Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
File: 8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa (raw, json)
Hash identifier: JFPfLpYpbecKrODbtwG7xNh7GN6R0LkaMu4xFRmlYuA=
Subject key identifier: 66:33:1B:5A:27:BF:7B:C7:35:C7:0F:56:B9:E7:A1:B9:29:DC:8B:32
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 055675A645AEF305D14A8E9517B4A886B571E513
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
Signing time: Mon 29 Sep 2025 15:39:31 +0000
ROA not before: Mon 29 Sep 2025 15:39:31 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:56:75:a6:45:ae:f3:05:d1:4a:8e:95:17:b4:a8:86:b5:71:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Sep 29 15:39:31 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=7899325610a9091111fc98980808304192b395a59509b125f1a2dea0e204a842, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:41:cf:fb:32:2e:3d:45:15:c9:83:f1:00:
0a:57:1f:a5:87:05:1c:3b:27:05:c4:f6:e7:5b:1c:
cc:4b:42:0d:91:44:96:05:f3:6d:2c:85:5f:d5:35:
9d:a9:fb:8c:eb:11:35:9c:a4:7d:b0:2a:0d:2a:b7:
22:62:c1:dd:4f:f9:e1:6c:d6:9e:08:ff:6c:9f:65:
30:bb:42:11:ed:83:94:47:2e:d3:a4:72:a1:32:d9:
3a:a3:4f:85:51:14:4d:ed:76:47:c8:de:58:46:36:
83:da:a2:b1:4d:01:d3:32:43:38:36:94:4a:5d:60:
24:41:5d:d9:e5:e1:0b:6f:62:ef:49:7f:fb:42:ee:
3b:5b:04:fe:a3:14:89:6b:3c:0b:f0:58:34:5c:6d:
b2:6f:ce:34:c7:45:5d:c1:23:d7:c7:d5:0d:6c:aa:
7e:3b:d9:77:45:a4:7d:bd:02:d5:e5:ee:ab:be:24:
4e:9f:3d:f5:f2:00:a1:52:ab:50:ce:25:2f:a3:e3:
5a:e7:a3:19:68:e6:b1:e5:53:8c:bb:f9:8c:b8:fd:
a7:89:a8:aa:5f:c2:bb:47:c7:da:90:79:c5:4a:31:
50:f9:cc:69:65:eb:88:a2:ce:5e:b1:03:76:09:10:
c5:eb:03:c6:d8:04:82:d3:e8:83:53:51:e5:79:fb:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:1B:5A:27:BF:7B:C7:35:C7:0F:56:B9:E7:A1:B9:29:DC:8B:32
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2840::/48
Signature Algorithm: sha256WithRSAEncryption
58:41:59:84:f4:44:cd:2a:ff:57:9e:e4:cd:79:41:c1:da:3f:
07:f0:2f:d5:69:ab:0a:47:c1:e8:57:0f:d1:da:a2:c8:90:70:
52:76:41:09:a3:30:bb:54:ba:c3:7b:37:f5:02:86:ff:f3:d0:
d7:c3:ab:d0:e0:b9:f2:b4:99:c5:29:12:6c:c4:fe:c2:8e:93:
b5:33:57:03:47:c6:b5:ef:78:f4:c1:4b:7e:87:d4:2b:a2:72:
6e:d8:ac:dc:47:24:d3:ef:2d:7f:d2:81:01:b5:f9:76:0c:5c:
68:72:fb:e7:6e:00:3d:c6:ad:f6:ec:6f:e4:b6:cf:2c:96:e6:
ed:54:02:de:1e:0c:b5:ad:4e:50:f8:15:16:c1:6b:81:5a:31:
b6:8f:f7:e7:b3:1a:83:ea:c8:51:99:3e:34:d7:fd:e9:b2:a6:
c6:8e:75:3a:80:e7:41:f8:69:db:a3:8f:03:b8:04:75:9e:4a:
23:19:23:f6:57:50:0a:25:3b:63:c7:03:cc:54:7b:c6:c9:67:
34:4f:2f:3b:cc:8c:98:fd:65:eb:e5:d4:89:a5:73:a6:6b:ef:
ea:85:6f:77:3c:64:1c:e8:bd:01:ae:8e:f2:71:1b:0f:e1:ac:
2c:27:01:c1:04:5d:c7:69:23:cf:53:74:78:c6:3d:48:9f:f1:
f6:a2:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:21 2025 by rpki-client