Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0a85d2ac-0aa4-462c-a21f-59fba49f87e0.roa
File: 0a85d2ac-0aa4-462c-a21f-59fba49f87e0.roa (raw, json)
Hash identifier: f+CoArll2rYp/NV1jeqbgF7oDw2tHM0ABVmnUJjQHdA=
Subject key identifier: 17:80:23:B3:B9:53:73:12:3C:10:79:DC:89:1B:C1:11:CB:2B:90:7F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3014E4CE7B53391F3F0C5A62F6AC9D78808D534E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0a85d2ac-0aa4-462c-a21f-59fba49f87e0.roa
Signing time: Wed 12 Aug 2026 21:06:44 +0000
ROA not before: Wed 12 Aug 2026 21:06:44 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc1:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:14:e4:ce:7b:53:39:1f:3f:0c:5a:62:f6:ac:9d:78:80:8d:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:44 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=570acdf4b510074a57dfc229b67bc3df63b707b3bc75b76b881f76ea604287be, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:cf:13:d8:83:4a:a3:a8:9d:74:d5:38:e1:
d1:66:41:5f:48:b3:df:1a:64:b7:12:e4:bd:d1:80:
1c:ca:3c:25:8a:29:f8:0f:be:d6:ac:fa:e2:27:62:
9a:73:1d:7a:44:68:87:68:47:a0:4c:db:66:d1:cf:
9f:d2:c6:94:ab:0a:c3:7c:98:63:14:79:b5:3b:8b:
a0:07:44:07:35:84:0c:d0:2c:d4:06:f2:e9:d4:51:
4e:ac:38:c1:6a:18:41:24:91:df:c3:92:5c:22:ea:
10:87:b4:11:ff:20:c7:16:40:71:28:b6:62:06:6a:
bd:c5:87:0c:aa:45:23:39:ea:44:54:d3:0e:10:68:
41:35:17:f4:07:64:11:6d:33:1f:c5:8b:98:77:c0:
a0:a1:1f:0a:3c:b9:40:1c:70:26:98:dd:2f:32:94:
21:63:b5:ca:dc:8b:3a:49:46:ff:14:f4:7f:35:9c:
3a:e3:08:5f:78:ed:26:56:39:78:a3:11:cf:25:cb:
96:4d:72:a8:c4:e8:ab:66:9e:bf:e7:0a:14:5b:80:
1c:a2:6a:cb:a0:15:d6:fd:aa:ca:d7:e2:fa:af:0a:
64:e3:48:3e:a4:10:29:0a:18:83:b4:1d:9f:66:88:
9c:6a:48:3c:d8:4c:e6:48:8c:be:04:12:82:ed:bb:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:23:B3:B9:53:73:12:3C:10:79:DC:89:1B:C1:11:CB:2B:90:7F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0a85d2ac-0aa4-462c-a21f-59fba49f87e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8000::/38
Signature Algorithm: sha256WithRSAEncryption
21:bc:e8:64:b7:ac:19:7c:33:f1:c4:1d:96:e6:46:1a:cb:9b:
dc:d5:81:e5:58:22:f6:84:9e:cc:a2:68:c9:53:20:2b:e0:51:
6d:77:0b:5f:a3:93:02:d1:87:06:57:05:f1:01:0b:30:53:90:
61:51:92:dc:7f:27:3e:be:d4:c7:a6:ab:24:e9:27:14:b2:e1:
8b:27:ec:a1:17:12:d7:e7:bc:f7:1d:a9:ba:de:16:25:8b:ed:
58:4a:c2:ee:87:a3:0b:32:8f:6d:75:1e:6d:a3:20:4e:ab:a0:
b0:34:b6:54:44:11:91:32:46:f5:df:d1:44:56:ac:d2:cf:a1:
65:40:fe:ff:10:89:a1:57:38:15:a7:09:56:43:31:66:08:03:
9f:77:95:0f:8a:9e:ce:82:18:93:a7:7c:0a:cc:a0:c0:f1:d1:
76:00:5f:40:8a:06:96:c8:96:f1:79:49:57:b1:60:3a:d2:3e:
88:cc:d1:95:f4:19:53:54:4d:ee:a0:6a:45:23:f7:d0:76:a3:
3e:89:ca:e8:46:4e:9f:73:d7:24:5d:31:37:43:fe:25:ff:6c:
1f:3a:c6:1e:e3:a7:0f:cf:8c:ca:f5:31:5d:81:33:da:0b:0f:
df:37:49:bb:b7:4f:19:79:d3:9a:98:05:f0:d0:59:49:35:6d:
98:ac:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:11 2026 by rpki-client