Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
File: 1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa (raw, json)
Hash identifier: 4lga4aRptNL+0mOofj6X6uqsaxNnto/ta4xy0Gtmsdg=
Subject key identifier: 99:9C:F6:53:1E:11:AD:80:B1:C9:5B:64:D2:79:23:01:2B:EF:13:06
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3B00F33D4C10D47C1C93B9D0F07516DDD649E1AA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
Signing time: Thu 30 Jul 2026 01:20:08 +0000
ROA not before: Thu 30 Jul 2026 01:20:08 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:00:f3:3d:4c:10:d4:7c:1c:93:b9:d0:f0:75:16:dd:d6:49:e1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:08 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=43c24288ab13d87ceb631ba148280ffbedad5890d475530d79fa8e7043f9da2d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:86:b9:3e:c3:51:35:80:14:f5:8f:e3:bd:
01:b1:76:99:e5:be:a5:8d:90:7d:5e:05:d9:39:a3:
26:6b:d2:0b:e6:99:ea:f1:f4:6b:32:d2:c1:87:f3:
ac:60:42:9a:01:d3:98:2c:cc:c7:0a:bb:2a:40:1d:
63:95:dc:31:73:8e:31:e2:54:de:ac:b9:1a:bd:a8:
bb:8d:28:81:55:c0:6b:2b:55:6c:1e:a0:cc:70:51:
48:55:af:80:a8:f2:4b:ae:b9:44:c8:5e:f1:ea:b3:
21:50:11:09:5d:4b:90:96:dc:da:b4:d6:9d:ee:8d:
ad:51:cf:39:17:ab:e9:5c:cf:4e:73:18:63:83:ab:
9b:16:b4:06:9e:72:07:e6:7a:5d:9d:da:64:7e:1a:
2d:76:08:ba:1d:9c:70:6f:73:c6:cb:eb:d5:6b:dd:
10:08:f3:2d:4f:e2:1f:5c:b7:da:de:ef:34:09:87:
53:60:c7:33:49:75:49:db:9a:80:f6:18:40:28:4c:
b2:2f:50:5e:24:0b:25:1b:b9:83:ff:aa:08:a2:30:
9e:4d:61:13:de:42:6c:b0:e3:18:94:99:df:e5:c5:
33:95:49:86:d4:c1:57:e8:7e:d0:e2:4f:c4:a9:84:
04:b6:eb:41:5a:ea:38:6c:d1:88:d5:08:31:07:80:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:F6:53:1E:11:AD:80:B1:C9:5B:64:D2:79:23:01:2B:EF:13:06
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1eb0687e-b90a-4da4-a523-dc06e2dd8c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:8::/47
Signature Algorithm: sha256WithRSAEncryption
52:10:6a:a5:2a:94:d4:5b:ed:c8:1d:7d:a3:1a:9e:d7:f1:9e:
f2:c8:e2:58:32:13:c2:46:c7:6e:3a:31:b5:06:dd:24:bc:2a:
7d:67:91:bf:30:bb:f6:3f:82:6d:26:9b:c8:cb:fa:95:1f:00:
58:ee:2d:6e:dc:c4:8f:f0:7a:a1:62:06:1d:2f:09:1c:62:e3:
e7:8d:23:ec:60:f3:58:69:95:dd:b0:af:b9:e3:8a:d1:15:11:
91:9c:8b:ba:f4:47:a9:23:f1:c8:e8:eb:c1:30:b8:c0:5e:00:
53:36:60:59:db:1a:8c:67:a9:f5:79:ca:b3:1a:d8:33:b6:94:
31:41:b8:bf:25:c1:5a:ab:90:3e:ea:c2:a2:ae:36:68:a1:2f:
8e:ec:3e:85:b1:21:f1:f4:8a:d1:41:bb:0e:11:1f:fe:9b:cb:
7f:b9:01:92:33:c2:ec:f4:bc:b5:2c:0f:23:63:cd:1c:ab:e2:
d6:bc:56:24:12:2a:54:0d:ef:35:33:66:16:3c:64:a8:c4:f3:
46:55:c6:fc:88:ee:32:42:33:7e:48:46:77:fa:f7:50:c9:96:
2f:7f:79:65:fa:05:9d:a9:8f:68:16:c7:c2:5b:f2:6a:9c:d3:
cc:4f:e4:96:f1:8c:45:1d:95:99:50:7a:5b:fb:69:26:bc:48:
cf:b9:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client