Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5a887f55-179f-409f-9b9d-cfe0327f6fa6.roa
File: 5a887f55-179f-409f-9b9d-cfe0327f6fa6.roa (raw, json)
Hash identifier: uDRLMAml/oh3DQTDvUTZLWfb7L1uuasFbdIjCh6lDh8=
Subject key identifier: 2C:C7:03:2A:71:39:CB:B4:08:8F:D7:E6:22:B8:01:B7:97:32:B9:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 574C20E4005D71FF2EBD2290F5899EF6537B5382
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5a887f55-179f-409f-9b9d-cfe0327f6fa6.roa
Signing time: Wed 12 Aug 2026 21:05:36 +0000
ROA not before: Wed 12 Aug 2026 21:05:36 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4c:20:e4:00:5d:71:ff:2e:bd:22:90:f5:89:9e:f6:53:7b:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:36 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=1b4faa0fc06bc7acf3b239cba4422682a31189412c7da77d340568cd8ed4921f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:b7:0d:6d:ec:2d:ea:7f:97:2f:a4:82:af:
62:ac:d4:ba:01:a9:5d:62:41:24:cd:1a:3f:2f:6c:
8f:04:76:d6:79:a5:bb:b9:4c:c3:e2:aa:5d:32:28:
60:5b:b6:a9:12:ed:4e:6c:e3:43:4b:db:41:98:a6:
bd:4d:6a:2e:4c:7d:d7:42:5a:93:34:2d:56:c7:78:
35:8d:3e:31:e0:83:50:4f:2e:58:a1:a0:fe:b4:34:
58:49:24:89:06:08:f4:7c:19:02:11:4b:df:25:d2:
22:7a:27:25:ab:dc:4a:48:ba:a9:04:cb:19:bf:f1:
68:29:e4:ec:d8:7b:67:a0:d9:7e:c7:b5:b6:5c:77:
d3:d5:c5:67:6c:5c:a4:5c:11:e8:a1:73:68:f5:dc:
7e:09:be:0d:25:18:a3:ad:82:c3:67:53:d2:8e:eb:
8a:f7:46:84:4a:6c:6b:74:79:17:0d:03:e2:d3:c7:
83:46:64:84:f6:59:9d:c0:d2:bc:bd:55:c5:7e:7a:
d0:8a:83:3c:12:1e:93:62:a8:36:c6:48:9b:a2:ca:
bd:58:94:49:6d:87:eb:95:ce:7c:43:ce:da:b7:0b:
9c:73:82:31:76:eb:89:26:4b:ff:f4:c7:a2:a1:a2:
81:b7:f1:52:3c:40:c1:89:a3:10:82:13:fb:bf:8a:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:03:2A:71:39:CB:B4:08:8F:D7:E6:22:B8:01:B7:97:32:B9:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5a887f55-179f-409f-9b9d-cfe0327f6fa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f880::/48
Signature Algorithm: sha256WithRSAEncryption
90:89:0f:0a:27:1a:fb:c1:0b:61:50:82:9a:3a:04:ac:51:92:
83:52:a4:29:5c:8c:c1:1d:1e:9b:85:1f:67:30:15:04:67:85:
45:d1:84:42:ef:14:e5:78:ef:74:9b:17:40:fb:a5:74:51:a4:
64:ef:66:34:8a:c3:6e:66:67:38:a7:2b:22:e1:fc:dd:f7:34:
a8:cd:eb:11:2c:4e:8f:50:fe:d1:a7:2b:4c:b4:69:d1:a4:2e:
fa:ef:9e:ad:43:1a:ab:88:d7:9a:44:92:0c:ad:26:72:82:c0:
53:0c:1f:7f:a7:a4:f2:84:c9:02:68:bb:2d:f4:54:4a:56:18:
4b:d0:e4:1f:43:c4:7f:80:bf:87:af:45:2e:dc:5b:0a:69:69:
3e:de:12:ed:66:bd:5f:22:67:82:23:78:41:ee:b1:dd:33:82:
95:33:49:ab:6a:ba:94:9c:da:dd:58:12:5d:50:79:af:1d:55:
7b:07:bc:c0:15:3b:fa:d2:b0:58:8a:2b:f9:8c:63:ec:eb:86:
dd:03:8e:6c:c9:b6:33:ca:45:58:2c:6b:cb:78:96:29:6b:bc:
e6:e6:18:c8:7d:0f:2d:41:cf:e2:cd:4a:d4:48:26:9c:f5:00:
c2:2e:c8:54:50:12:69:eb:aa:df:ed:92:db:9d:ae:e1:fb:ce:
d8:60:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:25 2026 by rpki-client