Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/35594150-df52-4b46-bf6f-43419247c18b.roa
File: 35594150-df52-4b46-bf6f-43419247c18b.roa (raw, json)
Hash identifier: oSjjKtahfmlBwrczOA0HDGt2Y2UCcnBW5ebtZqp1v3E=
Subject key identifier: 47:52:11:B8:C6:45:D7:15:67:95:F5:2D:13:4E:8A:81:2D:18:3F:72
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6649CA9253EF421A20D8553E4221141C3370B47D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/35594150-df52-4b46-bf6f-43419247c18b.roa
Signing time: Wed 12 Aug 2026 21:04:21 +0000
ROA not before: Wed 12 Aug 2026 21:04:21 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:a000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:49:ca:92:53:ef:42:1a:20:d8:55:3e:42:21:14:1c:33:70:b4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:21 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=d0c82dfd899e64d78d26db580f71a802587c4186ef4459feaea70f1ffeb27c4c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:0c:f8:94:6c:aa:cf:1c:16:50:e0:7f:6f:
b6:17:a7:5f:78:c7:cd:d0:c9:e9:9c:1d:af:7f:c5:
73:74:b6:b5:42:cd:ba:f7:7d:69:ea:2f:7a:5c:f4:
d1:b5:ed:44:38:06:e2:26:0c:83:22:5d:9c:2c:30:
de:83:36:ec:a9:80:6a:a7:dd:48:46:97:38:a7:d3:
fe:1e:e2:09:60:65:09:34:36:b6:51:45:65:9d:af:
9e:00:96:87:b6:44:69:ad:1f:d7:8d:c8:bc:2d:36:
a8:e0:92:02:0d:b0:8b:63:98:7b:3b:0a:66:47:c4:
ea:68:a4:e6:44:a0:4b:14:b3:bd:ac:88:0d:c6:9f:
c4:9e:af:a0:0c:23:44:65:5b:dd:7c:2a:fd:12:86:
e1:56:90:0c:81:24:52:95:2c:2f:38:3a:47:e7:b2:
a0:90:e0:39:1b:a5:78:60:c8:55:f6:e7:8c:2c:b0:
1e:76:8d:93:73:97:51:78:4b:be:08:27:4e:c6:8e:
8a:fe:c4:2c:5f:6b:b6:4b:22:67:fd:bf:eb:90:a4:
17:e8:02:11:bb:ee:97:69:c1:ae:1b:a1:9c:04:e7:
54:88:90:17:41:99:b9:56:1a:bb:09:c4:df:a4:d4:
69:1d:55:cc:02:36:08:df:92:ca:1e:f1:82:a4:ac:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:11:B8:C6:45:D7:15:67:95:F5:2D:13:4E:8A:81:2D:18:3F:72
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/35594150-df52-4b46-bf6f-43419247c18b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:a000::/36
Signature Algorithm: sha256WithRSAEncryption
13:78:a2:cc:74:89:a6:07:c1:75:75:48:ed:fb:82:91:f5:53:
09:46:9a:27:a6:20:b0:76:22:92:13:56:1c:2b:df:8f:92:19:
f7:78:d4:37:e9:da:09:f0:3f:d2:97:ba:a4:22:d5:8c:ae:e2:
b5:cd:71:f9:32:16:93:7d:d4:62:8f:b7:df:c4:71:79:43:6c:
06:a3:8f:b3:f9:2d:2f:2b:d6:b0:f2:c9:20:1d:5e:ed:06:21:
2e:de:63:a1:b3:7f:43:95:14:ad:96:ce:48:01:90:cb:56:99:
8c:d2:48:e8:0e:fc:d6:a7:31:4a:62:f7:09:28:3f:38:5b:c8:
15:f6:82:53:a2:27:98:dd:96:3c:54:ee:72:ce:a6:53:e7:f8:
bb:a8:23:e6:49:36:ae:23:14:22:fe:cf:5f:e9:4a:51:0f:60:
d0:e1:6d:f9:62:4b:67:ae:63:52:9f:38:af:fe:34:2a:27:a4:
01:b5:ae:28:4d:49:73:37:29:ea:b6:5e:97:45:59:f4:6b:af:
d5:76:e6:2c:e3:4f:43:06:6b:8c:79:22:28:18:de:ec:6a:31:
5b:c6:d7:06:44:e4:7e:57:79:f0:d9:29:bb:63:52:23:9b:ee:
26:3c:af:96:dc:6d:7e:3a:33:c4:b9:54:77:5b:19:f7:bd:2f:
b8:12:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:41 2026 by rpki-client