Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/21f09053-1be3-4394-8e32-cc8d0968e604.roa
File: 21f09053-1be3-4394-8e32-cc8d0968e604.roa (raw, json)
Hash identifier: EfxNcjKq4bzcmsMZNtw4Z2poFPep7yVDp6AZQUKbLfc=
Subject key identifier: 41:C2:04:E4:E5:BD:D3:91:6B:01:14:58:12:65:63:9D:27:9F:BB:6A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4C84882EE5658FD7FB5054BBC95D1DD5260E9BF7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/21f09053-1be3-4394-8e32-cc8d0968e604.roa
Signing time: Wed 12 Aug 2026 21:04:25 +0000
ROA not before: Wed 12 Aug 2026 21:04:25 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:e::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:84:88:2e:e5:65:8f:d7:fb:50:54:bb:c9:5d:1d:d5:26:0e:9b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:25 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=638966d4af07ecbf342d48874b71a7e886b62b4df774a4c648ecb2c4f0b5092d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:d4:d8:35:33:5f:b6:b3:f4:bb:ea:3e:e8:
92:3d:c9:35:38:e1:5f:a1:29:1d:24:64:ae:db:d1:
3a:c6:10:83:9f:6a:f7:f1:4f:e2:e5:a4:59:80:74:
44:99:a5:fc:08:e4:df:7f:b9:37:87:21:e4:be:17:
df:bf:54:fb:d6:7b:c6:4d:31:9e:13:84:fb:d1:44:
a5:de:6e:77:5e:2e:81:1c:c7:59:b6:62:b2:10:e4:
46:07:cc:05:61:e3:a3:19:84:17:fc:ed:0d:a2:e4:
96:5b:32:8f:27:fd:35:39:c4:3b:77:85:3c:49:92:
2c:05:02:8b:02:35:c8:98:d3:89:e9:a6:17:d8:07:
82:44:ae:be:bb:17:87:25:21:01:c7:0d:76:a5:80:
e7:17:16:db:d9:2b:fd:11:2b:01:a0:92:78:9c:61:
ee:2e:f2:dd:1a:3b:70:06:7d:61:1e:07:ae:c7:c7:
e4:1a:dd:e5:a6:09:fa:c8:f8:f2:d8:d6:e2:ef:52:
b3:35:44:1c:9c:69:6f:6f:f5:34:26:f3:2a:99:d1:
ec:c7:56:5c:7e:97:b0:5f:2e:dd:7a:ba:7f:17:03:
7f:42:65:0e:d4:75:7b:c7:90:a3:4b:5a:9c:b5:7b:
b2:9c:97:2e:f9:68:91:d7:f9:01:7c:24:47:82:ca:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:04:E4:E5:BD:D3:91:6B:01:14:58:12:65:63:9D:27:9F:BB:6A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/21f09053-1be3-4394-8e32-cc8d0968e604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:e::/47
Signature Algorithm: sha256WithRSAEncryption
c6:cc:eb:ba:e0:d6:e6:68:29:50:82:76:a9:a7:cf:91:30:2d:
bb:59:1b:c0:70:73:92:63:6f:89:0b:5e:a5:bc:64:04:c7:38:
ba:cd:a2:1f:4a:9b:f2:4a:80:dc:a9:a0:5b:24:75:0f:18:59:
79:bf:1d:9c:14:a5:f8:41:a3:46:e0:01:db:da:8a:cf:88:66:
96:c3:74:df:67:14:7f:ae:56:c3:52:63:b2:49:af:d8:db:a1:
32:e6:e9:07:b0:f4:7c:92:4e:0a:36:ab:b7:db:9d:ca:d2:67:
24:88:dc:e5:97:fd:53:c8:e1:10:28:36:91:99:4f:63:b4:b3:
f8:c2:d2:8f:9f:2e:a5:b7:fd:2a:0f:5b:33:9e:b1:4b:8b:7b:
dc:d5:c0:96:70:fe:09:25:59:80:bb:f3:84:a4:03:d3:04:b5:
d5:4b:50:e0:03:a5:5a:be:56:25:4c:60:5f:b3:f3:4c:8a:72:
92:d7:4a:12:ab:28:f5:e0:ff:66:9e:f6:bf:1d:5f:97:16:d3:
61:1d:1f:e0:dc:0d:76:86:68:00:ef:f5:58:c0:59:7a:ce:51:
5a:6e:3d:69:3a:1a:23:12:da:a1:a2:07:f6:70:91:b8:24:74:
68:55:96:1b:7f:db:9b:25:c9:1a:1f:c9:74:a3:17:88:16:84:
91:a0:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:43 2026 by rpki-client