Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/14c89f5a-e81a-409d-bc58-42bed3a3217e.roa
File: 14c89f5a-e81a-409d-bc58-42bed3a3217e.roa (raw, json)
Hash identifier: W/C+0ioYsy7nxOHuiml15yA/NvE68iYnQTbIL9Fyz6g=
Subject key identifier: 99:BE:4B:CE:BE:3C:D0:79:87:09:7E:4B:C5:FB:29:16:31:2E:6B:FD
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6FC90A0B749A06D217DE271816BDBA24501E4083
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/14c89f5a-e81a-409d-bc58-42bed3a3217e.roa
Signing time: Thu 30 Jul 2026 01:30:36 +0000
ROA not before: Thu 30 Jul 2026 01:30:36 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c9:0a:0b:74:9a:06:d2:17:de:27:18:16:bd:ba:24:50:1e:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:36 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=db86afe4bd1b1cd82f83a5987e9485a8083d0597bec1df24fc90b84f5bafc3e0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c2:f7:98:82:f3:4e:56:fc:6a:66:54:a9:59:
1b:28:20:2c:5c:eb:04:48:0e:e5:2d:62:f2:7d:0e:
7c:c1:a9:40:70:d0:6f:91:4c:b9:f2:a5:92:41:77:
df:b5:c8:a7:cc:75:52:0f:a8:eb:2d:1e:7a:89:cc:
15:c5:8d:b5:af:4b:f6:e5:47:5c:38:15:0c:6e:4b:
1a:6d:98:71:cc:c4:ee:3e:db:27:76:88:ae:49:8b:
1a:59:46:5b:b0:9b:73:38:43:56:dd:20:6f:66:83:
ac:44:d4:32:5d:38:4b:f3:bf:60:18:2e:e1:14:72:
17:cf:08:29:df:70:c6:69:78:40:b0:a6:1e:8a:c2:
4f:3a:40:1d:75:89:34:0c:48:6f:fa:8f:86:80:68:
54:cf:f2:56:f2:72:0c:47:91:87:1e:ac:69:b8:e0:
31:7c:a0:03:ad:a8:23:8a:00:6f:38:32:82:95:39:
0b:25:72:dc:75:6a:8f:9d:25:79:9b:29:98:3c:b1:
30:0d:a9:ac:1f:19:2f:dd:fc:80:6f:47:64:c1:4f:
60:39:81:69:b7:c6:54:d9:bd:a1:90:13:8d:86:f6:
e4:3f:5b:84:45:23:af:f4:75:86:f8:1b:c2:9c:8e:
69:1e:02:6d:35:20:0b:24:d6:72:e3:1f:c9:f7:6c:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:4B:CE:BE:3C:D0:79:87:09:7E:4B:C5:FB:29:16:31:2E:6B:FD
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/14c89f5a-e81a-409d-bc58-42bed3a3217e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6800::/40
Signature Algorithm: sha256WithRSAEncryption
4f:57:92:1f:f7:2f:b4:06:61:94:16:88:62:c2:88:0f:19:e2:
c6:79:d2:6d:1d:50:59:2c:e0:2a:8b:a8:f9:25:bd:69:88:6e:
e4:32:ef:4d:8b:b9:16:5e:2c:f4:78:14:dc:c0:2e:f0:a0:9b:
00:8f:2a:d8:c4:6e:b4:6a:dd:96:e1:55:ed:b6:80:46:57:17:
93:36:36:06:24:2e:2d:ca:3f:1f:cc:d5:3f:46:6a:40:34:ed:
f2:9a:8c:37:cc:ee:0b:a8:eb:65:6d:8f:c1:4e:eb:da:01:cb:
c2:72:84:1a:7a:f7:b2:f3:ce:23:1a:b0:75:3d:4c:c0:d0:61:
d4:08:99:6c:16:2d:ee:5a:33:dd:34:50:19:92:8c:d1:d0:0e:
65:c0:63:40:1c:36:77:a7:ac:fa:4a:34:11:1f:ec:69:ba:78:
29:e9:75:06:04:2d:e5:c1:c0:41:d0:54:1e:c6:aa:2e:d3:62:
c5:d9:5f:4c:7a:8b:cf:ba:78:96:17:89:80:c2:3b:56:44:40:
1d:03:48:ef:96:d6:89:a5:a9:8d:9b:d9:95:1f:27:61:c4:56:
db:1a:8a:50:29:d7:b2:46:91:51:56:cc:ca:a7:9b:8a:fc:1f:
1d:31:19:e4:44:51:7a:2a:ce:10:21:e5:e6:ff:67:c3:91:c5:
5e:e3:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:28 2026 by rpki-client