Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa
File: 20a0941e-97e6-476c-adec-4755830b9511.roa (raw, json)
Hash identifier: SZu7r+I6xgk7MtElQwO+RE0prLKBJfreV/ebGSucIgM=
Subject key identifier: E2:BE:39:59:B2:54:2E:8C:8D:79:AF:46:BC:8A:FE:15:CA:F0:FE:07
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 70B8852F72F2FB30453B388BD759415FB35D8200
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa
Signing time: Thu 30 Jul 2026 01:20:29 +0000
ROA not before: Thu 30 Jul 2026 01:20:29 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc7:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b8:85:2f:72:f2:fb:30:45:3b:38:8b:d7:59:41:5f:b3:5d:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:29 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5123e9c21acc8c78b2da5cd918ae5dbea9923613a42ca28349c8bebe5acd975b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:ce:99:5d:1e:cd:d2:dc:01:02:45:e3:86:
bd:55:ad:e2:3c:f5:24:f3:96:ad:b1:4c:a3:8e:a2:
7d:df:da:98:2e:b8:d2:66:fa:bb:3e:f1:77:09:85:
8b:19:f0:bb:76:9c:7e:4a:6a:8f:04:86:23:8c:18:
95:d3:23:91:f0:54:76:88:be:b1:c1:1a:e3:43:f2:
f9:42:e0:a8:34:75:c2:9c:0b:04:43:6b:92:19:88:
8d:dd:4d:55:90:c1:d3:29:51:22:c5:c2:98:49:e0:
8e:c1:52:68:45:cc:ff:8d:7a:7b:81:f8:35:e1:e9:
25:a5:d2:3d:c3:ce:30:4b:9f:f4:cc:6c:9b:9d:a2:
60:f5:53:14:68:de:24:ec:80:be:82:6c:a8:2b:61:
c8:2f:47:1d:9c:b3:74:e5:2c:76:11:7d:28:12:34:
11:68:33:cf:dd:80:67:08:c3:bb:78:d5:34:4a:fb:
bf:69:00:4c:1e:86:4c:91:22:28:99:8c:0b:10:e9:
d3:e5:19:ba:b2:82:7e:be:af:1c:0e:92:3b:7a:46:
ed:fa:96:98:56:52:70:12:0f:f6:90:f4:48:54:56:
77:39:89:ff:fc:f2:06:39:e5:59:a5:6b:92:0b:1f:
2d:de:ab:a7:4c:2b:cb:02:bb:8a:f6:8c:18:2b:e2:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BE:39:59:B2:54:2E:8C:8D:79:AF:46:BC:8A:FE:15:CA:F0:FE:07
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
59:55:ac:f5:46:0f:02:d6:a9:ab:36:4c:51:6a:97:e4:c6:ab:
0c:db:68:07:6f:88:d4:c8:cd:77:2d:79:dc:fd:e4:89:2a:00:
01:a0:ed:ee:60:a7:87:47:ca:9f:ff:36:0a:f8:43:45:6d:c2:
1d:25:a9:f2:41:03:b4:46:f5:d8:d4:a2:58:10:83:ea:32:0d:
d0:bc:77:bb:58:be:6c:13:57:fe:0c:f6:87:09:2b:6d:d8:b1:
07:50:f2:af:b1:b3:8d:aa:81:6e:9b:85:45:d0:a2:54:2c:c4:
a9:c2:cf:9a:52:ea:7a:33:13:ee:3a:06:1e:36:5d:82:e8:31:
b3:9f:f3:df:c2:4f:e8:52:5c:14:b5:1c:01:fc:9f:6e:48:36:
5d:6f:dc:0a:ad:21:6a:2c:53:24:24:49:59:8d:8b:b9:a3:b0:
b6:e9:bc:a4:9f:11:85:de:1d:d8:53:5f:47:34:3f:96:5c:c6:
14:68:78:c6:56:87:be:31:70:03:e2:d0:9d:9b:ed:00:e0:1a:
6a:42:73:c4:06:b6:e5:c5:e6:e2:1e:1e:63:6b:17:ac:ee:18:
d1:4c:3b:d7:b1:61:18:2e:20:34:d9:dd:33:9b:73:0b:ba:1a:
fe:be:35:d1:73:46:7c:54:b7:9c:49:dd:fa:fd:bc:48:9f:f8:
eb:59:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:53 2026 by rpki-client