Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
File: 4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa (raw, json)
Hash identifier: Cw2W3KQ4kAYZhW+sTRPBF+oZ5/5Ss7ru0fONTuITibQ=
Subject key identifier: 44:46:93:ED:14:ED:DA:AE:E1:05:CD:7F:DB:4A:80:D3:A1:2E:0D:88
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6E366633B543EB1D2B99B9C67FEF0DF2721D5C9E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
Signing time: Thu 30 Jul 2026 01:31:00 +0000
ROA not before: Thu 30 Jul 2026 01:31:00 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:36:66:33:b5:43:eb:1d:2b:99:b9:c6:7f:ef:0d:f2:72:1d:5c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:31:00 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=e2b996d0669141e3f16f97621f35182fb49d646ac96c4ff44da68dedb5626221, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:a4:b7:45:55:7f:7b:be:8f:be:5d:c2:04:
c3:54:dc:58:21:1a:c9:ff:dc:49:49:a8:fc:e9:cd:
99:a7:42:3c:fb:23:03:93:5b:7f:3c:7a:ce:91:aa:
e0:c5:1d:3e:26:a9:58:a6:06:5c:b3:c1:80:c1:c5:
67:32:ad:3e:5f:bf:b2:ad:1c:c8:0c:1d:48:9c:15:
60:da:a0:c7:bb:e0:55:49:50:73:25:e0:71:38:6b:
6a:e7:3f:14:42:7e:e0:94:fe:44:c4:47:ea:cc:88:
56:73:5b:c3:fd:61:3a:da:68:68:57:98:be:7b:5b:
94:80:51:da:06:42:bc:05:5a:5f:4e:b9:2a:77:a4:
5b:9f:83:3b:8e:f9:90:fe:51:74:2b:c0:db:8a:e5:
bb:88:9d:f1:0b:a5:d8:cf:e7:75:74:05:df:5f:bf:
0a:19:69:bd:80:f5:53:c3:16:cd:9a:d0:fb:c4:f1:
a6:00:0e:0d:20:bc:37:dd:77:c4:2c:3d:fa:00:56:
6c:83:f9:96:4a:23:fa:53:99:81:90:df:92:b2:c6:
78:9a:36:83:df:36:c1:b3:71:37:4a:4f:5f:e8:08:
77:e7:55:71:39:8f:6e:11:a5:6f:54:c3:fd:9c:22:
d9:c1:99:4e:75:93:c1:a3:02:8b:4c:ef:b5:95:05:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:93:ED:14:ED:DA:AE:E1:05:CD:7F:DB:4A:80:D3:A1:2E:0D:88
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e175ead-18b1-4e23-a13e-68ba2a69c2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2800::/40
Signature Algorithm: sha256WithRSAEncryption
83:fe:d8:05:3a:ef:15:8f:6c:ff:f6:d9:e6:76:8f:8c:e9:4a:
b8:17:72:08:3f:99:01:91:04:0d:75:19:7c:5b:93:d5:df:26:
e9:d0:52:40:e4:7a:6a:af:20:d3:76:05:f8:08:32:c0:cc:fe:
b6:0d:2a:1f:24:1b:88:56:17:32:90:0a:be:39:d4:08:b6:f2:
6d:f3:95:df:82:22:c3:15:49:b3:9d:a7:a0:f1:69:08:01:cf:
ac:13:a1:77:2e:a7:1a:4a:bb:51:fb:08:11:b3:90:1e:da:e6:
e8:4e:eb:76:1b:41:b7:ca:5b:c6:95:a8:44:c7:5c:ce:b5:dd:
a6:cb:9c:48:b6:46:f8:ad:0c:a5:d5:1b:1a:17:1a:7c:c9:e7:
e2:04:e6:87:05:39:14:0e:63:29:7e:72:dd:26:2e:e3:09:dd:
62:28:95:4c:31:46:91:21:c1:35:22:36:e0:ca:cc:b4:fd:d4:
45:1d:8c:88:b4:5e:86:ba:a6:6e:bb:7f:7f:cb:38:92:7f:1e:
76:a0:53:79:48:02:d0:94:55:8f:d2:83:36:a7:b3:23:76:5b:
74:1c:87:56:58:77:ee:b8:25:73:0c:d3:4f:df:4e:af:9d:01:
d1:d3:c3:4a:d9:22:af:9b:a0:59:56:62:0b:62:c5:08:77:78:
41:76:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:37 2026 by rpki-client