Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f80fda1-9681-4549-9269-31023c00bc49.roa
File: 4f80fda1-9681-4549-9269-31023c00bc49.roa (raw, json)
Hash identifier: y/JxYpzFEva2/y5jStgzRmHW/T8Gm82Kq+kE66yrUWw=
Subject key identifier: AC:C2:54:83:07:94:CD:5D:78:1E:8A:C7:B4:1C:4C:17:78:C1:90:62
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3F39AFD269757F591428B94827E3A90F1C48CD66
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f80fda1-9681-4549-9269-31023c00bc49.roa
Signing time: Thu 30 Jul 2026 01:20:27 +0000
ROA not before: Thu 30 Jul 2026 01:20:27 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:39:af:d2:69:75:7f:59:14:28:b9:48:27:e3:a9:0f:1c:48:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:27 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=083853f4f9cf1330009e441e11e6a3436b25cd843ddc8f1a4ee4eb3c244dfc19, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:96:f7:a8:8e:86:d7:63:dc:ea:1c:42:1f:
5b:c1:77:69:89:23:47:5b:50:91:0b:c3:b4:5a:8a:
83:59:de:a3:59:fa:14:11:f1:df:18:bf:e3:fa:8c:
5a:10:4e:6b:0c:1c:0a:6c:ea:18:3c:5e:dc:1b:13:
c3:a1:75:f8:76:87:bd:1c:1f:56:03:19:ab:a9:f1:
ea:0d:fe:75:3d:8c:6c:b8:ae:46:24:7d:93:8f:67:
c5:40:6c:f2:4b:e5:ad:6e:b6:b5:4b:cc:21:16:78:
c1:8f:70:c8:eb:e0:c1:ea:3e:21:af:17:45:75:5d:
47:ae:59:3f:c4:57:7f:fe:05:12:7f:a9:61:34:60:
f4:3e:7b:7a:3b:25:46:04:e0:2b:ee:93:8b:54:30:
79:ea:62:dd:cd:f1:7c:e9:07:ee:14:18:8c:a6:60:
f6:95:83:e6:88:f8:03:46:68:95:2b:4e:83:6d:08:
48:f4:3e:3f:6a:ab:6e:58:cb:30:4d:9e:94:d1:e7:
63:b1:04:df:5a:59:67:69:a1:e4:e9:39:2a:ee:de:
e2:df:dc:90:1f:b3:cf:0e:15:d7:9f:4c:c2:bc:4c:
e9:30:80:5f:33:02:69:1f:60:06:97:58:fd:16:aa:
dc:5c:68:3d:42:13:89:2c:f7:30:73:01:69:4b:3d:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:54:83:07:94:CD:5D:78:1E:8A:C7:B4:1C:4C:17:78:C1:90:62
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4f80fda1-9681-4549-9269-31023c00bc49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
4e:26:14:3e:5e:57:79:d0:f1:df:f0:d4:47:7d:c0:7f:81:33:
5e:ab:e7:6b:09:63:1b:a8:6d:ff:a3:c3:fa:7a:0e:5d:e2:49:
83:f5:b7:80:52:03:80:80:06:1e:1e:9f:b4:14:44:ab:19:05:
a0:5e:63:6d:e4:5f:50:db:a3:99:2e:7a:95:d2:cd:be:2b:2f:
49:4a:70:64:c3:68:c1:06:43:55:03:e3:6a:1d:2b:1f:77:b9:
29:2a:0d:59:f5:52:77:00:9f:fc:73:45:cc:a9:90:b0:51:10:
c2:ad:39:27:eb:08:ae:c5:20:a0:61:19:46:86:76:9c:89:90:
2d:e7:65:7b:c5:b7:ec:8c:15:75:74:54:8b:1c:8e:26:a5:9e:
fd:d8:4e:17:0d:32:63:87:a8:86:4b:dc:19:b6:17:87:ca:16:
39:35:be:a7:5b:ce:7b:50:d2:79:0f:81:9b:9c:60:89:5f:f3:
7c:fd:1a:c2:e9:70:8d:14:95:f5:46:e0:a8:1a:90:89:6c:ef:
42:29:5a:fd:59:98:1f:ab:0b:63:ea:ab:52:9f:ab:a1:3c:77:
a4:38:dc:da:cb:2f:f0:1e:b3:6b:6f:e5:9e:09:c9:c8:e2:34:
fc:89:e8:31:5d:89:1f:37:9c:ef:9c:2f:c5:01:9f:68:72:4a:
26:92:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:54 2026 by rpki-client