Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/55f7f9b0-1178-4db4-b81b-54002c643fe5.roa
File: 55f7f9b0-1178-4db4-b81b-54002c643fe5.roa (raw, json)
Hash identifier: NIfq8B5ERF8cBzVa94ZQszRaHQViZ+xk+7XYhT7geOI=
Subject key identifier: 4C:77:66:2D:23:4F:5B:D8:BD:D0:83:F2:5E:F3:77:58:D7:E1:1C:AE
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1335742FF2FFC36D758618B953733A5AD586D58A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/55f7f9b0-1178-4db4-b81b-54002c643fe5.roa
Signing time: Wed 12 Aug 2026 21:04:28 +0000
ROA not before: Wed 12 Aug 2026 21:04:28 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:35:74:2f:f2:ff:c3:6d:75:86:18:b9:53:73:3a:5a:d5:86:d5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:28 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b2bf707893d95eebf82edd51383193e63fef7c391464c0a85359b43c3d79b391, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:18:e2:ad:8e:10:6d:e9:ba:a4:e7:64:44:
7b:a9:d3:fd:15:23:e1:3d:6b:d2:cb:b7:4f:be:78:
7d:e1:3b:cf:3a:84:e2:d9:e8:ca:05:ed:77:6e:e0:
06:ee:fc:08:d1:f6:0e:e4:bc:47:50:c0:e3:7c:5b:
e3:80:f8:9d:fb:80:fd:d9:ac:bd:e0:7b:4b:15:b2:
5e:ec:e0:e1:53:06:54:ac:29:f2:d3:c7:1f:8d:02:
d5:57:2a:f5:be:d2:6d:84:f0:84:45:77:1a:66:5a:
9c:1a:04:4b:52:60:36:7d:6e:a2:af:21:2b:3f:92:
58:22:24:2e:5b:3d:af:26:a7:35:a5:a4:27:c2:ea:
48:a9:1a:e8:88:1e:f7:60:f4:20:e1:db:91:80:a9:
7d:f9:d2:10:1f:70:ff:f5:79:c0:55:4e:0b:4b:d1:
44:08:51:1d:53:2d:28:6d:24:b4:e2:f2:f3:70:96:
e4:c3:dc:d6:13:14:0d:d7:13:60:9a:ae:59:97:ff:
84:51:be:60:cc:4b:68:4d:56:9d:e3:2f:b2:6b:9b:
0b:4d:a1:5c:e1:96:b6:83:27:70:8d:a9:35:b9:8a:
8d:3b:28:95:08:87:da:7f:56:ba:4e:1d:01:8e:9c:
1b:46:d3:4f:32:61:78:1b:42:20:ad:9b:1c:3d:d5:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:66:2D:23:4F:5B:D8:BD:D0:83:F2:5E:F3:77:58:D7:E1:1C:AE
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/55f7f9b0-1178-4db4-b81b-54002c643fe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2040::/48
Signature Algorithm: sha256WithRSAEncryption
c1:24:66:6a:2d:48:47:f7:c8:f6:9a:23:c4:aa:a0:9f:99:df:
2e:f7:95:86:c8:9b:36:5d:4c:29:71:fe:f2:b1:19:0d:77:83:
51:e5:e8:5a:1d:11:8e:71:67:f6:7b:09:de:b3:47:68:d2:ac:
f9:fc:45:7b:fc:de:84:8d:0d:c1:e8:72:a6:bd:15:9c:37:37:
09:b5:55:ce:5b:fc:60:fa:90:f0:86:04:2c:ea:1d:70:e0:30:
c3:b3:11:1f:9c:58:30:b0:4d:3c:40:da:a3:e9:e1:25:9d:69:
d0:52:b9:eb:bd:15:80:21:ad:49:37:93:20:e5:af:ed:c9:a0:
9c:af:6d:64:83:03:43:26:a6:dd:6b:9b:4b:7c:cf:a4:2a:54:
36:f7:d9:49:9a:89:78:7b:ec:64:36:12:03:a1:51:71:ca:6d:
24:bf:17:81:79:79:9f:ce:8c:68:79:9c:45:ae:cd:82:58:d7:
8f:db:25:49:c6:8d:85:cc:fc:0b:4d:34:d4:aa:45:95:51:34:
f8:5a:e3:d1:3a:ad:af:c6:ac:dd:d6:d9:8b:fe:7c:81:af:c4:
5e:b9:fe:59:cc:04:b6:72:69:f0:d0:e3:a8:9b:b4:50:a7:9f:
91:f5:64:1a:99:8d:05:59:a7:53:18:2b:b4:01:6e:cf:13:ac:
07:85:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:41 2026 by rpki-client