Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/27c00040-01c7-488e-8229-bc8f1b485a5e.roa
File: 27c00040-01c7-488e-8229-bc8f1b485a5e.roa (raw, json)
Hash identifier: QMFKbaLvNJgpCee37b+EsL6vF70Vjoxizo6pFhSfhrw=
Subject key identifier: D0:AD:EE:D7:8B:8E:9C:A0:05:D6:4C:E2:18:0E:2E:69:F4:7A:32:19
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 580D9685CF217E173904EE8D56673377B92DFFC0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/27c00040-01c7-488e-8229-bc8f1b485a5e.roa
Signing time: Wed 12 Aug 2026 21:05:40 +0000
ROA not before: Wed 12 Aug 2026 21:05:40 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0d:96:85:cf:21:7e:17:39:04:ee:8d:56:67:33:77:b9:2d:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:40 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=eef5a64c496d5f35f4ff623e1a9016c35e9c2d404f03d87dfb3039cd57fa1165, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:14:1f:d7:06:36:a0:1a:20:5c:32:db:b5:
71:07:ca:db:38:58:4e:5b:0d:ff:13:f6:67:18:4e:
3e:87:6c:0b:c0:03:1b:df:a3:e8:99:57:2c:09:60:
64:18:8f:bf:90:38:b7:61:14:73:be:ed:4a:50:68:
25:78:94:c8:93:52:15:96:21:29:00:8c:cb:ca:2e:
68:f1:18:68:65:46:70:ea:c4:7f:18:e3:4f:c0:d6:
00:2a:e0:8e:cc:0b:00:ea:e0:11:85:46:e4:ff:57:
84:21:95:25:81:dc:b9:d8:ae:97:fc:65:14:2d:8d:
c1:0a:df:08:6b:a6:f7:3a:ba:98:39:4b:13:4c:a2:
fd:d1:b8:8b:62:6f:ed:b0:23:2c:55:23:0d:18:bc:
9b:af:20:cd:64:ac:40:2a:df:fe:92:7d:bb:5d:15:
37:cf:f7:b3:da:d1:90:4b:40:50:06:1a:f5:d2:3c:
ed:1f:2d:c8:a2:f5:12:05:94:cb:f8:18:f9:e1:da:
70:3b:a3:1e:0f:b3:f1:45:53:f0:d5:70:41:4f:e6:
05:f9:5b:4c:8e:c7:42:f2:4c:20:30:36:74:ad:03:
2a:e0:be:d7:d3:2b:02:07:65:85:39:63:78:61:cc:
8c:9b:35:57:e5:78:1d:e7:a6:fd:a5:8c:3a:f0:37:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AD:EE:D7:8B:8E:9C:A0:05:D6:4C:E2:18:0E:2E:69:F4:7A:32:19
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/27c00040-01c7-488e-8229-bc8f1b485a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8800::/40
Signature Algorithm: sha256WithRSAEncryption
6f:08:92:cc:46:28:1b:6b:df:e3:b2:ae:e2:47:7e:98:65:03:
24:1d:37:3b:18:99:e1:7c:2f:95:67:73:b5:1f:34:9a:d2:aa:
fe:a0:43:08:c3:e9:a3:50:3c:94:06:7b:db:78:15:12:84:36:
e6:63:7d:dd:50:63:3c:9d:87:b0:34:96:24:68:31:1c:f6:e7:
dc:f1:1d:1a:91:0e:db:a6:72:0c:cd:75:62:48:f2:48:28:3c:
9b:30:d0:76:6e:ac:81:3b:5a:37:85:eb:0c:a8:7d:b1:6c:01:
4c:0d:4d:bb:ed:ee:0d:b5:21:05:b1:c2:74:89:95:d5:67:8f:
b6:19:53:46:2a:b2:73:26:fe:8b:08:06:f2:43:a6:58:58:f8:
13:74:8a:1b:39:7c:f7:6b:51:50:d4:02:70:ac:c3:47:b9:b2:
60:d5:7d:7d:be:1b:96:81:28:88:03:15:62:19:b7:f8:2a:83:
5f:82:57:26:6e:0d:67:82:bb:af:5b:c2:9c:f3:61:64:99:6e:
c5:aa:4f:88:d5:69:3c:45:8c:c0:e7:a1:70:87:42:fc:bf:84:
01:fa:ac:60:ef:9f:ce:d0:99:42:19:2a:fd:ed:ae:d5:db:9f:
c1:e9:27:94:13:50:a6:42:6a:92:bd:7b:ce:8a:00:08:f7:d2:
f6:7a:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:21 2026 by rpki-client