Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
File: 4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa (raw, json)
Hash identifier: 22BGgt2gYkEcHo53jWo3rhBFjcCQCyPHMYtsbaH2Cg4=
Subject key identifier: 91:3E:99:DB:7C:9B:C0:CB:D4:DE:98:95:19:F3:FF:D5:FD:D2:53:3D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 221E646A872B0E0BC890564C117568215A827D9C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
Signing time: Tue 23 Jun 2026 00:00:10 +0000
ROA not before: Tue 23 Jun 2026 00:00:10 +0000
ROA not after: Mon 21 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1e:64:6a:87:2b:0e:0b:c8:90:56:4c:11:75:68:21:5a:82:7d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jun 23 00:00:10 2026 GMT
Not After : Sep 21 23:59:59 2026 GMT
Subject: serialNumber=b7f9e94ad80d5eb1b5221a29ce7669768b83d04bb49a4eba5c0f2eef3c93a157, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:ff:8a:2c:cc:19:d0:e2:90:ae:ee:6e:a0:
4c:91:52:67:21:c1:1e:64:1c:83:48:45:c5:b8:17:
1c:14:57:26:83:04:b7:a2:45:5b:ca:84:df:dc:79:
ab:33:f9:e1:fd:60:ef:5b:d9:8a:da:52:49:51:db:
3f:41:61:f9:7c:0e:09:89:32:53:b4:a2:f9:91:9b:
e3:13:a1:e4:eb:da:2c:f5:c5:a0:d8:08:74:11:39:
6d:4d:94:f0:f8:96:c5:af:6c:75:ed:07:4a:b4:4b:
3c:29:b1:ae:f9:36:e5:0a:ba:fa:c3:fc:6f:45:c2:
77:a8:18:09:76:b8:3f:57:81:16:8d:2b:31:01:50:
ee:a9:95:66:89:e3:27:bd:d9:dc:77:d3:f5:c0:63:
e4:42:12:66:a6:7d:10:08:9d:97:41:bb:3b:9c:46:
c5:d8:e0:d2:bd:d6:10:6a:43:5b:08:07:dc:dc:e3:
76:3c:d9:65:97:b7:80:d6:99:aa:7e:f2:0d:d9:a5:
92:18:27:08:5c:b0:4a:08:e5:77:58:ac:03:29:fa:
c9:b3:f3:21:37:58:73:7b:f6:e7:91:20:0f:30:38:
24:0b:9b:ac:d7:d8:d4:eb:40:61:1f:6d:25:ac:e6:
21:5b:33:24:be:57:0a:91:06:40:78:9a:cd:28:e4:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:99:DB:7C:9B:C0:CB:D4:DE:98:95:19:F3:FF:D5:FD:D2:53:3D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
81:7b:29:b0:f9:a1:98:e6:51:8a:cd:bd:3b:1b:6b:39:96:a0:
53:c3:fc:0f:88:ea:f1:f1:e0:36:4f:ad:1b:81:dd:7e:4a:30:
03:89:76:19:d0:07:ad:a2:09:7e:19:88:19:2d:bd:87:9e:0c:
8c:80:c8:27:0a:d6:bc:dc:ed:2c:0e:18:42:ae:2b:ed:90:de:
83:c3:e7:6f:59:25:ce:e3:98:bc:86:d5:56:b9:6f:1b:0f:f5:
e7:d5:8a:4d:71:79:2c:1b:8e:3a:97:e4:6a:1c:62:7a:9f:df:
c1:82:73:59:cb:b1:02:a9:71:c5:17:c5:82:1a:22:39:21:b0:
f9:0b:4a:33:f6:c8:af:e8:4f:12:c4:74:9c:0c:6f:55:8a:59:
74:5b:01:d1:47:43:86:28:13:44:be:da:9d:36:ce:d5:2a:95:
f7:41:a4:56:1f:c2:7e:6c:42:c7:7e:1c:a3:1e:eb:4b:cb:27:
37:28:44:82:08:ea:e2:c5:5e:62:59:0e:a3:6c:21:20:0f:ac:
35:c5:08:6a:ce:b5:09:65:52:d3:58:b1:8e:99:80:16:d4:fb:
3f:91:8d:cd:ec:07:38:5b:89:46:f7:74:f2:02:93:09:23:ee:
c9:3e:f2:7e:d1:2f:d1:38:38:f6:50:b0:57:2c:1c:5f:10:8f:
2b:f3:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:41 2026 by rpki-client