Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5b9ab97a-08fa-4cc6-888f-fb954293fc73.roa
File: 5b9ab97a-08fa-4cc6-888f-fb954293fc73.roa (raw, json)
Hash identifier: rBqN33zSHtRkkkNWwwcYrch38UvwM+vDX1uv+vzwpFE=
Subject key identifier: 6F:46:8C:01:04:D7:88:C0:23:2F:F9:90:21:1D:B5:5E:1F:BA:EC:72
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6119CA09AC9AC9126AEAA7C02FFA9E57B621E879
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5b9ab97a-08fa-4cc6-888f-fb954293fc73.roa
Signing time: Thu 30 Jul 2026 01:30:38 +0000
ROA not before: Thu 30 Jul 2026 01:30:38 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:a800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:19:ca:09:ac:9a:c9:12:6a:ea:a7:c0:2f:fa:9e:57:b6:21:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:38 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=83841048d617ec85fccf43c55b5f68268b66f1e1a9c7e5203d30c5f2f2ebbf09, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:c8:ae:47:c6:08:6e:63:be:92:e1:dc:5c:
ea:40:1a:77:83:b9:7d:64:19:7e:29:f1:04:79:1d:
e6:cc:73:9d:26:9f:3e:09:6b:97:fb:f1:c2:d1:31:
e9:07:2e:65:89:90:f0:e6:a5:50:67:13:fa:2d:bc:
8a:6b:c6:61:eb:92:d5:f6:a5:1f:0b:67:40:84:bf:
a6:aa:e6:66:90:61:79:10:65:07:1c:44:6e:92:dd:
d6:1c:6b:2c:c4:4d:73:a5:54:e1:ed:a8:9b:00:6b:
9f:6d:1d:3e:07:ed:43:66:b9:13:2a:20:fa:a6:c7:
9a:df:ee:2d:a6:b7:e8:79:76:bf:e5:d9:e2:18:47:
49:5a:1e:b5:b0:83:43:a1:7f:94:f6:ba:a6:4d:63:
7c:f5:a3:a8:e6:08:13:b1:6e:08:e2:25:13:3c:69:
cb:a1:48:f6:b9:fb:98:85:a2:3d:c9:70:b4:b2:ee:
f0:a3:44:3a:fd:4a:e6:91:2b:fe:da:ea:12:23:ef:
a6:3f:33:39:8f:ef:23:8b:c5:32:f3:7d:99:a5:1f:
a1:21:85:d9:d1:89:2c:49:ae:20:64:ee:a3:21:33:
f2:49:28:30:7b:c4:b4:bb:57:c8:8f:ec:59:2b:20:
bd:6d:9c:fc:fd:1a:0e:ca:bf:66:5a:1f:c6:87:89:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:8C:01:04:D7:88:C0:23:2F:F9:90:21:1D:B5:5E:1F:BA:EC:72
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5b9ab97a-08fa-4cc6-888f-fb954293fc73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a800::/40
Signature Algorithm: sha256WithRSAEncryption
69:b7:53:f1:51:ed:ee:2d:35:7f:72:29:e2:0e:fd:37:0b:ab:
8f:e3:e5:ce:96:44:8c:bc:0e:67:9a:e7:77:5e:eb:27:d2:ec:
de:22:c9:21:ff:f6:5e:aa:53:43:c0:08:4b:8c:9e:1b:4a:9b:
01:e2:ad:52:53:ad:bd:6f:64:b5:7e:91:e9:d8:dc:35:e9:2c:
1b:bb:20:0d:28:c9:a3:05:10:81:f1:2a:f6:7f:79:85:91:4e:
c4:6d:5e:7b:2b:a3:ec:1f:22:bd:f5:09:b6:3a:50:2b:10:6a:
ec:eb:05:35:6c:7c:b4:8a:5a:ff:ca:82:7a:50:ca:a8:a5:06:
16:86:e8:50:6e:f3:39:d5:ac:2e:52:19:95:42:8e:9e:26:8b:
9b:55:22:67:df:b6:56:d3:ae:c6:86:9a:38:a3:14:0c:4e:84:
c1:01:fd:cb:d6:fd:f2:5c:58:7e:e6:48:28:2a:49:26:ea:79:
df:dc:5e:72:e5:82:e7:b7:80:bb:08:48:da:72:cb:7f:a1:84:
62:08:93:98:b8:52:8d:68:0f:8c:0d:94:ca:25:ce:a4:0a:75:
8f:f9:59:2e:74:c6:b6:9d:82:fd:06:24:91:b0:23:3c:95:5d:
9f:8b:62:7c:a9:86:09:5b:42:9b:d7:88:e6:3b:4e:d5:94:2f:
48:ac:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:23 2026 by rpki-client