Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
File: 296c0259-01c8-4923-9577-44db7a2ae85b.roa (raw, json)
Hash identifier: RvfF6gqLo/MGwg/+JSkz8dHYdB0tpoMKn43cSHHzhu0=
Subject key identifier: 69:A0:D7:82:3D:D1:7E:82:B6:9D:7E:FC:83:46:FB:DC:C5:3C:87:6F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 11D4FA9C6E633C0D733C8FDF5E1BCEA4F3A9181A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
Signing time: Thu 30 Jul 2026 01:31:01 +0000
ROA not before: Thu 30 Jul 2026 01:31:01 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d4:fa:9c:6e:63:3c:0d:73:3c:8f:df:5e:1b:ce:a4:f3:a9:18:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:31:01 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=ca647455ea2d054823d4e0b70631a19aff8c3d35c406b9d04c71cb5d17d9b48a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:a1:ab:ed:c1:26:17:fb:52:1e:d6:86:14:
ee:e9:5b:07:e5:7a:42:99:1f:c9:cc:c5:5b:7b:f9:
cc:ac:d5:9a:e6:a1:7c:9c:28:16:d0:b8:39:38:a6:
1e:a6:98:9d:b0:9a:50:45:22:9e:48:9c:0c:6b:8a:
50:63:6b:ee:b0:98:7c:89:f9:e0:be:6d:c6:8d:d2:
dc:18:66:5c:ef:58:d4:ea:5b:55:0c:da:83:fb:42:
4d:9a:58:2f:b2:cb:b4:b3:b4:16:5e:eb:ff:67:dc:
bc:72:f4:4c:4b:a6:fc:ee:e6:4d:d0:c2:66:2e:34:
f9:23:2d:2b:83:66:31:9d:cf:45:87:40:2a:0f:6b:
5b:97:ea:c6:b7:75:dc:98:e9:40:34:84:5c:11:fa:
c0:5b:e2:80:66:3b:3c:a4:a4:4a:ee:e0:d0:47:0e:
21:5a:c0:0b:96:35:59:bd:9d:48:b6:32:bc:64:9e:
cb:c1:95:6a:90:f1:c4:60:5d:0d:60:62:77:44:57:
87:cb:9e:9a:74:25:e5:0a:2c:ad:bf:51:9d:fa:f7:
d3:b7:cf:8c:b0:6f:35:db:b8:e2:3a:53:83:e4:dc:
35:bf:e3:8f:eb:f7:78:dd:7f:28:4a:97:14:8b:04:
12:c9:75:5e:56:3b:d8:11:ce:35:f4:06:14:9d:d9:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:D7:82:3D:D1:7E:82:B6:9D:7E:FC:83:46:FB:DC:C5:3C:87:6F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5::/36
Signature Algorithm: sha256WithRSAEncryption
05:2c:79:bb:51:fe:cb:67:1e:b9:59:cb:71:5b:26:9f:bb:72:
0c:0e:b6:56:46:39:4a:c3:63:6c:75:f3:f3:1c:63:f6:cd:5d:
b2:e6:f0:3a:34:39:de:30:af:b8:79:0a:ad:22:c3:48:83:d1:
a1:21:6b:04:07:c5:6d:ac:6e:18:17:87:f9:c3:00:95:bd:83:
05:3e:58:fb:a2:4a:c2:4a:56:65:86:49:b3:eb:ec:cd:48:1d:
3e:97:80:9a:e4:74:b7:ad:60:bb:52:9c:21:80:ef:c9:bd:f7:
34:73:2e:70:20:96:a4:e8:23:50:78:c8:88:66:01:ae:67:77:
74:19:c8:b3:18:74:c4:4e:47:26:2a:84:9e:d3:80:40:d1:15:
73:3e:c8:1a:f2:35:d2:7d:67:20:16:4c:81:d9:97:91:78:38:
b6:2b:d7:a1:be:a6:84:c9:26:86:d0:4f:3e:cf:76:14:13:1a:
dd:36:57:71:73:e4:13:fc:e8:b9:e1:11:aa:5f:92:05:28:98:
73:97:34:6b:64:e6:f7:89:04:36:a3:5c:11:12:e1:c0:74:05:
5d:08:58:9f:35:16:31:03:c9:db:b4:7f:52:d5:5d:4b:60:7c:
a7:5d:6b:94:e9:b9:34:cd:51:0a:9e:3d:31:2a:03:e8:36:81:
07:69:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:19 2026 by rpki-client