Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/16f62544-17f9-46a0-803e-7e5267dd06d2.roa
File: 16f62544-17f9-46a0-803e-7e5267dd06d2.roa (raw, json)
Hash identifier: szy40ZpuFW+HsLIE5mYVbQP09Z4ld7Zp6kn4WOzLuos=
Subject key identifier: 98:5D:32:F0:34:46:AC:AB:2D:9E:E4:75:67:EA:F4:8E:04:8D:B1:B2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6C78C149394510A953EDD142DCC6AA0B00FBE61F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/16f62544-17f9-46a0-803e-7e5267dd06d2.roa
Signing time: Wed 12 Aug 2026 21:04:23 +0000
ROA not before: Wed 12 Aug 2026 21:04:23 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:a::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:78:c1:49:39:45:10:a9:53:ed:d1:42:dc:c6:aa:0b:00:fb:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:23 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=fe426454e27fd833f011539a69dcc9465b64c7a0f503179d11b9e6f0dceca71e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:65:bd:e8:fc:04:28:6b:74:f8:6a:50:1f:
cf:ac:13:b4:6f:95:11:04:0a:97:4a:5a:25:57:2d:
b2:b4:3b:20:bb:2b:cb:6b:db:44:6b:23:15:d1:8e:
ad:97:4b:84:60:57:59:0b:c7:95:37:0f:81:6e:08:
0e:56:d5:2b:e1:30:ec:ec:9c:4e:bd:f9:e4:3d:fd:
b8:74:4a:98:a3:9e:d3:7f:03:c4:12:c5:73:ba:e1:
3a:66:00:4b:4b:95:65:14:8c:fe:d1:44:3c:a3:d4:
24:3d:ac:07:82:a6:41:b6:9b:69:4a:5a:e2:34:54:
64:20:c6:ba:4a:dd:f9:20:25:29:a6:1c:cf:09:61:
e4:7f:5f:5d:98:9f:aa:9f:1e:7b:41:5c:ea:56:5c:
4b:7a:85:b7:22:11:b8:9b:06:f8:68:ef:a1:5c:83:
28:ca:e6:51:c6:4f:f5:b7:e6:3e:69:a6:2c:d9:74:
e8:97:a1:03:bf:47:47:f8:34:63:d0:b2:5a:a7:97:
2c:03:61:6f:54:ab:34:45:be:ab:b8:ae:40:2e:1c:
ec:50:b0:72:3a:ec:1f:bf:9e:56:2b:9d:7f:60:ba:
54:0c:d0:a5:8d:2a:c3:23:70:9b:16:51:fa:a1:01:
30:e2:12:5b:c9:fa:6f:bc:bb:da:92:c6:d8:73:13:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:32:F0:34:46:AC:AB:2D:9E:E4:75:67:EA:F4:8E:04:8D:B1:B2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/16f62544-17f9-46a0-803e-7e5267dd06d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:a::/47
Signature Algorithm: sha256WithRSAEncryption
a9:0e:82:22:fe:d6:6f:42:26:31:93:dc:b8:6e:18:70:a4:c8:
6d:aa:84:d8:67:7c:78:2a:06:e9:bb:c6:f6:c0:7b:24:47:9f:
eb:c5:16:a8:6e:77:d1:42:b6:3e:54:3d:e7:cc:a3:b9:dd:bb:
70:d9:12:d3:40:53:0b:0d:c7:de:83:9d:41:e8:76:48:af:b9:
77:31:8d:9a:0d:4f:4a:f0:e6:7e:be:71:18:52:cc:53:3f:15:
08:22:85:31:0b:9f:e1:86:1d:09:dd:0d:06:a2:51:00:a8:4f:
75:bf:44:a4:38:1d:24:74:22:88:9a:c6:b0:c9:e4:0e:7b:5e:
13:db:1e:e5:4b:85:92:fb:16:63:ef:2f:f9:2c:69:23:e0:2e:
cc:75:5d:e6:2e:2f:7b:a4:76:b1:75:84:da:da:0a:0f:7f:35:
eb:0b:53:66:0b:ac:d2:05:0e:67:0b:a2:e3:b5:0f:2e:cb:89:
37:a2:a8:28:b0:23:e1:81:0c:8a:68:26:1b:27:a8:a8:eb:d9:
5b:86:e3:03:89:0a:d0:1e:5f:4a:9f:49:c4:66:c1:6a:58:e8:
6d:af:42:69:09:95:a0:6c:ee:5a:0d:f8:09:83:c3:b0:c2:a9:
72:89:9d:25:57:79:30:96:68:71:6a:e5:94:37:b3:23:02:2a:
7a:37:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:16 2026 by rpki-client