Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/68abd182-f12d-4eb2-8b50-47b80bf43422.roa
File: 68abd182-f12d-4eb2-8b50-47b80bf43422.roa (raw, json)
Hash identifier: aJWpz0IU32QoibnKK4Tod399pSZqMVp7wnrYpq1cvsI=
Subject key identifier: D2:04:EA:05:2D:86:FE:E7:33:05:A9:1A:39:7D:98:72:C3:7F:BD:34
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 36C83B7F1D4807CD0B53F8F654E156E0641B4353
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/68abd182-f12d-4eb2-8b50-47b80bf43422.roa
Signing time: Wed 12 Aug 2026 21:05:36 +0000
ROA not before: Wed 12 Aug 2026 21:05:36 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c8:3b:7f:1d:48:07:cd:0b:53:f8:f6:54:e1:56:e0:64:1b:43:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:36 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f55cedc9b941e9a04e50dc5af2bba0a28dc51aa5153aa58349921877035ff5fc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:b4:ef:35:25:d3:03:6b:11:d1:d4:c9:ae:
c3:8b:42:c5:db:58:5e:03:56:fa:44:9c:dd:0f:2d:
98:0f:64:77:8f:99:96:01:8d:26:87:64:3c:73:c4:
6b:d4:b2:e0:25:42:8d:43:69:a3:51:bc:ef:99:c2:
02:7b:59:7c:4d:65:25:df:39:1f:a6:ac:30:1b:3d:
8f:ce:3c:88:f8:72:37:6f:88:0c:49:d2:53:f3:20:
16:ba:b8:26:98:ed:7e:3f:9d:86:c0:2a:9a:72:33:
3a:99:79:18:af:c0:be:0f:79:7e:05:25:ca:80:35:
95:13:d6:a9:66:e0:5a:17:10:ef:81:76:b2:0e:93:
12:f8:e8:04:1c:89:6e:e3:b7:32:ac:ce:02:57:06:
76:05:6e:8d:db:dc:c0:b6:8a:01:f4:d5:52:3e:86:
3c:5c:d4:e0:9e:fe:57:09:22:12:e4:79:5b:68:ae:
c7:87:ef:6f:ad:02:17:eb:92:e0:50:dc:b9:46:db:
c8:40:db:33:2b:06:bf:74:6f:59:dd:72:56:95:9f:
3d:b1:f4:35:39:6f:cb:97:89:a2:aa:a1:d5:41:5e:
4b:12:b3:9e:bb:a1:e2:b4:29:59:c9:e7:37:f7:6b:
25:e0:ce:75:91:03:ee:11:8d:25:fa:de:4b:b1:c7:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:EA:05:2D:86:FE:E7:33:05:A9:1A:39:7D:98:72:C3:7F:BD:34
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/68abd182-f12d-4eb2-8b50-47b80bf43422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f8c0::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ad:76:bb:42:e8:0a:59:a0:ac:e0:b0:63:be:78:83:4d:1e:
f3:3b:60:a3:96:87:b6:b5:78:0b:98:4e:d7:19:e4:af:38:ed:
49:87:14:06:a7:09:30:e2:a4:5c:48:2f:79:24:c9:81:ff:d9:
b3:34:54:5c:f9:fb:5c:13:fd:59:8e:fb:f5:9b:7b:cf:58:a7:
6a:5e:aa:c1:2c:43:24:f0:97:fa:a4:5c:9c:2c:4b:98:50:8c:
08:f3:e3:a0:ad:4a:0b:d8:b6:60:75:9a:d3:c4:52:e1:c9:86:
c0:16:7c:32:43:f8:c4:29:7c:d4:ef:9c:1b:75:07:94:d6:db:
88:6b:7b:e0:73:51:c9:5b:a2:bb:15:88:7d:46:d3:54:ad:47:
d5:21:90:8b:8c:1b:62:67:32:3b:4d:a1:90:17:bb:06:72:01:
15:54:bd:04:fa:38:03:c2:c9:d4:8f:40:d9:e9:08:09:98:51:
fe:50:dc:a8:d0:01:6e:3c:c1:12:85:7e:eb:5b:c2:31:3c:21:
95:69:25:6a:98:cc:8b:22:4e:b5:b9:f5:0d:ba:0d:06:92:8c:
9c:71:f1:2c:68:d2:2a:51:fe:b8:85:aa:fb:63:12:3e:f9:8f:
59:01:e5:2b:7e:5d:4d:bf:ed:7b:e6:5b:6f:f2:38:4a:9d:a7:
44:02:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:33 2026 by rpki-client