Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/559fdd1a-1e70-48bd-aacc-1c5c7f47eafc.roa
File: 559fdd1a-1e70-48bd-aacc-1c5c7f47eafc.roa (raw, json)
Hash identifier: lCJAHSMVuVC1ZbsmQcGEl7/zXGN4AOoaeSnM1w2crzY=
Subject key identifier: CD:BD:FF:88:9B:6C:74:76:AC:47:63:E7:BA:59:E8:0A:28:24:81:53
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 742E621E63156AB2AFFC347E42B0E2597E61F40E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/559fdd1a-1e70-48bd-aacc-1c5c7f47eafc.roa
Signing time: Wed 12 Aug 2026 00:00:15 +0000
ROA not before: Wed 12 Aug 2026 00:00:15 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2e:62:1e:63:15:6a:b2:af:fc:34:7e:42:b0:e2:59:7e:61:f4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 00:00:15 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=6d33dadccdba067b861fb7d94ca95d5c44e05be526a9e6c21eb0b9ec91de5cbe, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:67:42:f9:e6:f7:b4:a2:a4:66:59:14:92:
fc:9f:99:09:a2:b1:9f:4e:50:4d:8e:08:fc:08:3d:
0e:7e:83:12:5b:9f:5d:38:e8:50:fe:f2:7b:a7:e6:
a1:4b:2b:6a:69:98:26:10:e8:40:81:c4:1a:07:84:
80:16:32:5e:d5:d4:79:ec:d1:05:04:d4:f5:06:d7:
3f:90:2e:26:7d:a0:fa:12:0b:fa:e2:c5:f0:d3:14:
3b:f8:61:f6:51:d6:5e:83:8e:3b:14:60:1b:a0:fb:
5b:20:86:5c:87:75:fa:25:88:88:cd:9d:e7:d0:44:
69:53:cf:2d:f0:db:ba:55:7c:0a:8e:e3:62:cd:92:
4c:92:fc:f7:f1:ae:d3:6e:a4:e8:85:ca:26:a0:df:
d5:15:32:a9:f3:4c:ef:ed:d3:9b:3a:cf:87:2c:99:
cb:25:dc:8d:cd:7c:bc:2f:a3:cf:47:15:10:aa:ab:
75:66:54:02:a3:8b:24:48:43:10:0d:e1:a3:75:43:
1c:6b:a6:30:7d:21:0e:3b:fc:47:36:2b:7e:99:d2:
e4:6c:30:eb:4f:fe:d9:66:43:d0:2e:fb:07:55:20:
78:19:2b:3f:98:dd:9e:99:6b:fc:96:37:8f:5c:00:
f8:75:02:8d:0b:b7:88:b5:c1:f2:8f:72:ae:64:d3:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BD:FF:88:9B:6C:74:76:AC:47:63:E7:BA:59:E8:0A:28:24:81:53
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/559fdd1a-1e70-48bd-aacc-1c5c7f47eafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3004::/48
Signature Algorithm: sha256WithRSAEncryption
35:fa:3b:29:e1:03:53:55:85:e4:a5:73:dc:88:ac:4c:d5:ca:
de:35:02:0d:60:83:70:03:70:2c:89:e7:11:2c:80:34:90:0d:
d4:48:9a:a7:ea:af:b9:70:8c:68:d2:70:75:d9:fd:12:f2:66:
c3:61:6c:5b:10:f4:15:d9:84:f6:d3:27:c8:dd:ba:15:95:f3:
d4:d3:12:68:bd:e9:2f:0d:b5:ee:d3:84:91:c5:ef:45:3f:ed:
59:c9:8d:a1:43:9e:bd:c2:98:b5:f9:93:d8:33:c4:bc:92:1e:
63:3e:68:17:1c:77:b9:fa:c3:9e:e2:96:ed:d8:03:41:c2:63:
3f:76:8a:b6:b1:13:4c:e2:2a:43:db:c6:bd:c6:62:8d:6c:91:
fa:fc:13:14:10:5b:e6:4f:41:6a:e4:9a:9b:31:72:de:67:72:
3b:3f:35:be:16:c6:60:fb:16:b9:2d:3c:7f:fc:ee:84:1f:c0:
73:15:7d:f1:02:d5:4e:09:a3:2a:f7:44:d8:dc:e1:94:37:b1:
71:48:b8:29:88:eb:13:ea:bd:fe:72:c1:1f:fd:08:ee:0b:56:
e7:b4:24:74:e8:98:8f:7e:db:ed:7b:05:49:96:f0:9a:30:13:
fa:eb:7c:6b:b1:ea:1a:2a:e7:b3:4b:07:b6:18:fc:09:0d:27:
72:eb:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:21 2026 by rpki-client