Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/478dc7ba-53a9-4168-af24-e3f6b0e727d5.roa
File: 478dc7ba-53a9-4168-af24-e3f6b0e727d5.roa (raw, json)
Hash identifier: 0xpcgJclWE9jutz9v3vl76abI/uYx76fijtq5F8IW+o=
Subject key identifier: 9D:09:06:E9:A3:72:12:22:F4:2D:23:48:9D:A8:00:67:A5:BE:C3:EA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5E654158201783DAFFE1A9C683F73A792E44F494
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/478dc7ba-53a9-4168-af24-e3f6b0e727d5.roa
Signing time: Wed 12 Aug 2026 21:04:15 +0000
ROA not before: Wed 12 Aug 2026 21:04:15 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:65:41:58:20:17:83:da:ff:e1:a9:c6:83:f7:3a:79:2e:44:f4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:15 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7d1fd2c2965328d1eea61d8cdcd5bba16188d72ed4d125ac3acf8821ba878194, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:d3:e7:cb:03:0d:e2:3b:b8:e4:43:ea:23:
f0:8a:8d:29:01:8a:54:05:a8:9b:f1:d6:a1:10:47:
6c:07:b6:e5:ae:0a:c5:b0:2b:fe:5b:03:52:93:86:
22:64:d9:c3:09:df:dd:65:8b:38:45:10:b2:9d:3d:
c5:8b:95:f1:74:18:94:c7:99:8f:22:9e:63:47:89:
d6:23:2c:d1:58:b8:fa:0f:de:f0:e1:f6:6e:0c:b0:
93:45:e5:09:0b:7e:be:94:3f:a6:88:f7:25:1c:9c:
2a:6b:7e:15:6e:0d:4d:7a:3f:02:4d:bc:e8:f1:cb:
51:ba:7d:df:83:70:5c:c6:06:65:56:d9:18:6a:b5:
0c:d0:d3:f3:ba:c8:43:c6:c0:6a:dc:ef:fe:8c:82:
77:41:25:91:68:e4:18:e4:ab:4d:81:0c:76:23:66:
44:df:48:8d:f6:9c:18:07:5b:d1:93:e1:42:fb:73:
9b:4f:92:19:37:02:ae:cb:80:62:9d:d0:96:3a:3d:
76:a0:ed:cc:c9:8b:12:92:d5:56:dd:0a:fc:ae:a4:
dd:3e:7c:0d:d8:ad:b6:b5:51:d7:b1:a2:75:95:bd:
51:a0:a6:b7:41:69:ed:6e:e3:0c:25:67:6a:a7:b7:
62:a8:d6:10:57:84:dc:95:04:90:9e:2a:a5:c7:1f:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:06:E9:A3:72:12:22:F4:2D:23:48:9D:A8:00:67:A5:BE:C3:EA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/478dc7ba-53a9-4168-af24-e3f6b0e727d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:1000::/36
Signature Algorithm: sha256WithRSAEncryption
5a:7f:4d:d5:86:2f:a7:58:86:46:51:a6:e9:d8:6d:0e:ae:8b:
d7:e9:26:82:eb:1a:94:5d:9c:a4:b0:ba:4c:99:f9:24:6f:0f:
d7:b0:f8:d1:c3:85:2d:57:73:9b:d3:5e:03:9d:ac:ef:41:81:
3d:0b:b1:81:d1:c7:bd:34:31:d7:36:84:22:90:ae:bf:b3:b9:
3c:09:15:cd:ef:6c:4f:cd:fe:aa:6e:a3:8f:f6:20:ce:4f:d9:
11:f6:47:92:f5:8e:78:26:d1:87:ba:5c:e3:28:15:4a:a5:55:
22:aa:e0:d4:16:21:be:77:3c:5a:ee:83:6c:25:4f:51:fb:b8:
b9:b6:a8:b6:ea:b6:71:02:c6:1b:72:38:ae:d0:4c:b9:7f:c7:
74:67:f3:09:89:0f:65:10:92:69:05:43:15:ec:ca:15:f3:5f:
46:ad:4b:77:69:35:ab:2b:a0:6f:6b:61:0b:d3:bd:f2:b6:55:
b8:99:1d:29:a0:d4:9a:ff:8a:f1:6f:1b:77:cb:21:23:a9:47:
b7:98:97:d2:bf:5c:4d:b8:10:06:57:a7:01:d8:c4:96:c2:65:
39:18:ba:2e:c3:85:ca:cb:35:43:03:ea:e5:a8:21:32:c7:31:
87:f5:dd:9f:34:e4:f7:5d:f5:82:3f:71:7f:26:e2:21:ec:17:
0e:81:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:10 2026 by rpki-client