Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da9e970-b050-44d0-83e9-f0e83f98a196.roa
File: 1da9e970-b050-44d0-83e9-f0e83f98a196.roa (raw, json)
Hash identifier: Gq1ltpnbkIjrfuW7nYTPgynEsi51FFcUacjFs5mcUzc=
Subject key identifier: 4B:EA:15:9F:A1:62:68:1D:ED:44:47:5A:2F:6D:A9:8F:31:B5:1C:BF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 66EFD21F0B5D75BD7F980F8310851AC95697F2CD
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da9e970-b050-44d0-83e9-f0e83f98a196.roa
Signing time: Thu 30 Jul 2026 01:20:24 +0000
ROA not before: Thu 30 Jul 2026 01:20:24 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ef:d2:1f:0b:5d:75:bd:7f:98:0f:83:10:85:1a:c9:56:97:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:24 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=e90b89a6101d21e2a14c6059d49936d47e96c95f82823f998794303b1c589029, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:32:42:10:79:49:2d:cb:82:48:7c:e4:1d:
aa:81:84:d4:d3:24:f7:7f:d9:8e:b4:bb:c1:3e:0e:
08:dc:d6:9e:2f:c5:36:fe:1a:05:b5:66:c2:33:de:
37:ad:90:be:4e:04:04:db:05:f8:83:9b:5e:df:1d:
df:9d:8e:2e:8f:ac:f7:22:87:a9:75:b7:0c:30:9c:
3d:f9:cb:65:d8:5f:cb:2f:e7:33:06:1b:e0:e1:98:
c6:07:8b:06:31:98:be:cd:0d:67:12:0b:8d:7f:8c:
18:46:ce:0c:3c:de:73:e4:63:1b:12:4e:e9:e8:93:
29:3e:bf:70:9e:f6:cc:4e:cc:3e:1b:e1:6e:95:7c:
22:95:0f:78:3c:e6:61:a5:65:1a:6e:9a:c7:dc:ad:
df:a9:3a:54:51:a2:ff:47:4b:59:ca:38:e4:96:fd:
49:ba:f8:a8:a7:1e:81:f7:21:35:25:c2:d4:59:f3:
08:b8:b0:4f:09:43:68:36:a0:51:c3:7c:a2:8a:46:
bc:58:a9:d8:e8:cd:e1:d2:77:1d:93:e9:77:1b:29:
57:8c:12:2f:1c:e9:88:ab:e4:a5:69:d1:64:bb:e7:
8a:17:55:77:2d:fe:65:4b:3e:91:f6:44:ed:e6:10:
e2:97:d2:ba:8b:09:82:b1:c5:94:e9:d2:f9:b5:9f:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EA:15:9F:A1:62:68:1D:ED:44:47:5A:2F:6D:A9:8F:31:B5:1C:BF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1da9e970-b050-44d0-83e9-f0e83f98a196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
bc:04:79:9d:86:31:ab:ac:76:30:d4:58:95:bc:c1:37:ee:d9:
83:b3:c5:6c:b8:35:d0:ca:70:ce:af:5a:75:d7:53:00:9a:8d:
73:c6:df:8d:37:c7:8d:80:d1:75:f6:3e:ba:9e:f3:a0:5c:3b:
5d:df:06:0c:fe:c8:f5:02:28:da:af:4b:40:ae:b8:39:3a:04:
cb:73:b9:96:47:bb:70:f5:92:7d:9e:0d:55:9a:67:61:23:b4:
76:fb:ef:89:58:74:77:60:8b:dd:27:d4:c1:71:55:28:a9:5b:
b3:bc:82:5a:17:94:a1:26:ae:3b:ad:71:bd:b3:c9:fb:a0:2c:
d9:06:7b:5e:a3:db:db:f2:0a:41:5d:af:fc:a5:4f:a4:42:cf:
42:e9:54:9e:0e:8b:78:2a:eb:62:22:95:94:e9:5b:cd:be:ee:
63:38:28:32:a1:9e:38:1c:6b:c7:d3:77:df:98:12:8f:84:cd:
b8:60:47:5f:1e:f9:20:2e:1f:ea:7d:d6:5a:47:f3:59:89:02:
5c:91:58:ab:5c:5e:f1:7d:2f:8e:57:84:85:ad:c0:ec:90:78:
a9:bf:2b:69:2a:16:f3:8c:4c:52:01:f4:46:c2:88:cc:57:b8:
1d:8d:03:66:06:7c:b0:df:18:8b:8d:2e:50:21:b9:46:03:78:
4e:e9:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:45 2026 by rpki-client