1:e9:29:
d1:75:03:e3:2d:27:83:f6:fd:21:f0:7f:35:c6:66:
3e:4a:b1:ff:b4:88:a8:c9:57:32:36:01:00:8a:73:
08:35:2d:6c:d7:58:69:eb:a2:01:45:1f:16:af:cb:
06:22:53:06:82:23:2e:34:c3:88:61:d0:10:57:7f:
89:51:6f:b6:d5:60:a6:66:7b:48:91:5a:6d:04:ff:
d7:a8:4d:48:b5:d7:db:27:36:4f:3c:48:84:1a:91:
75:b6:0b:8f:82:6e:86:9f:30:59:43:25:7a:71:5c:
c0:0b:b8:f5:d6:33:f9:1a:10:b6:89:11:e3:45:8b:
4a:a0:49:1c:d5:9b:73:ef:c0:8a:60:db:65:3c:7d:
d0:76:62:1b:47:21:be:1b:8a:97:8c:4b:00:cb:c4:
7a:36:05:65:80:c8:ad:0d:3f:b2:cc:84:cd:3f:b6:
a5:f6:93:8f:bc:63:52:36:18:b1:2c:23:f3:c6:de:
7e:22:92:e5:29:fb:03:91:59:9c:6b:30:36:c8:51:
75:eb:a2:15:19:d7:f5:1e:8a:06:e9:fc:2a:60:30:
9c:32:a1:ce:cf:be:b3:c0:58:55:9f:64:10:1f:b7:
0f:6c:de:a9:5d:60:d3:45:42:18:18:c9:dc:35:96:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:B9:E5:A5:5C:9E:78:95:54:34:04:3F:F2:3A:18:3C:07:19:91
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/34fb5c7e-e397-4649-893b-332ddda14bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:100::/48
Signature Algorithm: sha256WithRSAEncryption
70:42:c5:59:f9:16:7f:ec:57:1b:8a:7b:ee:11:c4:ca:25:d2:
4c:bc:37:e4:b3:6f:ce:34:3b:d7:36:db:dc:18:d1:4d:db:2d:
27:17:ad:64:44:db:07:10:fb:de:3a:10:26:bf:09:26:40:da:
47:b9:39:01:4f:8c:15:cf:db:f1:29:74:e4:92:c0:80:5c:d0:
b1:a5:c3:35:9a:da:15:10:71:81:c2:30:de:88:32:48:ac:3a:
61:3b:12:77:99:5c:f9:79:66:35:91:49:eb:b2:01:ad:6f:3e:
7c:2a:e4:95:f9:45:49:22:f8:08:b8:a9:f1:9a:83:f1:33:bd:
42:43:b8:78:92:ea:95:43:0b:7d:7f:fd:67:ed:04:41:8c:ce:
98:4e:0d:c1:be:32:1e:4c:df:af:f5:62:e9:d8:1c:ca:25:1a:
47:75:57:22:e9:23:df:7d:75:05:3f:35:97:35:ef:5b:13:a5:
06:dc:2a:bf:55:4a:43:a4:3e:0a:84:ff:26:f5:73:27:fc:45:
16:2e:65:23:79:8e:ee:04:7a:e9:5a:cb:c5:cd:d3:49:ef:3b:
61:98:11:df:43:31:8d:66:9b:d3:72:d8:ee:46:29:46:41:32:
50:17:ae:61:f7:72:ca:fa:43:68:5c:ef:68:e2:ce:c3:10:b1:
1a:44:c3:5f
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUAm8i2Z/LbZzxBP0/uuIuvchbIRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTEwMTcyMDEwMThaFw0yNTExMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5NjQ3MmE3N2Q3MzUyNzA1M2NjOTc2Y2E0OWYzZmY1NGYwZTc0OGZiODQz
NDkxOTA3YTUxMDJkMzdkNWQ2Y2UxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANGSp8yzqhMzbPYjwekp0XUD4y0ng/b9IfB/NcZmPkqx/7SIqMlXMjYBAIpz
CDUtbNdYaeuiAUUfFq/LBiJTBoIjLjTDiGHQEFd/iVFvttVgpmZ7SJFabQT/16hN
SLXX2yc2TzxIhBqRdbYLj4Juhp8wWUMlenFcwAu49dYz+RoQtokR40WLSqBJHNWb
c+/AimDbZTx90HZiG0chvhuKl4xLAMvEejYFZYDIrQ0/ssyEzT+2pfaTj7xjUjYY
sSwj88befiKS5Sn7A5FZnGswNshRdeuiFRnX9R6KBun8KmAwnDKhzs++s8BYVZ9k
EB+3D2zeqV1g00VCGBjJ3DWWGGcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQNALnl
pVyeeJVUNAQ/8joYPAcZkTAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
MzRmYjVjN2UtZTM5Ny00NjQ5LTg5M2ItMzMyZGRkYTE0YmQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8YB
ADANBgkqhkiG9w0BAQsFAAOCAQEAcELFWfkWf+xXG4p77hHEyiXSTLw35LNvzjQ7
1zbb3BjRTdstJxetZETbBxD73joQJr8JJkDaR7k5AU+MFc/b8Sl05JLAgFzQsaXD
NZraFRBxgcIw3ogySKw6YTsSd5lc+XlmNZFJ67IBrW8+fCrklflFSSL4CLip8ZqD
8TO9QkO4eJLqlUMLfX/9Z+0EQYzOmE4Nwb4yHkzfr/Vi6dgcyiUaR3VXIukj3311
BT81lzXvWxOlBtwqv1VKQ6Q+CoT/JvVzJ/xFFi5lI3mO7gR66VrLxc3TSe87YZgR
30MxjWab03LY7kYpRkEyUBeuYfdyyvpDaFzvaOLOwxCxGkTDXw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:23 2025 by rpki-client