Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6ada7e3e-42a2-45fa-873f-bceaed65b832.roa
File: 6ada7e3e-42a2-45fa-873f-bceaed65b832.roa (raw, json)
Hash identifier: Sh4DS+DsUR8ehI3cH+3SLlkF7ptfQvuqXQOl0Vv3FSE=
Subject key identifier: 82:E8:DC:67:38:C8:B7:68:FD:33:82:9E:7F:01:B1:82:AA:A1:EC:04
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 583AF071EC3AA895468BB5EC00FC44D4BF8D5DA6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6ada7e3e-42a2-45fa-873f-bceaed65b832.roa
Signing time: Thu 30 Jul 2026 01:30:57 +0000
ROA not before: Thu 30 Jul 2026 01:30:57 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3a:f0:71:ec:3a:a8:95:46:8b:b5:ec:00:fc:44:d4:bf:8d:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:57 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=9ed8deb9f00871982a1740e71529ef537d26263dff95eb4bcdb50e708dee5159, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:17:e9:65:26:54:eb:41:dd:9d:44:e8:5a:
8f:36:3a:8f:cd:a0:d2:ad:e0:34:d4:ad:86:a4:01:
27:9b:34:30:79:25:ca:5b:53:be:85:87:e6:9c:80:
55:d4:0d:f8:72:1e:26:4d:e7:34:e7:b4:34:f3:e5:
c3:a7:6c:99:0d:26:3b:ff:9f:a5:fb:7f:f0:d7:6e:
a4:aa:78:91:ee:82:40:b9:51:89:64:2e:36:73:ed:
a7:f4:3f:12:d3:8f:f6:0a:2c:ae:31:d4:e0:9b:d9:
7e:ce:ba:e4:3f:7b:24:e0:47:0b:7f:31:eb:cf:5c:
a2:37:94:25:48:5c:32:8c:5a:d6:4c:e5:2d:a9:e9:
d6:86:83:37:ca:c8:3d:49:7a:d3:4e:66:be:23:eb:
64:e1:e4:d2:54:f8:56:03:b4:14:c8:ee:02:1b:17:
65:02:fc:a1:06:24:9e:39:f1:03:e0:97:c4:aa:f3:
aa:c9:4b:23:2b:ec:73:ee:8a:d3:d9:fa:e6:42:ca:
0d:1c:49:fd:8c:c9:f1:a0:f4:7e:b5:08:d8:8a:b6:
d9:1e:c0:15:64:f7:45:e4:44:32:d7:f2:64:1d:7d:
93:12:b5:82:e3:99:18:e8:75:13:db:78:30:e2:de:
37:ab:7e:96:89:8c:f1:e8:24:43:3f:ff:65:6a:87:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:DC:67:38:C8:B7:68:FD:33:82:9E:7F:01:B1:82:AA:A1:EC:04
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6ada7e3e-42a2-45fa-873f-bceaed65b832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8000::/36
Signature Algorithm: sha256WithRSAEncryption
06:17:45:fd:ce:2f:eb:bd:48:db:45:9a:71:fa:b9:f2:54:9e:
84:60:f8:8c:8e:4d:65:f7:2e:85:d6:a9:cf:3b:7e:54:82:0c:
11:c7:52:a5:23:02:38:cd:82:d9:f0:d3:a3:e7:75:d8:67:82:
fb:1d:fe:53:aa:8f:e3:0a:e2:47:7b:7f:7b:8f:63:b5:9b:5a:
42:7d:46:d4:03:e6:2e:0d:d6:ee:e4:d1:ea:f3:10:90:c2:77:
81:a2:83:52:4d:e1:89:99:a8:a5:c2:20:97:3f:94:07:d2:a1:
f3:c4:9c:c0:9f:d1:89:ae:6d:12:15:7e:9a:33:a2:1b:a1:26:
0a:84:7c:d2:9e:0a:25:32:39:4f:6c:5f:e6:75:c5:fa:e1:d9:
13:07:fc:a6:d0:90:23:07:d5:6c:1b:af:0b:6d:e6:3a:f2:6a:
02:a4:d4:a2:a3:04:e3:60:11:28:5f:af:00:b4:01:c0:a8:17:
7e:52:e4:90:23:be:30:e4:37:99:b3:6a:19:b8:f8:56:92:5b:
4b:ce:8b:9b:bc:32:ee:06:bb:3f:c6:58:ad:9d:58:db:d4:50:
c2:10:ef:e1:67:07:19:c8:ee:fb:34:cc:57:2a:75:b8:68:e1:
ae:e0:c5:5d:b9:ec:af:50:18:cb:03:75:14:d7:46:47:24:af:
9c:10:a6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:31 2026 by rpki-client