Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3fe8d737-6af0-4f49-813a-04581455d703.roa
File: 3fe8d737-6af0-4f49-813a-04581455d703.roa (raw, json)
Hash identifier: ptrNIQUFonnVHITv0uhllGz1+U+8UmK8MM4wRyvRoQ0=
Subject key identifier: 3D:8A:07:24:0E:77:F7:02:8C:0C:E1:38:68:45:4E:60:63:CE:CA:72
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2945C9FE30C6D4CF2CF8CFCBF4E6905F2838075B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3fe8d737-6af0-4f49-813a-04581455d703.roa
Signing time: Thu 30 Jul 2026 01:20:09 +0000
ROA not before: Thu 30 Jul 2026 01:20:09 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:45:c9:fe:30:c6:d4:cf:2c:f8:cf:cb:f4:e6:90:5f:28:38:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:09 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=d60a41c459657c7386a3ea27803d204c8c8eee7b595a500e5f5c8253e0733fd0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:bd:fb:44:f7:25:19:30:db:9b:c1:34:c7:
5e:62:e2:87:6d:ff:94:e8:bc:3b:ef:cd:19:97:0e:
04:66:45:fe:7f:f3:73:f1:1f:38:34:15:29:ff:22:
35:bd:4f:95:d7:88:d2:ea:49:fd:48:eb:94:73:7c:
99:6a:7e:67:f6:c0:96:4f:90:4f:41:51:71:d6:16:
5f:1e:a1:79:60:58:50:f5:29:f4:59:f4:53:f8:8e:
5b:9b:ec:e9:94:25:92:10:6b:b3:64:0d:69:af:52:
ad:0c:8a:f5:27:4e:3f:2d:4e:81:7e:dc:7f:4b:86:
0b:ec:ab:5a:97:4f:fe:47:6d:9d:f2:9d:1d:cf:1c:
36:f1:ac:d6:d8:75:bf:a9:61:c4:e3:59:61:a8:54:
31:df:e5:f5:44:70:34:3e:50:e5:fe:11:ad:72:c5:
c4:fc:42:4b:b0:d6:64:10:74:8c:77:55:1f:8f:2a:
9d:a4:e9:cf:54:e7:53:d5:c4:5a:e9:9e:a2:ef:69:
be:a3:89:a1:d6:bf:62:9e:35:7e:c2:15:c6:93:ab:
89:84:03:91:8e:c6:39:1d:c5:fc:26:c6:01:f9:53:
ec:09:9a:de:37:d8:88:67:22:ac:88:e4:d6:2a:5e:
23:14:4b:e9:b6:cb:9a:9e:ab:6b:93:6c:d9:f2:f8:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:07:24:0E:77:F7:02:8C:0C:E1:38:68:45:4E:60:63:CE:CA:72
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3fe8d737-6af0-4f49-813a-04581455d703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:8800::/40
Signature Algorithm: sha256WithRSAEncryption
5c:c5:30:96:af:30:a4:00:02:85:ac:51:4b:e7:9b:4a:d2:2f:
0d:77:4a:6a:e5:c3:4f:6e:18:d4:d7:cb:c8:64:d2:26:cf:57:
a4:02:43:4c:29:58:32:79:4a:9f:87:33:07:4e:6a:98:1c:1d:
06:d1:fc:43:4d:ae:93:eb:b8:03:60:78:bb:4b:15:e2:4b:8f:
55:0d:45:fd:c0:05:a6:50:7e:19:77:51:52:1f:3e:6c:71:87:
59:bf:1d:61:42:57:47:97:55:ef:c0:37:8b:a3:e9:a1:5e:f4:
b9:6c:1f:aa:fc:53:75:66:b6:f4:36:ee:ef:bf:21:a2:58:09:
4d:8c:6e:2a:33:42:c3:33:4f:b8:53:2b:84:bc:53:27:3b:cd:
f4:dc:4f:ce:1f:ab:7f:3b:5c:03:45:92:e0:e7:31:20:be:92:
b5:e8:25:7b:88:94:25:99:8d:40:d0:e4:44:40:04:65:33:fa:
b3:b7:15:d9:49:fa:97:e7:d3:cb:99:c1:76:2a:33:bd:c3:a8:
d4:95:08:90:83:04:92:2e:d9:41:db:bb:08:30:fb:3f:84:85:
19:2c:62:11:79:eb:d4:ac:df:a0:d0:61:2c:a3:01:d9:db:ae:
48:bd:78:a8:19:15:89:dc:6a:6e:cc:f9:16:6e:bc:f0:cd:9e:
c3:a8:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:04 2026 by rpki-client