Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/17829feb-1a8e-495f-9b2d-dc070ae84a53.roa
File: 17829feb-1a8e-495f-9b2d-dc070ae84a53.roa (raw, json)
Hash identifier: XPqYT7yFoNHNWGzDQrkNACU60NYe3F4zRvF34+uJjzE=
Subject key identifier: FC:CF:C4:B0:8A:A0:19:11:75:DE:07:0A:57:C1:33:21:C1:D6:FE:3F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1754055A794D3885A087CD5181B01532A6C53C9D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/17829feb-1a8e-495f-9b2d-dc070ae84a53.roa
Signing time: Wed 12 Aug 2026 21:05:34 +0000
ROA not before: Wed 12 Aug 2026 21:05:34 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:3008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:54:05:5a:79:4d:38:85:a0:87:cd:51:81:b0:15:32:a6:c5:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:34 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7d89e62036b73d24982f41d5bcb9d59106891e3eb6424e69e700c091a888042d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:ce:c6:21:34:0d:ff:96:80:8a:7f:63:15:
e2:a9:34:7d:4c:c6:72:ea:27:4f:a9:79:e3:83:eb:
66:cc:80:7a:90:96:a3:4d:ff:ab:1c:eb:6a:f8:46:
f3:fd:19:b8:cb:bd:cb:3c:4d:7d:ca:df:50:9f:97:
da:62:e3:78:01:49:9d:3f:4e:38:b9:e0:9c:4f:68:
80:84:77:af:91:c0:0f:ab:d5:ef:f8:d4:22:cb:ce:
4c:6f:ef:4b:16:59:e3:0f:2b:db:aa:b5:68:87:54:
e6:fe:e1:6b:1b:0b:25:6c:38:41:88:92:86:da:90:
15:11:6b:82:0c:ff:17:2e:2c:69:1d:94:f7:da:d3:
c9:db:cd:e7:fc:0c:f9:d3:b3:76:76:e5:1a:41:72:
9f:b0:e4:8e:6f:bd:a5:d9:c4:cc:a0:7e:65:10:f4:
c1:8d:a1:f6:23:f2:36:31:cd:4f:80:1b:b6:0a:38:
7c:70:2f:e3:48:5b:26:4f:0c:c7:99:30:d6:2e:3c:
c1:79:82:f3:5d:d1:07:f3:29:4f:43:7d:4a:93:fb:
8b:7e:00:42:45:78:59:a9:5e:52:96:7f:a6:ec:f3:
c5:63:84:6b:7d:ec:ce:c7:d7:28:3a:f4:d0:3b:13:
ec:f5:bc:c1:72:7f:19:f2:ef:ec:32:26:47:03:98:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:C4:B0:8A:A0:19:11:75:DE:07:0A:57:C1:33:21:C1:D6:FE:3F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/17829feb-1a8e-495f-9b2d-dc070ae84a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3008::/48
Signature Algorithm: sha256WithRSAEncryption
42:8a:55:e7:19:a0:70:c1:1a:da:49:13:cc:00:c7:fc:19:f4:
f5:d8:f4:64:bf:af:c1:68:c0:71:f6:1c:2c:59:41:b8:de:31:
07:32:4d:97:5f:ae:a3:35:ba:24:77:bc:34:bb:e6:09:1b:06:
c2:a0:5c:f2:f6:f2:ac:a2:66:da:21:eb:5d:bf:32:de:69:0f:
8f:c8:70:8d:9f:26:4c:ca:56:4c:81:c7:59:a9:e1:e0:2b:e7:
86:ca:e7:00:8f:c1:80:11:b7:86:9e:63:85:c2:40:ec:b2:78:
e4:7a:40:24:bc:9e:f0:e9:2d:9c:79:27:f4:f7:68:48:8f:89:
87:d1:33:51:90:0c:b2:b5:01:f0:f7:f0:a2:94:1e:52:3e:19:
e4:a8:0d:d8:28:18:f1:40:a4:a2:71:a0:9c:a9:a1:e2:00:1c:
33:f6:be:ab:e5:a8:9c:b3:b3:fb:57:58:26:f1:0b:72:46:bf:
a8:a6:8d:9b:96:d0:cb:6f:94:6f:81:c6:66:2b:35:88:72:c2:
74:20:e0:0c:cb:28:7b:01:d9:78:4a:40:a6:25:bb:99:5d:14:
04:5d:2c:2f:1b:ad:5a:71:10:4b:62:d9:db:74:93:a1:ea:dc:
fd:d9:bf:3c:ff:e6:11:db:39:d5:a2:0f:dc:0b:c9:4a:53:a3:
a5:1f:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:39 2026 by rpki-client