Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/11098277-95a7-4f99-bb91-f65381696681.roa
File: 11098277-95a7-4f99-bb91-f65381696681.roa (raw, json)
Hash identifier: tYYFG6KkNK4CqR3if7o9FxMtIddXcAp9TcLecTL+aMc=
Subject key identifier: 63:76:67:68:77:BC:8D:D0:61:7F:36:C4:32:96:B6:E6:B7:67:89:E9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 05D9460BCABD69F936310B828F407E7771ACE58A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/11098277-95a7-4f99-bb91-f65381696681.roa
Signing time: Thu 30 Jul 2026 01:30:39 +0000
ROA not before: Thu 30 Jul 2026 01:30:39 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d9:46:0b:ca:bd:69:f9:36:31:0b:82:8f:40:7e:77:71:ac:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:39 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=b17089ccbb011ad8638cfd39d8ef45e7845c2b9d1bb13e5eb1948f2240e4f5a8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:b2:00:10:42:fc:2c:53:17:4c:a4:11:eb:
64:b5:0e:83:3e:49:09:8e:6f:00:d0:b2:79:e4:4c:
2c:2c:19:76:07:3d:23:5a:0d:de:a8:3c:11:0d:45:
96:11:5f:4b:2e:7d:20:3e:00:7a:20:7c:eb:68:a6:
1f:16:4a:6b:5e:fd:86:ed:35:9d:b4:08:b4:70:83:
3b:d1:9a:7b:a1:67:dd:f3:41:98:e4:37:91:36:d9:
7c:c0:30:90:e7:33:52:8f:cd:0d:ed:75:35:44:4d:
18:0d:3c:22:f0:39:00:4f:09:7d:30:af:08:87:8d:
99:bc:d3:6a:6d:d8:9a:54:69:5e:a0:15:4f:5a:9a:
00:5a:47:c6:ee:1d:dd:da:10:f4:14:80:40:ee:b0:
61:6e:3d:a9:de:d9:5d:f9:cd:aa:f7:cf:76:23:bf:
96:f9:3d:b0:cf:a6:23:3d:b2:a3:b5:52:ff:7d:78:
75:24:d4:ec:1f:22:7f:87:a1:fd:0d:28:fb:f8:46:
92:91:6c:65:f5:1a:96:f5:3c:fe:d5:a5:46:52:b4:
b2:2a:77:f4:75:bd:f4:c3:56:09:9a:b0:d3:12:19:
e8:4d:97:2f:5f:68:a0:52:8d:8d:dd:34:04:17:4c:
cb:91:d6:78:9c:d3:2a:e8:0e:7b:9f:7b:a0:a6:95:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:67:68:77:BC:8D:D0:61:7F:36:C4:32:96:B6:E6:B7:67:89:E9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/11098277-95a7-4f99-bb91-f65381696681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
49:fd:2b:47:02:e3:c8:65:60:cc:ee:18:39:21:e8:6a:a3:26:
5d:e5:38:7d:31:68:a3:0d:53:4b:60:bc:2a:5b:a6:89:df:82:
4d:de:cd:98:42:d2:d2:38:bf:1e:aa:a0:63:19:2f:e4:b1:f2:
81:12:ef:81:53:2a:8a:7a:0d:51:a5:4e:a8:57:85:78:56:2d:
aa:b7:3a:73:c2:37:38:b3:03:cd:6d:fa:5c:11:60:27:64:c1:
ca:6f:ac:06:8f:07:62:e8:a4:7b:32:26:94:3c:a3:bc:7f:ad:
75:99:33:d0:c2:95:ff:5e:e1:a5:4e:97:97:b0:1c:f1:b7:83:
09:80:33:8e:bf:67:fc:a2:dc:af:26:6d:73:d0:8a:63:3f:cf:
74:ad:00:6f:69:c2:dc:fe:fa:fe:28:c9:24:02:5e:a7:1c:60:
a2:b9:16:b3:f7:89:64:2c:27:f5:90:93:45:32:ce:4c:87:a6:
f8:fb:8e:f4:34:a9:8c:79:67:6a:5e:86:3a:6a:a7:a0:78:a9:
12:c5:40:e4:49:18:68:65:f9:a4:0c:d0:fe:09:1d:4d:19:43:
08:0d:1e:cd:96:ff:b1:c8:5d:f6:8c:67:db:47:26:24:67:f4:
7f:e3:04:7d:22:d2:92:73:93:9d:4b:c1:f6:6d:f5:0b:17:9a:
d6:5f:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:17:45 2026 by rpki-client