Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
File: bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa (raw, json)
Hash identifier: RKl1T4Yi7mw3mukDlCf95gvmf8jmR+PWaJpDiCk8KB0=
Subject key identifier: FC:39:BD:20:C2:5A:E4:1F:BC:B4:EA:29:7A:B1:E9:07:57:B7:6E:EA
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 1D89110CD9F5D1B5262144FAB0D0C0D0D6C48C11
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
Signing time: Fri 31 Oct 2025 02:00:22 +0000
ROA not before: Fri 31 Oct 2025 02:00:22 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 83.118.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:89:11:0c:d9:f5:d1:b5:26:21:44:fa:b0:d0:c0:d0:d6:c4:8c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Oct 31 02:00:22 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=d43f7cbe20961ff71a23baf728885b1177d9ddc5ee10fa1f64fb19f6ac2fe234, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:81:f0:68:77:92:bc:f9:86:f2:dc:56:09:
42:15:bd:8f:7a:b6:94:97:71:62:dc:07:da:1e:b5:
ea:be:50:ad:86:bd:73:ae:99:d3:4d:47:63:45:b2:
d2:ac:e4:9a:53:43:04:fa:77:3f:ba:00:c8:f5:67:
2c:18:4a:f4:79:37:6e:ab:07:64:54:e8:3b:d2:aa:
0e:a3:60:8b:4f:83:a4:d8:16:c5:f9:f8:6d:6e:bc:
f5:9b:e1:f5:e0:c4:dd:ff:03:ae:04:54:e1:bb:fc:
f8:61:1f:4b:fe:c7:b5:78:4c:9f:e0:43:f1:9e:76:
ce:18:39:ad:86:e4:45:90:a6:4f:d2:5e:53:13:9d:
33:69:a4:2b:2c:37:23:db:5a:25:d5:67:63:7f:18:
25:e7:4b:96:d0:b4:64:14:0d:40:0b:e6:cb:59:f7:
62:f4:ae:57:d5:c0:a1:99:34:8e:4a:36:a9:67:17:
95:b6:91:d5:bf:5a:f0:2b:8f:e1:b7:63:28:45:12:
7f:c6:f8:71:66:8b:0c:27:07:fe:76:04:c4:29:fe:
38:45:1a:09:47:67:c3:8b:a6:2d:83:ac:90:56:a9:
47:c9:30:d9:a0:53:c0:70:3f:fa:39:58:ba:57:1a:
c8:1a:8b:ef:8e:2d:6c:a7:fd:75:af:cb:1e:80:10:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:BD:20:C2:5A:E4:1F:BC:B4:EA:29:7A:B1:E9:07:57:B7:6E:EA
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.234.0/23
Signature Algorithm: sha256WithRSAEncryption
05:8b:96:0b:42:76:27:12:f9:97:b5:1b:68:81:fd:88:c8:0c:
a4:e8:96:79:e8:0b:c3:46:b7:45:f8:f6:5e:79:c6:7b:d7:cc:
bb:8d:a5:c7:f8:fc:24:1f:aa:16:27:ed:8c:f1:18:83:21:8b:
98:45:24:91:26:d1:75:d7:d4:01:21:ca:3c:12:6e:a7:20:6c:
b6:f0:1f:9e:21:45:80:7f:7b:91:54:51:51:e2:a8:85:c5:88:
30:db:5b:5a:ff:ca:c6:e0:74:a3:41:8e:35:df:33:82:64:93:
cc:3c:2e:2e:53:ca:ee:42:95:f3:08:31:91:1d:db:66:ee:39:
76:ab:4a:f3:4e:7e:1d:a1:0d:36:8c:af:d8:8a:bd:8a:20:40:
4b:f0:0e:8a:15:30:f6:31:c3:36:6f:14:61:c0:c9:e6:89:b4:
c4:6c:75:06:9f:61:5e:ad:9b:b1:0f:fb:52:00:6d:c9:64:4d:
da:8a:fc:2d:41:8c:e8:99:e7:7a:31:ce:5f:41:b1:9c:33:ac:
1e:a8:37:ed:8e:4f:dc:51:67:b7:3c:79:0f:d9:34:b8:00:de:
c3:70:3b:81:0c:06:ab:c9:01:3a:c1:f9:53:e5:7e:5f:0a:bc:
52:46:e9:5e:b3:2a:00:13:0b:f0:96:ba:b4:c9:33:a4:33:ba:
ce:04:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:38:56 2025 by rpki-client