Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/541ffd81-df5c-4971-9769-a37d113c922b.roa
File: 541ffd81-df5c-4971-9769-a37d113c922b.roa (raw, json)
Hash identifier: QFn3Spi4hLqoM9wx4TfES+GOyT0AG28Jxf81YdiErGM=
Subject key identifier: 9F:D0:5F:60:F4:DC:DF:4D:96:BE:85:44:50:2D:DF:AA:32:FF:C2:91
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6F98B2271FE89C00C771F2D9E5372B348CB89BB7
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/541ffd81-df5c-4971-9769-a37d113c922b.roa
Signing time: Thu 30 Jul 2026 01:20:30 +0000
ROA not before: Thu 30 Jul 2026 01:20:30 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:e::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:98:b2:27:1f:e8:9c:00:c7:71:f2:d9:e5:37:2b:34:8c:b8:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:30 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=4f8f10e577f73548fce7efc58cdafe25815c29e5a9c4bbcc5954cb56b575d660, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:57:b0:d7:0d:9e:6e:9f:7e:04:67:4e:81:
82:ca:f5:7c:d0:c5:fd:b0:5e:1c:18:df:99:0e:93:
2e:8b:a2:b5:a9:f8:e4:6e:b0:ee:95:4f:a0:f4:d9:
4f:8f:a5:be:30:9d:fb:8b:ea:4d:e6:40:77:a5:6d:
a0:53:89:29:b5:ab:75:9b:e6:80:ab:75:5b:00:7a:
79:a4:30:41:69:96:18:8d:40:59:cd:ad:56:7b:6c:
e6:e2:1f:5b:e3:c8:f9:c2:cb:b1:01:c8:69:ca:f8:
58:c9:bb:ef:f0:99:22:7a:95:0c:46:ac:f9:c1:2f:
f1:be:83:2a:11:70:1c:8a:4d:56:5d:4c:ee:f5:7e:
ff:74:0f:92:85:07:fd:6a:90:f4:09:d7:e7:77:e8:
79:b4:9a:d8:87:67:88:e5:e1:16:c1:fb:df:82:d4:
49:6b:db:5e:56:fb:b5:c7:ee:3d:47:c3:7a:d1:60:
18:21:f1:ea:fd:24:4e:c7:6e:ea:80:70:3f:32:6d:
d4:ab:33:47:5a:fb:d1:b5:1e:5b:59:1f:43:01:3a:
89:21:a8:bc:04:5a:31:d0:53:76:e6:ea:50:b0:b6:
4f:e8:d8:91:ef:60:e8:69:19:35:46:10:e8:68:c5:
ac:9b:0b:1e:73:44:d6:f4:d0:07:30:b8:ed:78:e7:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:5F:60:F4:DC:DF:4D:96:BE:85:44:50:2D:DF:AA:32:FF:C2:91
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/541ffd81-df5c-4971-9769-a37d113c922b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:e::/47
Signature Algorithm: sha256WithRSAEncryption
65:29:75:2e:d5:ba:18:18:29:4e:a7:4c:e4:ad:42:27:ee:18:
b2:a9:d2:01:d2:63:e6:3e:44:45:f2:5a:de:0a:94:b3:3d:de:
54:e1:04:68:c1:50:e9:93:d7:55:15:f7:bc:47:7b:58:5f:32:
b9:62:5c:77:0d:e2:60:b1:d9:90:73:a1:0d:12:58:ec:9b:67:
78:94:fa:f4:10:df:e0:45:cc:31:85:a4:d4:e6:b5:00:ec:eb:
94:8d:66:22:9e:e3:ee:6e:c2:42:6f:67:dd:25:b6:39:13:c0:
6e:42:c7:e1:b6:a6:f3:d8:a0:a7:9e:36:1b:53:d9:80:87:fd:
25:d9:2c:85:a8:d5:da:e3:32:6d:5c:d3:00:95:38:09:ba:52:
f5:64:4d:a6:82:67:33:a7:6a:86:84:e6:66:bd:42:86:03:b7:
75:3a:e9:2a:84:1d:13:65:2b:2c:04:59:e2:b8:f1:8c:d9:69:
c9:f0:7a:68:46:d9:e0:a4:b4:f3:d5:ab:50:96:65:2c:cd:2a:
e1:ec:34:5c:42:e6:50:f9:db:64:94:93:9b:5b:ed:ce:4c:84:
0e:ee:9d:0b:77:4e:f2:4a:86:6a:ac:6c:e0:12:6d:67:b6:5c:
c7:af:43:13:62:23:2d:16:6b:a2:59:0c:21:19:15:7b:e8:7f:
12:b8:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:57 2026 by rpki-client