Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0d681ff0-00e4-4cdc-a61f-cfca5f257c52.roa
File: 0d681ff0-00e4-4cdc-a61f-cfca5f257c52.roa (raw, json)
Hash identifier: i4X8k8rL9FD8x3EaVL8UZ3ixYOCUN7ZiyjxaRPn05DY=
Subject key identifier: 66:30:45:38:C0:8B:15:1F:27:8E:36:27:66:B6:AE:53:CE:16:45:C1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3FD0A674E39050F67BF4E113237630A4B7DE0E5A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0d681ff0-00e4-4cdc-a61f-cfca5f257c52.roa
Signing time: Wed 12 Aug 2026 21:04:17 +0000
ROA not before: Wed 12 Aug 2026 21:04:17 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d0:a6:74:e3:90:50:f6:7b:f4:e1:13:23:76:30:a4:b7:de:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:17 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=be8b5045159fee2ef8156722356c99bb4b093333fc5d98b0bea8e6f8ba546038, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:98:c0:e7:4f:7c:0d:2b:30:d2:72:19:46:
f3:c1:d8:ed:a5:ac:97:98:27:f5:d2:b0:c8:e8:5d:
1d:72:ed:1f:9a:1f:6e:62:36:e2:5a:cb:c1:c3:3c:
53:4f:b8:33:76:17:8c:2b:53:2b:74:af:7e:7f:84:
d2:86:95:9e:df:9b:b0:9b:86:97:c5:9b:bb:b4:87:
ba:3c:3d:ca:25:58:0a:db:c9:05:77:03:d4:b1:60:
9f:92:32:25:d8:9d:ec:69:76:15:7c:33:c3:49:46:
e5:58:b2:d8:fc:ac:36:00:a4:32:92:92:71:ce:bc:
08:f5:ab:6e:a4:5f:52:e7:ec:44:57:f8:85:6f:ea:
3d:30:0f:5f:f8:01:ae:33:c3:ea:ca:a3:8e:72:3f:
1d:7b:a4:a1:d2:23:37:0c:09:57:1b:86:95:3b:f2:
63:82:ca:92:87:0e:f3:98:7c:a1:2b:6a:30:0f:f8:
19:a1:58:fc:f2:f0:a3:9a:1a:9b:4c:a7:94:57:09:
04:46:16:02:f4:c1:48:da:16:70:35:7e:61:ea:35:
c3:18:57:b1:18:90:b3:8d:f6:81:e3:cd:38:d3:33:
3f:64:ed:99:58:d7:44:18:fc:a9:75:2a:f8:2c:b2:
06:c8:19:e5:b9:aa:1c:6a:b6:08:80:c4:6e:79:3c:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:45:38:C0:8B:15:1F:27:8E:36:27:66:B6:AE:53:CE:16:45:C1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0d681ff0-00e4-4cdc-a61f-cfca5f257c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5::/36
Signature Algorithm: sha256WithRSAEncryption
30:11:e6:73:59:f3:83:ca:c3:0e:fe:c0:80:5c:93:04:0f:c1:
88:11:3e:ee:9a:ce:36:3e:08:19:cb:d5:e2:0e:52:cd:be:b6:
33:57:4a:31:79:7e:7b:93:fd:ac:bc:27:86:ee:3d:63:73:d3:
ba:e4:02:8c:6e:cf:e2:5a:94:ab:01:83:a9:d4:d8:ee:76:bf:
ab:0f:d5:c5:92:a5:e9:8a:6c:e6:94:eb:bd:10:20:23:fe:e0:
52:56:92:af:a1:1e:9c:08:5e:26:cb:b4:f0:14:69:de:c0:c6:
1b:cd:c6:e8:9a:83:c4:ac:ff:7b:26:cb:7f:e4:c3:5b:c2:3c:
b9:df:f1:8a:55:b5:fa:c2:b2:3a:a2:60:56:e9:98:2d:b5:9f:
cf:8d:42:0d:2b:aa:08:be:09:79:a6:c6:03:34:b1:b1:43:87:
4b:8a:9c:6a:46:d3:7f:11:b0:a3:0c:64:30:0f:8b:f2:86:5f:
f0:54:92:61:3c:31:4b:e2:28:f7:80:23:37:65:e5:2e:83:eb:
42:35:5e:b6:e3:72:5d:3c:3c:d8:ef:32:c5:13:e1:c5:5f:b1:
e2:fe:cb:7d:84:a2:fc:55:ba:6a:a9:81:cf:c9:62:27:9b:f8:
c2:ff:93:f2:8d:33:54:a5:e8:b9:4b:26:d3:fe:0e:71:47:bb:
cf:be:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:09 2026 by rpki-client