
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa
File: f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa (raw, json)
Hash identifier: zMzxEHbO2SL7BBhTkzJ3K7riPNLQqLTY+RUvoEy0We4=
Subject key identifier: D6:8B:33:47:B3:86:32:B5:C9:77:5A:81:C1:BB:42:11:5F:A4:BB:C0
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 7F938F2D609591C44AE73CDB7F329E7B3116B0BE
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa
Signing time: Fri 17 Oct 2025 20:10:16 +0000
ROA not before: Fri 17 Oct 2025 20:10:16 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:93:8f:2d:60:95:91:c4:4a:e7:3c:db:7f:32:9e:7b:31:16:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Oct 17 20:10:16 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=0b764ac286f48b4ac1219f51f931bd87a1cd31fd70b20a8966b4606ddad6a2bc, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:ca:06:56:ff:05:2c:1c:f9:99:a7:d9:2e:
bc:38:9d:80:7d:21:50:6b:cd:06:50:3c:e8:de:0a:
e3:f9:35:d7:c0:52:b7:b6:7a:5b:c7:1c:5d:57:db:
84:d6:72:cf:81:04:0b:01:c1:12:ca:52:78:25:49:
31:62:c2:29:05:64:30:3a:7f:47:ba:c8:c8:3d:8a:
86:74:d2:72:ba:de:60:fa:96:5f:e3:14:ca:73:3c:
62:ab:a1:0b:14:94:92:84:5b:35:a5:69:53:be:ee:
56:e6:a7:ad:89:cf:bd:5d:2d:01:16:54:58:a3:31:
bd:ac:53:fe:07:68:ef:58:f8:bc:5d:a0:a3:62:77:
29:96:4d:67:42:28:b4:94:76:1b:5d:68:51:e5:14:
4f:7d:0d:b3:d4:7b:28:68:7b:c1:2e:c3:eb:a7:24:
e9:b4:63:8f:4e:ad:2b:a7:02:d7:00:9b:7c:ee:91:
8e:c2:ba:03:f8:d4:47:57:35:21:ae:3d:f3:17:d3:
24:ed:50:28:d9:e9:34:d2:31:7a:01:f1:62:f4:9d:
35:01:62:ab:4d:a4:f9:50:3c:6f:0d:12:64:06:c8:
18:db:20:d6:57:29:79:da:d4:6e:27:20:6e:9d:5f:
05:ba:99:4a:8a:8d:7f:5b:aa:a7:c8:d4:43:37:f5:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8B:33:47:B3:86:32:B5:C9:77:5A:81:C1:BB:42:11:5F:A4:BB:C0
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/f27ce014-c6b2-46f2-a1cd-fae19d53bdd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5000::/36
Signature Algorithm: sha256WithRSAEncryption
63:cf:4a:d7:9d:d2:39:1a:d6:a6:78:a5:ad:76:e1:95:2d:65:
52:a6:bd:09:f5:15:4e:78:45:3d:cc:46:a0:e4:19:a5:b0:2e:
c6:9d:03:a9:d3:45:cb:16:4e:22:e0:bb:3d:81:3c:3a:68:b1:
10:0b:98:97:6e:45:70:dd:20:e5:1b:9f:c5:19:80:d4:8f:6c:
2c:94:7a:8e:3b:1d:cb:f1:65:a2:26:24:f1:61:86:74:dc:f1:
a1:2a:56:66:07:1b:e2:1e:74:be:94:f2:d1:cb:ec:cd:c1:d0:
85:dc:c4:7f:66:75:47:a8:a6:c9:d4:be:07:3a:d9:58:f7:a8:
65:a8:c1:55:b7:2e:e7:aa:ae:df:57:c0:ac:39:9a:1d:cd:53:
86:45:a4:2a:c8:00:44:c6:6f:cf:86:44:ea:88:2c:e8:16:c9:
c5:92:fa:f8:94:fd:c6:fd:02:2d:ad:d2:e8:90:0a:85:bb:1c:
23:70:19:b0:ad:68:f3:fa:20:24:d0:cd:3b:51:74:32:60:c0:
17:6a:8e:72:d9:91:48:85:4d:dc:d3:b0:52:2b:89:5d:32:3a:
33:e3:80:5a:a0:46:84:5a:7c:cf:e7:b2:31:9c:dc:ce:d9:b8:
e6:9b:58:33:b5:dd:47:d5:90:cc:4d:d6:e8:a0:8a:ce:46:b4:
71:63:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:11 2025 by rpki-client