Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa
File: 54519fcd-4655-4148-9d7d-913b0c0cfe03.roa (raw, json)
Hash identifier: 6h9wq3dCE65tZd86rCR7xeI44g7HFCfGPy1Prm4bUw4=
Subject key identifier: D4:2C:37:B8:D6:9E:5B:74:3C:70:21:47:0B:FD:24:CB:8F:98:09:D1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6E7073DCD13CDA2C2F9D8950741DA8F4D8EBED40
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa
Signing time: Thu 30 Jul 2026 01:31:03 +0000
ROA not before: Thu 30 Jul 2026 01:31:03 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:70:73:dc:d1:3c:da:2c:2f:9d:89:50:74:1d:a8:f4:d8:eb:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:31:03 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=8398f5554a5b859ed4d23fc6fb415aa4e5f13d148a8941c07651fcfdf94bfb4e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:a3:ce:74:63:fb:59:44:af:c4:96:c9:d1:
cf:1d:50:76:e1:66:56:1d:84:35:85:37:0a:db:03:
29:41:35:bf:a0:d3:bb:f4:38:9e:24:e6:2d:e9:b3:
62:29:a5:75:10:52:4a:2a:f8:36:54:c7:a1:4f:91:
a9:da:08:ec:26:4f:4f:7e:5d:01:82:8b:52:f9:76:
66:48:06:da:ff:38:ef:44:38:45:88:a5:16:a6:3b:
ea:d6:5f:8d:1c:65:3e:33:d3:40:04:7b:1a:ab:5e:
ad:e2:a3:b8:7c:e3:8c:10:63:ac:23:af:3a:70:c7:
28:a8:99:4d:73:79:14:ed:93:c7:0b:f1:4b:67:42:
d1:a7:b7:81:84:f9:90:c8:c6:26:aa:a0:43:aa:1e:
6d:1a:3d:89:24:0a:b7:c0:46:7c:12:da:a6:aa:3b:
9d:cf:a7:80:bb:f8:75:ea:e4:95:80:4c:f6:da:6e:
0b:74:4e:77:40:ba:70:19:7a:d2:c9:f4:e1:5e:0a:
6c:c5:99:4b:e0:6f:d8:5b:1c:36:d1:1c:2c:c6:c6:
77:40:94:a0:ac:59:6b:7d:96:0c:60:62:d1:33:03:
80:5a:66:5c:f3:63:9e:35:00:d6:69:6f:2f:95:7c:
b7:37:c5:2d:06:4b:17:69:a1:3a:a4:20:3f:04:0a:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:37:B8:D6:9E:5B:74:3C:70:21:47:0B:FD:24:CB:8F:98:09:D1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:9000::/36
Signature Algorithm: sha256WithRSAEncryption
2f:d5:36:aa:28:f0:6a:d5:d1:d3:42:60:31:9e:8b:6c:92:1c:
e5:3d:ce:8e:91:09:63:66:5f:a1:39:c3:85:4b:db:e7:a1:43:
58:1f:37:41:c7:7b:eb:dd:0e:97:81:6a:b1:5d:a0:1a:e4:0e:
1f:2b:5c:f5:ba:9c:2f:5b:a0:bc:b9:24:49:3b:f1:6d:7d:ed:
63:a4:2a:cb:94:50:9b:b4:de:b0:2e:8d:cd:8b:fc:9f:3f:c3:
78:3f:44:6c:71:9d:72:1a:af:83:03:72:31:a8:33:3e:44:be:
94:2d:9a:f0:96:ec:b5:fe:4a:63:2b:4e:42:30:59:e3:34:e0:
9b:13:79:b1:c5:97:d9:03:b6:1a:91:90:9e:73:e3:6d:49:e8:
6e:05:ad:dd:77:93:04:ae:57:ac:30:01:08:67:71:ab:15:db:
70:00:1a:f0:e8:02:6b:1e:90:44:1e:e5:7f:f9:ba:43:35:07:
60:21:92:6e:57:0c:97:0d:79:2f:55:86:87:1f:00:bd:2a:db:
ab:7b:a6:88:8e:72:e4:9b:ba:1d:4f:05:ed:df:b1:cc:b3:e6:
74:39:7c:b2:77:e8:b1:21:97:6b:50:27:cd:be:74:ff:43:ab:
f4:e7:94:ba:dd:21:4e:3a:5e:42:9b:47:99:05:a8:f8:cb:b2:
71:88:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client