Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/61230a49-cd18-4e00-843d-8ca14562b443.roa
File: 61230a49-cd18-4e00-843d-8ca14562b443.roa (raw, json)
Hash identifier: CcaiLqpk/qp8DqyySs3jYRfSmBC18YxB1//oLvb+yuw=
Subject key identifier: 80:D5:23:38:98:F4:A0:B8:EB:7D:D0:53:55:F0:DC:24:1A:FA:74:A1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 09F28B0C3BA8601F3A8FEF1055FA156E414E62AC
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/61230a49-cd18-4e00-843d-8ca14562b443.roa
Signing time: Wed 12 Aug 2026 21:06:48 +0000
ROA not before: Wed 12 Aug 2026 21:06:48 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f2:8b:0c:3b:a8:60:1f:3a:8f:ef:10:55:fa:15:6e:41:4e:62:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:48 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=27ed1a1e4600ed0a99fe816a9da2234a4d6207aa71e0f09979f620d7c1f472d1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:25:a9:41:7f:de:5b:87:c1:c4:56:38:80:
ea:72:08:3b:f2:74:c7:5f:1f:46:3f:81:49:d4:e4:
76:b0:da:e8:88:85:46:dc:f6:47:3e:b8:69:d0:08:
cb:31:92:02:5d:39:1f:0e:73:c2:82:f8:db:2e:a2:
a6:c0:3d:45:1b:ee:66:1c:9d:5a:aa:58:96:23:1f:
4d:6b:37:4d:c1:c2:4f:b9:0c:05:93:5b:85:3a:4f:
3d:d1:06:4a:24:f3:af:a8:30:e0:5a:d7:09:1e:50:
84:a7:bd:a2:6d:e5:b3:a1:d2:fb:36:3b:13:cd:ec:
04:14:d7:f2:ca:f8:b8:2c:99:ac:ef:48:5d:0b:65:
91:15:f9:75:17:c7:e7:e3:fa:d3:e9:ca:7c:99:3f:
5b:9f:50:6e:e8:4e:e7:c4:e7:8e:12:43:03:62:9d:
02:07:59:ce:66:89:12:42:0a:df:97:81:de:fa:ca:
60:7d:20:90:f4:85:f3:5f:3d:48:83:e3:b4:06:a6:
41:b8:87:88:52:db:85:5a:b0:4f:55:81:ec:8b:0f:
e2:d9:d9:b1:3b:ff:23:11:ca:d6:ca:65:f0:cb:fd:
f0:43:10:a3:80:54:ec:d7:46:e2:88:e5:1f:68:bb:
f3:ac:03:a7:18:98:f4:b0:31:20:ff:23:28:62:d5:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:23:38:98:F4:A0:B8:EB:7D:D0:53:55:F0:DC:24:1A:FA:74:A1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/61230a49-cd18-4e00-843d-8ca14562b443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
62:6f:3f:4d:a6:d7:32:8c:5e:7b:0f:6e:bf:38:b4:39:ac:57:
27:27:21:25:a9:40:14:f9:f9:d7:fc:e2:fc:35:c4:ca:31:df:
b4:05:d1:a8:ba:98:3d:02:e1:30:86:c4:26:42:df:ba:34:29:
08:fe:8a:5c:67:f5:97:87:76:c7:8f:99:ff:c1:a1:f4:d2:45:
4a:17:c6:75:62:2f:3c:2b:f9:02:fb:22:07:82:ce:53:09:bc:
0f:fe:06:01:a4:ab:f5:64:3c:36:87:cf:b6:df:42:f9:81:69:
8e:09:98:0e:3b:34:67:2d:37:43:57:05:e8:4a:12:39:06:85:
b3:a7:90:a2:33:52:64:f1:fd:23:a5:f9:e0:c6:dd:4c:27:83:
d9:9d:e1:f4:bc:51:a5:9b:50:99:41:4c:68:2c:a6:7e:f6:80:
6f:05:e5:9c:30:84:aa:f4:8e:4c:3f:1f:9f:a6:1d:54:33:2d:
e3:e5:9f:f4:4b:1e:11:6d:25:af:25:57:63:0a:20:91:b9:db:
94:58:26:2f:fb:d9:f6:78:d9:51:ab:88:d7:07:d2:e8:05:81:
34:3b:6d:e5:2b:64:69:a7:6b:ef:f0:fb:30:3d:f2:5f:bc:2c:
fb:57:dd:e1:a3:2f:a5:94:75:79:bb:c8:56:71:d1:73:35:56:
bc:b8:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:46 2026 by rpki-client