Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4251c6ee-a4b0-4746-967f-94d2557ebf12.roa
File: 4251c6ee-a4b0-4746-967f-94d2557ebf12.roa (raw, json)
Hash identifier: LQXFtkhO8caw67B76Z8aEJpIhfXH2A5fasY8BorILrA=
Subject key identifier: 0D:4D:48:87:6D:FE:F2:90:EA:B8:0A:84:A7:5C:96:B1:1C:98:44:05
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 665871348DAE14152F91EBBA8295F528C9129A5E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4251c6ee-a4b0-4746-967f-94d2557ebf12.roa
Signing time: Thu 30 Jul 2026 01:20:05 +0000
ROA not before: Thu 30 Jul 2026 01:20:05 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:58:71:34:8d:ae:14:15:2f:91:eb:ba:82:95:f5:28:c9:12:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:05 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=d84f34e34cc62968aa9a6762783e1dde44075212124a86ad1990dc3c149ae6c5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:15:78:e5:63:56:59:c4:6d:21:51:45:8e:
c8:bd:4f:ca:9f:95:ff:c2:e6:3f:d6:9e:dc:85:ad:
5c:44:87:fe:7a:d2:b3:0f:49:4b:47:0d:69:a8:3c:
69:c2:de:4f:a5:ea:20:64:a2:c9:fb:3c:24:4b:e4:
4f:4a:ce:b9:ab:83:d1:2c:03:cc:20:a9:04:45:c2:
7f:7e:f2:c1:f8:a3:a4:93:63:44:44:70:15:39:23:
a9:5f:a7:ee:91:c5:15:7c:f8:af:c1:21:e1:d4:e5:
a4:50:0c:47:e8:2b:69:c9:ad:99:69:06:f8:40:de:
94:29:5a:b4:ca:b9:69:2c:27:7f:6f:ef:9d:90:db:
3f:85:7f:2f:9d:c8:fd:46:5b:67:87:8b:6f:60:10:
95:d0:4e:dc:c8:5d:5f:42:42:43:70:2a:ae:67:4f:
cb:6c:aa:09:ef:7f:65:57:10:7e:b6:4c:ea:05:25:
d9:ac:73:e2:eb:2e:4c:9d:c1:2a:63:3f:2a:ab:3e:
32:30:3c:60:67:94:b6:fb:fd:c8:28:a8:d1:3d:e9:
f0:75:98:d4:9c:f4:2f:cb:05:33:74:31:c4:bf:20:
3b:d7:54:92:3b:c8:32:fb:17:e0:8d:1e:e6:ec:73:
87:14:07:a1:eb:ae:f5:12:ad:96:fe:32:e7:92:50:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:48:87:6D:FE:F2:90:EA:B8:0A:84:A7:5C:96:B1:1C:98:44:05
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4251c6ee-a4b0-4746-967f-94d2557ebf12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:880::/48
Signature Algorithm: sha256WithRSAEncryption
26:58:5d:82:43:b3:aa:db:37:53:a1:2c:91:c0:c1:82:93:51:
16:c9:f1:dc:26:da:73:2d:0b:0a:fa:40:c8:cf:fc:d8:7b:d0:
d4:4f:f3:be:0d:83:72:3f:3e:8e:9a:49:3f:e9:2a:ae:bd:89:
b5:a0:69:05:ba:08:1b:7d:3f:82:e8:f8:dd:7f:45:09:a2:08:
50:3c:b2:72:bb:33:ff:3b:86:53:ea:60:f2:ea:89:b1:62:f9:
03:57:b4:6a:e8:4c:df:f4:24:d8:9f:61:97:3d:72:c8:6a:6f:
1b:ef:bf:9b:92:e7:7c:1e:3f:e1:ff:64:77:01:fe:11:a6:f2:
0c:98:20:88:c4:d0:d2:92:00:58:e1:3b:91:2b:43:b2:b6:ec:
cd:00:12:66:b9:81:37:50:fe:c5:d3:94:7f:de:05:82:f0:92:
86:37:12:47:07:78:52:b0:34:d3:3d:9b:16:84:34:00:53:f0:
e5:43:b0:9c:0c:a2:c4:c8:df:ea:95:48:0f:c5:41:ae:1f:b4:
02:30:47:46:50:53:4c:2d:a7:bc:26:8f:0e:47:65:63:64:2b:
be:48:c2:f8:7b:fc:0d:2c:61:c3:09:fe:54:58:5c:66:93:da:
05:65:5d:4a:ea:3f:e5:15:54:ee:ec:69:71:f5:75:f0:d6:3b:
62:64:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:50 2026 by rpki-client