Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
File: 695716ab-c4db-435d-95fe-4143be62030e.roa (raw, json)
Hash identifier: XhETwDPi8nj43xF6FWQawHTwJR2VqqUr1jgjEheCSO4=
Subject key identifier: 8F:4E:BF:43:B5:A1:FB:ED:32:1B:D0:44:4B:AB:A3:D9:13:35:A3:3B
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 4DDDE88BF8117758224A1BDEDABB352A3045B86F
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
Signing time: Wed 22 Oct 2025 00:50:12 +0000
ROA not before: Wed 22 Oct 2025 00:50:12 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 139.79.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:dd:e8:8b:f8:11:77:58:22:4a:1b:de:da:bb:35:2a:30:45:b8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 22 00:50:12 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=6f8eaec4d7fe39a601dcca93264a03cf5015bc45b88dfb285d41d330ad2d88fe, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:b1:da:96:2f:eb:bc:bc:58:68:93:4f:3f:
17:7c:d5:97:67:67:1b:85:2a:e4:25:5e:53:5d:72:
6a:05:8c:42:e7:87:cb:4b:4f:db:af:dc:b8:a9:17:
6a:9a:f5:ac:0b:56:06:88:d0:ae:d7:47:a0:25:7a:
32:b9:2b:4d:d3:dd:00:5b:af:03:40:60:21:7e:d5:
a9:f5:8a:4e:c3:b4:b8:07:d8:58:69:f3:7c:2e:de:
0b:1f:68:02:fa:65:bd:d8:60:52:a7:42:91:ee:6c:
db:6e:5f:36:da:fa:4f:31:29:0c:0b:fe:0f:a5:29:
c5:8c:15:d3:13:cc:bb:d2:50:31:c0:a6:84:d2:af:
b4:4f:ff:93:f9:11:3e:33:65:1f:ff:c7:f2:bc:b9:
63:e0:ac:10:a3:e3:cc:b0:2d:c9:53:5c:bf:7b:d6:
c9:a4:d1:1b:86:fa:a7:30:a6:7d:2c:89:6c:4c:b5:
21:58:a9:90:79:11:27:5f:86:bc:ca:11:46:c6:17:
b8:ab:6a:73:fe:52:98:fb:a2:02:2b:4c:93:f0:b0:
5c:29:3a:0d:1f:02:84:7e:c9:67:ed:de:87:93:1b:
64:6a:39:60:dc:4e:53:c1:ac:1a:8f:63:96:11:bc:
a9:1e:4e:51:f9:0a:00:ec:62:69:fe:00:de:55:6b:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:BF:43:B5:A1:FB:ED:32:1B:D0:44:4B:AB:A3:D9:13:35:A3:3B
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/695716ab-c4db-435d-95fe-4143be62030e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:2e:92:a0:72:34:8d:ed:fe:ca:25:2b:42:65:74:3b:c7:3d:
7a:35:79:c7:09:6d:0a:b9:0b:92:13:8c:ab:56:2c:dd:d5:61:
ae:ac:a4:dc:1b:f2:e7:5c:f7:d6:fa:8d:44:f4:f9:8d:36:8e:
69:1b:31:dd:43:ad:96:6f:fb:bb:0d:d7:75:d1:e2:51:fd:10:
d9:c3:3e:d6:2a:91:c5:30:19:3e:a1:c6:65:79:64:cd:9d:80:
c8:2e:a8:64:9c:f3:87:5e:27:49:a9:bd:82:71:e5:e7:cc:11:
c3:42:1a:b2:1d:f0:cd:62:f1:4e:43:a3:e2:e1:50:c3:96:73:
f7:5c:19:d4:5e:46:e0:a4:48:33:a0:70:cb:0d:b9:83:0e:8f:
4c:f2:e1:87:6b:d6:a4:86:bf:0b:07:1f:0e:c1:5f:2d:3e:32:
66:a5:f4:8c:68:5e:bd:01:01:9e:59:9b:5f:34:34:fe:d7:ef:
9c:79:23:37:4f:19:54:1a:39:1f:96:c7:1c:3a:65:d7:3b:cb:
72:5e:74:5e:1c:95:5e:e0:36:bb:91:30:f6:ba:9a:a9:7a:21:
48:67:e4:41:96:c6:ce:de:1e:58:32:ef:0b:7d:e6:1d:88:8e:
b4:b7:30:15:47:51:6a:14:9b:21:9c:4d:6f:3d:dd:bc:7d:1a:
29:03:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:45 2025 by rpki-client