Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/25e0593a-f3ae-437c-8dc4-0a97baa4d3cb.roa
File: 25e0593a-f3ae-437c-8dc4-0a97baa4d3cb.roa (raw, json)
Hash identifier: g3R04pYOjMAILrM77fXc/vatPAmB1Ty0BcDhItvJJqk=
Subject key identifier: 3E:DF:78:DD:A2:02:4A:85:89:76:CE:F5:38:1A:1E:41:09:E7:93:85
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 64877EC306E52745A0B9B2A064263A50F5F89739
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/25e0593a-f3ae-437c-8dc4-0a97baa4d3cb.roa
Signing time: Wed 12 Aug 2026 21:04:29 +0000
ROA not before: Wed 12 Aug 2026 21:04:29 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:87:7e:c3:06:e5:27:45:a0:b9:b2:a0:64:26:3a:50:f5:f8:97:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:29 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f77c7b82c5124f301993debc594a2107b4b947ff28e8745f71f90ef1bd17639f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:1f:83:ae:c2:0c:c6:79:67:8c:30:24:74:
9b:cb:d9:38:97:d6:2c:c0:28:75:d4:b4:9f:f4:29:
1c:87:32:f1:80:7b:54:b8:67:6b:e6:70:5e:bd:5b:
52:56:da:e1:9a:17:55:d7:77:c1:67:0d:43:e3:22:
38:60:46:b5:9a:ac:d9:ee:f0:6e:63:7d:80:2b:7b:
b5:8f:62:94:39:8b:a3:ae:95:1a:c3:f9:80:a6:d8:
40:44:1d:70:50:ed:3a:76:c3:8b:cb:3c:5c:ca:80:
7f:e1:3a:ec:c7:3e:21:45:8c:9b:a3:11:71:7b:64:
c9:5e:b5:87:c1:e0:66:c7:51:bc:06:5b:e8:6d:99:
ed:9f:fb:f3:e9:1a:68:0e:ce:42:7d:a8:37:c5:8d:
70:53:7d:a8:ae:b1:5e:f2:8d:63:a3:4b:ad:e9:cd:
84:67:fc:da:b2:21:ee:5e:7b:78:52:5f:90:da:a5:
65:06:ef:be:5e:41:28:dd:bc:8f:15:c8:56:09:9d:
70:1a:90:b5:4a:23:85:4c:07:2d:80:87:af:b2:8f:
d1:a0:3e:73:34:f3:17:06:95:ca:45:4b:a7:b2:91:
ec:fd:c9:be:2c:23:98:d9:82:d7:cc:61:5c:b0:36:
eb:4a:81:5b:0f:8d:4e:95:c1:92:d0:48:9c:78:aa:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:78:DD:A2:02:4A:85:89:76:CE:F5:38:1A:1E:41:09:E7:93:85
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/25e0593a-f3ae-437c-8dc4-0a97baa4d3cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2080::/48
Signature Algorithm: sha256WithRSAEncryption
79:fe:d4:c7:5b:c8:43:9e:75:89:7e:63:d6:1e:18:c4:d8:d6:
86:0b:86:3c:81:4c:75:a2:3c:13:e7:92:16:66:cf:f9:2d:e2:
1d:da:9f:4f:34:32:74:22:20:11:84:1e:e8:0e:a1:99:a1:f4:
33:de:46:05:cd:fb:08:93:96:94:71:b9:40:a5:c3:96:55:58:
bf:51:9c:0e:d0:94:d0:de:69:88:2c:3e:7f:c9:5c:3e:f5:26:
6b:52:ef:1c:22:f3:54:9d:b6:43:19:af:e3:09:05:c8:78:75:
31:cc:12:d8:eb:c6:24:e4:f9:9a:0d:2c:40:ce:6d:3d:60:0c:
fc:ef:b7:90:a6:a1:a1:4b:d7:19:7d:64:db:7e:5d:65:5f:09:
b9:43:c3:e9:53:78:c5:31:95:5e:51:6a:09:a2:b6:5f:54:bc:
a6:28:49:49:dd:85:1a:db:91:72:ea:99:71:15:fe:e8:63:d1:
da:0a:cd:01:46:27:81:48:85:46:2d:f6:ec:05:a2:68:ab:35:
f9:28:64:26:9e:68:0f:66:00:11:22:32:49:e8:cf:fa:a2:e0:
75:ec:62:7c:c0:0c:c8:da:66:3c:d5:06:3e:7a:f0:7d:b6:0c:
ed:49:0b:89:ee:60:74:58:c6:73:e2:77:9e:d1:55:42:07:88:
9e:dc:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:29 2026 by rpki-client