Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2a407bd1-1674-49d7-8265-4aa9aa99f947.roa
File: 2a407bd1-1674-49d7-8265-4aa9aa99f947.roa (raw, json)
Hash identifier: U/o6zLWXqx5t/thiB/YLKkD6shmscdZe4T/Pnv0sb3M=
Subject key identifier: CA:A4:93:95:25:97:23:56:3C:95:1B:67:2B:63:EE:8F:E1:A2:8A:D5
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2F71838E3667275D123699D4C69AEC9AB2BF9E00
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2a407bd1-1674-49d7-8265-4aa9aa99f947.roa
Signing time: Thu 30 Jul 2026 01:20:05 +0000
ROA not before: Thu 30 Jul 2026 01:20:05 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:71:83:8e:36:67:27:5d:12:36:99:d4:c6:9a:ec:9a:b2:bf:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:05 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=2520781f5344d4d5270a37de4d5ea8ad76fb76ec42f096511abc9d7c7099fade, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:8e:08:70:27:7b:75:85:00:b8:81:65:73:
df:3e:7d:ba:3f:46:08:bb:cd:fa:a3:2b:56:a3:a1:
86:84:a5:78:fa:2f:7c:85:7e:e0:35:5d:14:14:c5:
65:df:7e:01:41:90:21:42:84:d8:f4:94:55:32:20:
e5:c1:ea:fb:9a:ef:08:f1:ad:47:44:e0:ce:c3:60:
09:f5:f6:5d:2a:16:43:c6:ec:c2:1f:76:23:c7:1a:
98:36:77:da:aa:8b:10:02:96:70:f8:d0:4b:04:2f:
8b:66:6d:af:a4:a1:aa:51:91:0d:e5:66:d9:94:50:
6a:c7:b1:e9:af:de:7c:dc:7e:13:c0:06:a2:a0:b1:
bc:ad:27:78:fa:d7:a3:25:c0:90:75:6f:f1:3b:8a:
2c:bf:19:ff:a4:94:6c:47:27:7a:15:47:3f:7c:d7:
89:cb:31:92:1d:56:f7:42:e3:8c:a6:d2:64:bb:8f:
6a:3d:ce:0e:dd:e5:34:b3:6d:ed:d7:bb:5c:01:b8:
2b:98:24:78:fb:28:85:94:57:a0:93:4d:c7:ba:08:
4b:58:33:90:28:4a:ab:4b:94:68:20:01:01:97:c3:
9c:06:70:ef:af:5d:7c:2b:81:1f:71:51:15:f9:ae:
3a:b7:25:8a:2f:92:1b:7d:2d:67:0a:a9:22:b1:a0:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:93:95:25:97:23:56:3C:95:1B:67:2B:63:EE:8F:E1:A2:8A:D5
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2a407bd1-1674-49d7-8265-4aa9aa99f947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9000::/36
Signature Algorithm: sha256WithRSAEncryption
af:6f:70:7c:02:56:55:35:ac:42:67:ef:6d:7e:78:bc:a9:49:
ae:c0:e0:73:b7:7a:1c:f2:c5:65:5f:b8:0d:be:cc:c9:2f:63:
ba:e0:e0:d4:1d:69:3e:a7:89:4b:a0:48:1e:ba:d8:09:11:e4:
3b:c0:42:a2:d6:fb:ae:26:5a:e3:b9:c8:1f:a3:dd:66:9c:66:
e4:44:1e:07:0f:d8:a6:8d:f6:2a:87:2f:2b:3d:f8:b8:51:41:
f6:b2:e7:23:4f:22:c3:6a:76:86:fb:84:2b:1c:66:fc:64:49:
10:84:86:05:91:e3:2c:35:0d:3a:f7:c1:a4:4e:58:81:ac:e5:
a1:b7:25:43:6b:10:ea:17:3b:14:41:83:0c:63:56:b2:95:8a:
58:9e:b6:af:9e:72:40:58:fd:16:c9:d5:92:b8:af:a5:67:5b:
8c:a6:18:8f:d1:65:24:e3:c0:07:3a:c4:cf:e8:3e:59:70:1d:
d4:12:dc:3e:4a:f6:22:62:ca:7f:00:62:7a:bd:bc:fe:77:a6:
7a:a3:fd:47:69:eb:b2:bf:66:3c:d7:dc:8e:24:3e:6b:cf:f4:
e7:d2:79:9b:f3:4b:e6:c0:f7:b6:83:3f:52:1a:fa:91:d2:81:
65:d6:4a:62:3f:b0:81:64:59:04:bb:5c:89:f3:31:ff:4d:14:
c2:fd:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:36 2026 by rpki-client