Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa
File: 40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa (raw, json)
Hash identifier: UD+FVeQQlr5gJx0v24zTCxDmRUrbk0lq0xd80oNRcgg=
Subject key identifier: 5B:D7:17:28:38:8F:66:EC:21:44:5E:26:B7:C8:CE:7C:84:66:99:63
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7C2A24832DFC4E0EE2D84FDCA62ED5D29A471ED7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa
Signing time: Thu 18 Jun 2026 20:19:35 +0000
ROA not before: Thu 18 Jun 2026 20:19:35 +0000
ROA not after: Wed 16 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2a:24:83:2d:fc:4e:0e:e2:d8:4f:dc:a6:2e:d5:d2:9a:47:1e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jun 18 20:19:35 2026 GMT
Not After : Sep 16 23:59:59 2026 GMT
Subject: serialNumber=26f4d8db317f2dbed6501165ab7e6f1438aacaf109ea6360565e100675b8f799, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:f9:48:ef:48:d1:54:42:15:2a:44:0d:c3:
5f:9b:ce:1c:d8:fc:b0:da:fd:b3:f3:0b:8d:46:52:
c2:a4:ce:0d:fe:4d:b3:7c:4b:e7:ee:47:de:dc:1e:
0d:cf:b7:f9:be:e4:8c:f7:87:7b:90:67:04:14:c8:
5c:bf:82:f6:b6:3c:e2:f1:b7:54:6b:d8:e5:29:43:
40:87:b6:e5:e6:d5:2d:65:3b:0f:74:e8:e1:8b:cc:
4a:07:cc:44:d3:2e:ee:51:ea:b1:20:81:27:64:ee:
99:15:b9:fe:42:c5:18:d7:33:f8:3d:ba:2b:8e:cf:
57:bb:b4:b1:ec:03:6b:8d:9e:23:c8:56:33:ff:11:
64:f3:03:a4:60:05:3f:ba:bf:59:89:c6:26:85:5f:
6b:a1:0d:14:2a:14:a1:56:aa:2a:c6:bc:11:b1:83:
44:bb:23:33:56:9d:98:af:c3:ed:b1:5e:b2:86:95:
7d:5e:e8:9d:37:39:2a:85:21:a5:5a:5d:b8:de:3e:
b1:5d:4e:0a:dc:24:81:3f:a8:76:f7:2c:73:96:5c:
af:bc:96:51:35:f8:a7:80:46:eb:3d:1a:9d:00:75:
dc:1a:17:3b:ab:d6:f5:7c:a7:8e:ee:0a:66:86:49:
22:dc:ca:e6:25:7f:bc:25:12:b4:f5:d2:67:89:96:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D7:17:28:38:8F:66:EC:21:44:5E:26:B7:C8:CE:7C:84:66:99:63
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f440::/48
Signature Algorithm: sha256WithRSAEncryption
29:1f:ac:97:c6:80:f9:b4:f2:54:32:8f:cf:08:e5:96:44:35:
db:ba:9b:2a:82:de:00:cd:8a:24:8b:27:f9:51:9a:a3:e4:51:
00:f0:6c:1b:e9:2c:e7:92:84:bf:30:9c:f4:3b:32:a9:ed:b3:
2b:ea:ac:b5:63:32:27:d9:33:6a:04:4b:2c:8f:4f:0a:fa:ca:
a8:27:c0:cc:b3:39:34:57:48:b7:6e:97:6a:9d:5d:8b:2d:77:
e7:f7:64:a9:14:a1:42:98:8d:79:ec:a1:cd:dd:e5:fb:d9:a8:
c4:ac:60:db:24:26:02:66:68:83:11:32:0d:d7:f1:42:aa:2a:
0a:0e:5d:a4:81:34:d4:ff:01:17:93:45:af:d6:84:81:32:3d:
68:05:52:d0:d4:77:f4:7f:28:d0:26:6b:59:b6:2d:5c:8a:ce:
5b:b4:62:1c:92:8a:21:c4:6e:86:9d:b2:13:ee:4b:d7:80:01:
bc:0c:13:49:9c:bb:b8:16:8d:9c:7a:5a:2b:b6:20:13:0d:9c:
7c:e3:58:a4:24:c5:00:83:22:e5:5f:26:a6:92:a1:6d:66:65:
8c:7f:eb:f2:14:0c:64:c0:93:43:28:ce:4c:d9:76:0f:78:8f:
e6:b2:b8:1f:50:35:67:cb:3c:e8:da:3a:51:70:fc:3b:58:f3:
36:99:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:37 2026 by rpki-client