Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f6dedf9-8639-4abc-aa0b-02cb8822ee8a.roa
File: 4f6dedf9-8639-4abc-aa0b-02cb8822ee8a.roa (raw, json)
Hash identifier: 2mfaZCd0wMoKjOHgFb37fWmrUSQXCyQNuxjQym5NysQ=
Subject key identifier: DA:BD:9C:07:D7:59:4E:77:D4:82:96:E2:29:BD:34:5E:24:52:A7:A0
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 02F318A461E03800A731362AB0119C43F00F0856
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f6dedf9-8639-4abc-aa0b-02cb8822ee8a.roa
Signing time: Wed 12 Aug 2026 21:06:52 +0000
ROA not before: Wed 12 Aug 2026 21:06:52 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f3:18:a4:61:e0:38:00:a7:31:36:2a:b0:11:9c:43:f0:0f:08:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:52 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=437d53ad0828f1c6267e0669f01ef58017a6d837bbf097d27053109a357169c4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:b8:ef:64:4e:41:16:89:38:82:e5:50:7a:
c1:14:47:ca:29:48:9c:e9:4e:23:60:46:aa:71:47:
01:86:5e:a3:6b:40:2a:d4:28:b5:41:9b:ed:b5:23:
c8:3a:dc:60:c2:2b:4b:5d:b3:92:ad:7b:89:42:62:
b9:4c:28:d1:e5:ec:32:f5:2b:b7:24:95:8e:c9:49:
b4:18:c4:04:da:34:ab:70:3c:7e:14:0d:89:96:57:
91:57:8f:2a:88:62:c3:3e:db:b4:a8:34:cf:9b:65:
84:7f:81:21:4d:8a:1d:97:72:1c:6d:2b:03:11:19:
6d:97:03:32:ee:7a:f6:cf:77:65:1e:21:c5:f8:1d:
db:be:0f:44:ea:eb:06:54:fa:51:76:8b:24:a5:a5:
18:b9:83:68:c6:d3:b4:0c:91:42:4f:c4:03:98:d2:
c5:56:32:18:3e:37:8f:65:9f:14:58:70:ba:3c:eb:
5d:eb:6e:5a:e4:6e:d0:40:f6:3b:c9:c8:2d:f6:ea:
a8:18:01:19:17:70:0b:20:c5:d0:18:71:26:c9:c4:
a3:b6:40:c5:47:09:57:68:11:50:12:28:08:93:2b:
4b:f3:89:33:5c:63:fe:c2:a5:ff:61:bd:fa:91:f8:
ad:ad:0d:e9:71:5b:6d:66:f7:a0:cf:f6:30:54:74:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:9C:07:D7:59:4E:77:D4:82:96:E2:29:BD:34:5E:24:52:A7:A0
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f6dedf9-8639-4abc-aa0b-02cb8822ee8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
6d:78:04:ba:f2:08:5b:30:6f:73:4a:5d:4d:38:7c:f8:35:fb:
c5:aa:9b:15:d8:09:c5:ac:67:ed:33:0c:2d:05:a5:f3:3f:3a:
c0:22:ce:ad:8a:97:7b:8b:39:9e:4e:ad:1f:78:b6:f4:95:7c:
5d:6d:07:2e:ba:86:32:a6:1e:df:9c:cf:2e:f0:58:a4:c1:d5:
ce:74:d0:39:6f:d9:e5:3a:6a:2b:88:b7:07:07:22:56:e6:15:
d8:65:9d:dc:9b:fc:2f:01:1b:d0:4d:ba:05:7b:37:60:9d:2c:
66:58:f7:43:14:6d:d5:bb:31:41:41:87:47:b8:28:27:22:5d:
b3:ca:65:af:dd:c5:32:c0:c7:64:8a:1d:c5:a4:28:cf:6e:15:
81:06:b7:16:f9:b2:9f:77:3a:53:98:70:48:ab:57:90:ac:93:
15:e1:d1:8a:01:c9:d2:e0:68:f9:0e:eb:1e:cb:68:1c:4f:a6:
31:2b:70:4d:9f:78:a1:04:08:2f:30:38:65:fb:6d:43:1a:72:
de:fb:ae:e9:13:bb:46:0d:e3:44:09:73:fc:21:2b:b9:b9:4b:
96:7e:c2:6e:6e:1c:65:ec:cc:d3:80:e1:87:64:8a:d2:51:6f:
9f:9c:c7:97:8d:c2:6f:da:09:62:a8:06:3a:7a:18:f3:3a:09:
25:dc:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:33 2026 by rpki-client