Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3a33d844-426b-41b8-aa8c-f4ab26a66ff2.roa
File: 3a33d844-426b-41b8-aa8c-f4ab26a66ff2.roa (raw, json)
Hash identifier: a7+N0b4iHWKjvzhhu47p3VSjitta22nTMHXiw2wSkT0=
Subject key identifier: 81:5B:EC:BA:3A:EC:36:16:7A:F5:9F:05:3A:2E:79:E4:F3:80:57:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3655CEB64F69B84F1FD86FCF9B0D73511644B43C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3a33d844-426b-41b8-aa8c-f4ab26a66ff2.roa
Signing time: Thu 30 Jul 2026 01:30:56 +0000
ROA not before: Thu 30 Jul 2026 01:30:56 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:55:ce:b6:4f:69:b8:4f:1f:d8:6f:cf:9b:0d:73:51:16:44:b4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:56 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=c92978738de8dadfa3a17262a46d4a739978d925d35b3dc83057207c2d9614d7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:5c:ad:e0:19:51:06:0a:f1:df:1f:cb:ee:
3d:89:5a:9c:43:e4:4b:53:3a:ad:4e:13:29:b7:04:
73:27:ad:4d:26:4e:99:6f:23:6e:d4:08:f4:b9:c9:
02:3e:13:e3:51:6c:9d:4e:78:f2:70:a9:95:1a:1c:
ce:58:fe:04:5e:d6:ea:9c:1b:df:78:56:b8:51:60:
b1:89:56:6d:52:80:f0:f5:f9:91:14:93:42:48:45:
e0:bd:b6:e0:c1:6a:13:d6:d6:82:9d:c1:dd:6c:a1:
b8:07:c9:28:5b:07:3a:b9:ff:a2:0c:a8:37:d6:d2:
5d:67:6d:74:d8:40:bf:3e:6a:58:d6:20:1b:bd:ee:
58:b4:a1:8d:d8:7c:fa:47:b3:ba:44:f3:e8:a1:47:
28:94:41:0e:32:e1:97:6e:b9:93:11:20:fc:ca:43:
1a:75:02:af:1f:1f:88:4c:ec:94:b8:f7:df:74:40:
6e:4a:d5:6d:44:79:f5:5d:23:8a:6a:cd:03:a3:db:
12:20:b3:fa:27:e2:e4:66:89:25:24:5e:c6:2b:fe:
4e:26:7c:8f:5c:18:d5:06:7c:bc:00:3c:26:8d:8f:
8e:db:10:6a:8d:a9:26:b0:08:b6:5f:09:d2:ce:34:
de:4e:2f:90:a6:3c:36:59:ba:74:c8:5c:30:ae:5e:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:EC:BA:3A:EC:36:16:7A:F5:9F:05:3A:2E:79:E4:F3:80:57:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3a33d844-426b-41b8-aa8c-f4ab26a66ff2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:8000::/36
Signature Algorithm: sha256WithRSAEncryption
bb:98:82:36:49:69:23:8c:e4:ac:37:a1:58:db:d7:73:05:c0:
c6:77:7a:dd:1a:b4:64:02:82:64:5d:ba:7e:22:f7:81:11:16:
4a:aa:3f:e0:d8:df:6e:5b:f6:2e:8b:c8:6f:59:dd:fb:a6:b5:
b1:b8:3f:53:12:83:33:ad:19:77:ef:a2:d6:be:45:73:05:a0:
0b:62:75:ff:04:4a:55:47:3d:3e:18:8a:ca:cd:22:e4:80:fe:
af:da:b2:60:24:cd:c7:32:0c:aa:6b:9b:cd:1a:01:91:28:1c:
76:d9:a5:4b:2f:c3:30:c1:4c:4a:14:4b:ec:63:80:6b:b7:18:
4c:63:2b:e8:92:91:b2:ab:a8:99:88:f7:5d:0e:f1:f3:a3:64:
12:60:ec:2e:c1:d3:d2:7c:88:87:34:d1:df:06:aa:2a:73:bb:
43:f3:dd:59:9f:24:5c:c2:a4:7c:38:06:1f:cc:df:a2:3a:c2:
55:b1:9f:48:5e:90:24:e1:c0:75:8b:ff:ee:ce:37:14:bb:85:
84:a0:66:ca:ce:e5:ab:31:f0:a3:be:d1:8a:c2:c7:3b:f7:42:
8c:f7:04:97:b9:f2:24:be:7d:4d:52:c7:76:e0:40:9c:21:df:
93:b8:70:b5:f7:d6:97:ad:5c:c4:4c:62:5e:2a:0b:97:88:c9:
63:84:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:09 2026 by rpki-client