Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4710f082-f464-449d-9325-bcef03497e82.roa
File: 4710f082-f464-449d-9325-bcef03497e82.roa (raw, json)
Hash identifier: hZj3knZJNdxPBYMlumuE1ifqeY6afoKoWBJf4d45E7s=
Subject key identifier: 35:58:7F:1F:DF:34:D6:0D:F2:3D:7C:01:7E:93:2B:71:5A:35:71:CC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 713F8D217C01392492F472E19CD3371BC7083941
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4710f082-f464-449d-9325-bcef03497e82.roa
Signing time: Wed 12 Aug 2026 21:04:20 +0000
ROA not before: Wed 12 Aug 2026 21:04:20 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3f:8d:21:7c:01:39:24:92:f4:72:e1:9c:d3:37:1b:c7:08:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:20 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=3427415808dabe2445d4b111ee7ea4a1690860dab5b080a423c4638ba1766698, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:96:df:ad:da:31:67:38:e6:4b:26:a1:f9:
59:c0:32:94:8b:1f:98:08:c8:fb:d8:28:f0:46:2b:
1a:a6:be:fa:f5:d9:75:90:a0:b3:41:53:d7:98:ae:
00:02:65:91:b1:58:a1:cf:26:aa:fd:c2:19:75:31:
36:d6:6b:ce:92:86:97:dc:8f:b5:29:8f:58:64:dc:
74:42:22:a5:f9:20:e6:fd:f4:6d:9b:af:b6:5e:74:
74:19:b4:7e:91:35:0e:2f:09:62:ba:7f:a8:b8:0d:
f2:46:60:fc:ec:9c:6a:97:92:3e:bb:07:d7:e6:d8:
04:07:ca:2a:1a:c4:74:fc:e9:5f:1a:9e:bd:14:9c:
42:fd:fd:8f:b8:62:0a:42:25:5a:4e:59:e0:25:c8:
ad:56:91:87:58:87:73:57:ae:d9:88:e6:ce:9d:bd:
46:84:28:bd:33:7a:2c:d2:7b:01:86:9c:43:f8:e6:
fa:69:cb:26:04:60:56:7e:e0:69:04:67:ac:c9:c6:
3f:60:30:a6:9b:2e:27:75:fd:36:11:58:8f:e4:02:
8f:f2:42:c7:8a:02:63:41:1f:aa:2b:d6:6a:f8:cf:
a0:dd:92:68:c5:75:bc:86:a0:4c:96:53:6d:22:95:
b2:51:0a:f4:57:c8:a2:f7:e3:a8:61:53:05:fd:e2:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:58:7F:1F:DF:34:D6:0D:F2:3D:7C:01:7E:93:2B:71:5A:35:71:CC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4710f082-f464-449d-9325-bcef03497e82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7::/36
Signature Algorithm: sha256WithRSAEncryption
7a:91:fe:47:c2:b9:9a:f1:5f:b2:cf:e8:34:a5:38:e5:ea:96:
05:5f:bb:26:e3:19:dc:c7:d3:cb:1c:5d:cc:3e:5d:8c:da:00:
11:43:0a:5b:8d:86:a8:62:7e:ea:f3:62:c7:24:52:1b:11:28:
7b:91:6e:4f:15:ab:ca:b1:fb:dc:e5:fe:f7:65:07:e2:fc:e6:
e9:17:3b:f9:e2:26:ff:86:30:e2:3c:d6:af:2a:ca:00:df:b3:
c5:9f:30:77:a7:31:da:d8:23:51:c8:be:d0:60:73:18:98:00:
21:04:64:8f:70:29:89:0a:ef:1b:0f:60:a6:57:86:84:6e:f1:
b6:6c:1a:78:01:78:07:61:8f:1a:8d:b5:b5:18:5c:e0:97:c6:
49:a3:1f:d4:8a:fe:93:9a:c9:54:52:ed:72:14:0e:42:bf:8a:
04:c3:3b:a9:7b:d4:a5:25:0d:8b:15:50:5a:94:eb:8a:2a:47:
26:d5:a3:64:84:df:70:9c:ae:06:40:54:1f:d4:00:ab:b4:c5:
ff:e9:fb:e1:59:d6:8c:b7:7a:8e:54:f0:c9:0b:c1:7a:7f:13:
e4:47:8b:c4:ce:3f:3a:33:d0:d8:0e:ff:cd:ae:05:fc:13:e0:
f8:32:0a:d6:ec:45:aa:aa:00:0c:7a:76:91:5c:53:19:15:bb:
56:b1:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:30 2026 by rpki-client