Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04068c19-fd66-461f-9dcc-dd7767979766.roa
File: 04068c19-fd66-461f-9dcc-dd7767979766.roa (raw, json)
Hash identifier: +KUgD+Rd9TMT9jvysufBPaGjt41STlpr0Mxg/fFhAZ0=
Subject key identifier: 3D:CC:F3:2D:D9:98:8F:6D:86:C9:2D:B6:76:B4:3F:F5:8A:B5:71:67
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 419A030586926EBC6B1CD7675E0D52C4C0AEDFCF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04068c19-fd66-461f-9dcc-dd7767979766.roa
Signing time: Wed 12 Aug 2026 21:04:16 +0000
ROA not before: Wed 12 Aug 2026 21:04:16 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9a:03:05:86:92:6e:bc:6b:1c:d7:67:5e:0d:52:c4:c0:ae:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:16 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=423c361125a9de0b4e1aca907fb4804bdc0b75f38172ef8ec71d3e635a1bf9ce, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:dd:1d:b2:aa:f6:53:f2:ee:2a:0e:ae:9d:
77:88:f7:83:9e:ba:04:c9:e8:65:b5:bf:b4:e8:96:
8a:a0:55:01:e3:d1:20:5c:9b:4d:b6:70:f7:2b:b8:
50:97:c4:d8:82:0f:ec:8c:86:b3:8f:a4:46:47:2e:
ff:06:aa:fe:73:e3:5d:df:d7:8b:e5:e1:f2:17:3e:
1d:a8:1d:bc:3e:cd:53:1c:45:62:66:12:38:e2:c2:
bc:44:ed:1a:4b:85:71:89:0e:05:62:91:6c:5d:84:
98:26:cd:e4:b0:2e:65:7f:fb:f9:80:65:d9:fc:89:
24:e3:b5:be:f5:4c:bd:d2:42:1c:06:39:66:a0:5d:
76:77:80:0e:b1:29:cb:b9:b9:75:68:94:6f:90:74:
70:fa:37:1b:63:59:69:96:10:da:01:ed:13:d4:fb:
d7:56:29:27:e6:a6:37:7a:d2:6c:a1:c4:af:9a:5c:
82:13:7a:46:1a:25:c7:cf:5b:64:d1:ad:b7:8c:4f:
b4:89:94:f4:6f:0f:e7:de:d1:72:70:64:11:ba:ef:
ca:d5:e4:49:40:74:51:c5:2a:92:6f:23:87:71:e3:
ec:ab:b7:5a:5e:76:30:5d:84:1d:b4:84:ca:fc:0e:
3f:6d:d0:c7:eb:78:b1:dc:29:07:de:4a:7f:f1:f7:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:F3:2D:D9:98:8F:6D:86:C9:2D:B6:76:B4:3F:F5:8A:B5:71:67
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/04068c19-fd66-461f-9dcc-dd7767979766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3::/36
Signature Algorithm: sha256WithRSAEncryption
89:fd:ae:5a:58:a3:11:2e:23:60:85:2a:c4:95:af:bc:9b:4a:
37:4e:08:54:26:e8:02:e7:fe:05:67:d6:44:83:5a:ce:0d:0c:
be:ed:ee:1c:3b:01:f5:62:d1:17:7a:26:dd:c0:7d:46:0f:1e:
bb:59:f4:9a:28:0b:c6:8f:ee:a3:99:6b:50:cb:d5:b7:b4:8d:
9d:28:a6:8d:7b:2d:4b:2b:73:57:ca:e2:f5:f9:3e:46:63:a8:
b5:88:79:b2:2c:f3:6c:02:40:d5:24:86:46:6a:8e:1e:d4:ac:
54:36:00:d3:1c:57:58:e0:3c:cb:b3:a1:ad:af:54:38:0b:c1:
3a:37:04:60:35:36:0e:11:15:a7:09:04:a4:f9:92:6c:bc:05:
2e:69:9f:c9:1e:9e:a5:3a:3f:82:ac:89:9e:24:64:3f:23:fa:
9b:7d:93:84:cf:db:b8:44:92:71:f9:90:63:22:0c:51:6f:2e:
72:2c:e0:a2:80:2f:53:3f:5d:aa:63:ba:16:9f:ad:f0:cb:e3:
cb:af:6a:14:d5:fc:8b:e1:ab:47:38:10:80:15:11:37:28:ed:
ab:a9:18:b0:fd:d8:ac:93:fa:b9:71:d8:18:6b:ab:7e:89:53:
96:d5:f3:22:3d:67:1c:53:a9:c4:4f:ff:27:74:65:a0:eb:ca:
48:6b:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:05 2026 by rpki-client