Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da6101a-b455-4c77-ab88-725d42674003.roa
File: 1da6101a-b455-4c77-ab88-725d42674003.roa (raw, json)
Hash identifier: 9Sj5UUYoUTF76bYKqkgtskyW1FGv/NDUwHXDdGt4fOA=
Subject key identifier: 96:FF:45:E9:C3:09:0F:A7:7B:81:84:45:B2:D7:11:FD:92:81:5F:37
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6973506DA7686895721B0B433CF2F054B5E85C50
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da6101a-b455-4c77-ab88-725d42674003.roa
Signing time: Wed 12 Aug 2026 21:06:52 +0000
ROA not before: Wed 12 Aug 2026 21:06:52 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:73:50:6d:a7:68:68:95:72:1b:0b:43:3c:f2:f0:54:b5:e8:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:52 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7fee41ba8856123e67e1d0bd7b62eabe97e87d52511863003164be20ad064ae9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:f2:1f:1d:81:df:03:9e:43:ba:4c:f3:76:
f9:24:24:64:a1:23:2b:02:f6:ea:0d:35:f9:94:7a:
8b:d5:ae:5e:df:a2:5a:e3:79:d6:75:08:ff:fb:d2:
4e:79:7d:48:9e:b2:3f:14:80:df:b9:3d:d2:f6:3d:
5a:b2:88:95:95:fd:fb:3d:40:02:00:d9:6e:7e:78:
ae:1e:37:1a:1c:87:45:75:9f:ea:1e:30:51:47:34:
b2:6b:ed:c8:d3:53:0a:cc:ca:ce:06:ae:b9:2d:e1:
8a:cc:da:91:f2:6d:78:b8:bb:5c:94:1a:aa:db:ba:
81:6d:1d:5d:c1:94:b3:c2:ef:4c:b3:32:80:79:6a:
11:32:fe:92:5b:3d:53:f6:ec:aa:34:c2:38:0b:b9:
ec:3b:cf:6e:e8:4f:13:c1:09:d6:34:28:88:8c:93:
81:a9:2b:b9:7b:ad:c3:d3:57:e9:f4:36:3c:f2:90:
4d:f8:a8:67:93:90:34:8c:e4:75:82:15:bd:4d:e6:
e6:17:4e:7c:e2:b1:70:2f:94:2e:7d:76:af:de:b3:
e8:7b:9c:69:08:ac:b4:46:3e:e3:e5:ab:20:de:2c:
68:e4:c3:55:69:c2:47:a7:8a:00:e3:3d:47:5f:df:
d9:12:fe:a9:24:7e:ec:8e:cf:a0:8e:07:bb:2b:45:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:45:E9:C3:09:0F:A7:7B:81:84:45:B2:D7:11:FD:92:81:5F:37
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da6101a-b455-4c77-ab88-725d42674003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
04:01:17:b6:91:55:b8:83:c1:ef:69:0c:52:cb:ae:e8:ab:02:
0d:59:eb:a3:51:68:7f:95:43:a8:4c:a1:8a:e9:6c:36:20:f5:
9c:c8:05:ee:5f:fe:19:57:48:3b:b1:26:77:16:b4:a5:1b:ac:
7c:9b:05:fe:46:57:cd:a7:d8:76:a0:4b:6d:6d:e3:79:7b:a0:
f9:7f:3d:12:57:a5:e7:ec:34:fb:d8:74:0e:bc:20:4f:a0:89:
08:d0:37:9d:33:48:e4:de:3e:9b:ad:ab:37:ba:de:67:da:42:
f4:91:e1:04:b1:c4:6c:ea:df:cb:69:7e:59:9a:dd:66:b8:bc:
24:0b:01:89:96:81:02:93:00:68:bb:1a:32:dd:bb:07:a9:e1:
6d:9e:97:ab:7e:ea:44:14:4b:b9:72:af:59:35:1a:63:3b:c0:
c2:89:e0:9e:16:d4:7e:13:19:19:00:5e:d1:71:c3:16:ee:3a:
41:c0:13:94:df:c2:65:ae:e7:61:6f:ec:11:01:63:4b:18:94:
1c:ea:3f:7c:59:c3:53:03:72:9b:a7:15:e0:e0:53:3a:0e:e7:
d0:19:2c:f9:4e:1b:b8:b7:f2:d4:f3:b7:ad:d2:45:1a:d6:34:
f4:46:35:df:38:0d:e7:40:cc:dd:20:c5:80:60:64:c7:06:41:
93:77:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:45 2026 by rpki-client