Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03acde59-5729-47d1-8d31-622c79909b86.roa
File: 03acde59-5729-47d1-8d31-622c79909b86.roa (raw, json)
Hash identifier: 6OZxJVBqYul/Cad6fKNI966kZFlH2InE5vrJ+93hVz0=
Subject key identifier: 30:D6:C9:9B:22:63:63:2C:66:D1:82:DA:07:0F:B6:17:D4:27:60:71
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5796752528B78D0BC95467917D065AEA435B824D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03acde59-5729-47d1-8d31-622c79909b86.roa
Signing time: Wed 12 Aug 2026 21:06:55 +0000
ROA not before: Wed 12 Aug 2026 21:06:55 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:96:75:25:28:b7:8d:0b:c9:54:67:91:7d:06:5a:ea:43:5b:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:55 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=9b291d6c163147234b74c23bd63cf35c362f8320c55f625540dd6496d6f96fcb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:fc:80:b0:d6:43:5c:d0:e8:31:a6:49:72:
12:3f:8d:04:32:62:02:4b:74:04:14:e4:bb:17:34:
8c:41:1f:f6:69:9d:d2:d6:37:bb:1a:c9:60:a4:23:
19:7e:58:75:66:c5:1f:5b:a7:15:cc:52:8e:53:9e:
e2:f4:40:fb:cd:2d:59:27:1a:74:db:b3:79:dc:0e:
a5:92:1b:83:c9:e0:8f:22:f3:c7:3a:7e:4a:eb:14:
b7:8a:4a:44:3d:5c:e5:c0:8e:1b:31:7e:b8:61:dc:
e5:1f:36:c3:15:18:ef:92:21:cb:b3:ed:4e:b7:eb:
e1:8f:a2:c9:e4:fb:50:08:05:3d:80:77:d4:75:50:
54:a9:a7:d2:bb:94:a2:55:94:67:a8:8e:82:97:05:
84:47:83:fb:d5:d0:b2:f4:5e:9b:69:71:42:cb:fc:
81:88:34:0b:ec:d3:3a:43:69:65:12:b4:3d:95:32:
e4:2c:10:8b:58:be:2e:b0:0d:58:64:22:b0:4c:4c:
68:7c:20:e7:da:06:a4:60:1c:f0:4a:b1:84:2e:00:
09:37:85:90:db:3c:8b:a5:89:06:ba:6b:83:91:16:
b9:ed:86:91:84:11:be:a9:58:db:40:49:3c:1c:1f:
6b:01:d2:38:20:ac:ff:93:68:32:1a:15:3c:d5:af:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:C9:9B:22:63:63:2C:66:D1:82:DA:07:0F:B6:17:D4:27:60:71
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03acde59-5729-47d1-8d31-622c79909b86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
48:57:51:7e:af:69:b3:80:9b:2a:a8:74:37:28:58:60:63:b3:
c5:0b:53:49:c1:6b:36:3b:40:07:c4:1f:22:30:ec:b4:95:84:
43:85:95:58:c8:cf:cf:0b:eb:30:0d:a2:ea:b6:f7:74:6f:0d:
1b:f5:c1:6e:20:f9:9b:ca:1f:e5:d5:94:43:70:5e:ed:d4:8c:
83:3d:d7:a6:17:6d:29:57:9d:df:42:af:79:f9:f9:d0:bf:5a:
e6:6a:a1:14:79:49:ab:48:ef:4d:c0:89:e5:5b:cc:d4:be:8c:
c3:5b:d0:7a:68:d6:97:5f:06:2e:ed:75:74:3e:7d:14:76:dd:
42:b9:a2:ea:b0:ba:43:21:f4:06:be:b9:e9:b6:be:ca:ce:6d:
a5:12:7b:95:0c:d8:7d:0b:aa:2e:2f:82:c9:a3:4f:67:c8:78:
89:93:fe:49:a9:45:7e:68:c2:c2:53:71:57:7d:41:7d:d1:f6:
47:d1:b5:14:60:29:d2:f5:d0:f3:9d:97:37:9f:ed:87:b9:0b:
f0:ad:9c:1c:4f:8d:5d:c8:fa:6f:fd:59:6c:05:02:23:4f:dc:
cc:97:ec:2f:de:b5:6e:dc:34:ba:06:27:65:50:33:93:ad:c4:
b3:4b:f8:02:88:82:de:a2:bb:45:7a:d1:ae:44:e3:40:8f:a2:
fc:7c:29:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:46 2026 by rpki-client