Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/02766fa7-98d0-43c3-93d4-dfe382af9841.roa
File: 02766fa7-98d0-43c3-93d4-dfe382af9841.roa (raw, json)
Hash identifier: 1HAgRolKVWCaJbCtdQheoGUaIRaYylwcZkIe3OoS094=
Subject key identifier: 2F:EE:2A:2D:57:E7:84:26:F0:4A:54:B8:9F:37:07:F7:B9:F0:7A:40
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6F3509CCCE885C23377C1314F7712A1FE9C48A7D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/02766fa7-98d0-43c3-93d4-dfe382af9841.roa
Signing time: Wed 12 Aug 2026 21:05:32 +0000
ROA not before: Wed 12 Aug 2026 21:05:32 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:2840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:35:09:cc:ce:88:5c:23:37:7c:13:14:f7:71:2a:1f:e9:c4:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:32 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=e232a5261b7fffd571a5283a38c181f51dfa74f315f0d7b06fe1085eeac9b8cf, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:6f:72:ab:50:4b:01:e2:ce:a8:31:46:ab:
a9:39:ed:25:3f:48:3d:bc:3e:00:a4:a8:4e:27:ef:
df:4d:47:8f:03:a9:7a:65:98:c1:64:dd:36:7c:1e:
03:72:75:66:5a:16:cf:32:4d:e6:2b:8b:3a:fb:24:
cc:38:75:a7:31:80:1d:67:ca:65:62:ab:e4:8a:71:
f4:f9:07:a4:2c:2d:f4:d3:e8:20:36:13:e1:5e:7e:
1d:3c:bb:e0:7b:e4:2a:4a:f3:99:33:0e:9d:fc:62:
34:05:70:d2:e6:2b:a1:15:c4:d7:75:d9:59:23:22:
eb:67:be:88:01:0e:63:97:d4:af:18:30:b3:68:3f:
a5:e4:2f:bc:6a:dd:a4:45:2f:74:d3:56:71:f9:aa:
8b:e0:5b:c0:29:7c:fd:a8:09:69:73:62:32:ec:56:
67:98:8a:01:37:07:f4:b4:c2:fc:9f:24:3f:78:2b:
56:e6:89:8b:b0:d6:eb:97:89:6b:81:ca:2a:06:5f:
f9:c2:6a:19:66:94:0e:12:c0:b3:db:d9:94:40:e2:
a2:2f:8b:2c:3b:0f:03:e4:c4:a7:17:f7:63:28:2f:
0e:f3:34:3a:ed:09:a8:c4:b3:83:20:18:96:bc:7e:
6a:94:bf:55:5b:45:b7:19:f9:73:e2:6f:4c:40:c8:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:2A:2D:57:E7:84:26:F0:4A:54:B8:9F:37:07:F7:B9:F0:7A:40
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/02766fa7-98d0-43c3-93d4-dfe382af9841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2840::/48
Signature Algorithm: sha256WithRSAEncryption
55:b7:5b:c0:0c:60:17:10:07:0d:28:73:ad:3a:9a:4d:e9:65:
90:7c:f8:85:20:f2:11:0d:8a:cd:24:86:d1:c6:2f:c1:cf:54:
55:c4:45:6f:cc:4e:71:8f:07:96:23:87:e6:fc:78:d1:59:f4:
c2:ee:2b:77:33:3e:74:40:2e:dd:8c:9b:41:01:ca:37:37:04:
a3:a7:96:2a:ca:b7:38:46:18:a9:00:7a:33:ca:08:20:1e:c8:
da:db:0c:94:b9:71:0d:73:83:5f:ce:25:c6:f7:bb:d9:c3:3a:
41:4e:b2:63:42:2a:75:2b:02:19:c3:51:c7:e2:68:22:b4:92:
15:37:85:24:9e:45:26:9d:8f:f2:4b:b5:2f:73:65:9b:89:42:
93:0c:5e:39:23:47:b7:00:5e:7b:8e:3d:a2:25:e2:5f:ec:3e:
5c:8b:4f:b0:31:ca:ab:69:62:b3:75:9a:0f:76:7c:66:cb:85:
20:c2:e2:62:9a:20:6f:38:77:93:81:9c:14:e5:c8:f5:a1:6c:
df:5f:3c:8e:dd:3b:83:6f:03:1b:08:44:67:69:cb:6a:77:d8:
26:3f:ec:9d:d6:8e:88:a4:92:cf:96:a5:81:ce:7f:ff:3d:56:
22:dd:d2:f9:07:f6:10:44:db:8a:f0:6d:28:fb:cf:e5:8d:47:
a9:a5:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:11 2026 by rpki-client