Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbc113-32ff-4356-a09b-f34c0c202208.roa
File: 2bdbc113-32ff-4356-a09b-f34c0c202208.roa (raw, json)
Hash identifier: Z/jAKRHhNpgULaCVhp3mg7nlx84w0k+i3M+qa8m1Ml0=
Subject key identifier: B6:50:12:B7:F2:76:D0:8A:D2:8B:24:F7:4C:E8:D3:A6:3E:EF:0B:C7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2F75F986BE955C02DF4CDB9EF44FBE387605808D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbc113-32ff-4356-a09b-f34c0c202208.roa
Signing time: Tue 11 Aug 2026 20:32:10 +0000
ROA not before: Tue 11 Aug 2026 20:32:10 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:75:f9:86:be:95:5c:02:df:4c:db:9e:f4:4f:be:38:76:05:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 11 20:32:10 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=340e434120b386981a81d11f6dcd4897e4d456c4a6ac18317931a887630d4968, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:8f:ce:2e:d3:1f:5e:d5:d3:bd:77:bc:2e:
50:3c:3a:4d:f5:70:0b:36:4c:1e:66:90:7e:ea:c2:
97:ee:71:0d:a1:7d:37:85:99:a4:62:b7:12:9c:32:
91:6a:93:22:3c:6f:17:c9:1e:1a:9b:40:c2:05:4c:
85:25:7a:a1:d2:82:7b:a1:2a:a7:ea:06:13:3e:c4:
7f:ac:65:6a:ff:72:2d:e9:ec:74:f4:7a:76:24:ed:
e2:5e:0e:3f:80:8e:e6:f1:e9:22:d4:c7:47:2a:22:
b1:e4:9f:99:ce:4c:db:e0:0e:c5:f5:84:28:25:25:
9f:ef:d2:b7:1d:80:2a:7a:6c:a0:94:6a:38:50:bd:
a7:c3:5c:de:28:6c:7d:fd:b6:93:bc:7b:d6:c7:0d:
6b:c1:9b:c6:25:80:8f:4c:97:ba:76:73:18:9a:34:
cc:07:75:16:19:fa:39:a0:2e:92:1a:24:aa:a1:6a:
c6:68:9a:b6:a0:c8:b8:43:58:fc:92:02:0e:2b:6d:
60:b4:bc:24:e1:d9:4e:08:8e:cf:ee:9d:49:a7:d4:
1e:b9:7d:fa:0b:e1:62:ec:8c:50:81:29:85:23:60:
e6:e1:65:be:e9:c5:1e:f8:94:3f:d6:30:59:6d:52:
c0:6b:47:da:df:ba:0e:a2:ef:cb:ca:ee:e4:0a:3f:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:12:B7:F2:76:D0:8A:D2:8B:24:F7:4C:E8:D3:A6:3E:EF:0B:C7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbc113-32ff-4356-a09b-f34c0c202208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
20:11:b6:ed:ef:7b:09:1b:6f:3c:c2:f0:f8:98:5a:22:cd:65:
bd:af:60:00:0f:73:02:b4:71:f9:b2:5a:9c:9a:c1:5f:dc:fd:
77:44:f1:08:d0:96:df:56:2b:e8:98:89:3a:97:63:cf:db:16:
fb:dc:db:81:8c:73:1c:0d:a7:bc:60:38:62:fc:6e:fb:e4:a3:
ea:7b:49:8e:c8:2f:03:45:34:0b:30:24:7e:4e:51:ad:47:1f:
9c:a8:36:86:ee:a5:46:4a:87:3f:99:a5:d9:1d:15:c9:a8:d6:
29:5b:03:19:c8:62:b3:ac:98:af:b9:9d:14:07:2b:ba:0b:66:
13:93:9e:11:75:c4:56:72:e9:c4:59:2b:2e:7e:00:ee:eb:db:
1f:cc:53:27:c1:d7:f0:c6:d6:bc:73:ce:7d:9a:0b:9e:d2:61:
13:7e:a5:6c:17:a1:29:45:69:e9:1b:bd:95:59:30:a0:f2:9e:
c6:88:35:63:db:67:71:49:69:3b:93:c5:80:46:cc:cc:99:17:
d9:39:ea:40:bb:6c:6e:c0:ca:3b:35:0f:3d:b5:68:a4:09:f9:
d6:d2:86:ea:5a:05:e2:e0:03:90:b1:13:60:b4:d0:6e:e8:69:
09:96:27:8b:52:30:ed:e3:07:4a:e3:67:be:df:99:7d:83:33:
68:bb:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:57 2026 by rpki-client