Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa
File: 6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa (raw, json)
Hash identifier: etzYhx+QlSrULoorQde5Jp8QilZvwUm5VInGdsFx7ig=
Subject key identifier: 21:8B:44:A4:EB:A9:E6:F8:C2:5C:EA:A2:5B:73:22:B6:62:01:D8:F7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 33FDEBB8AEEDB28CB930B5485C7AFAFC7104975C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa
Signing time: Thu 30 Jul 2026 01:20:26 +0000
ROA not before: Thu 30 Jul 2026 01:20:26 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fd:eb:b8:ae:ed:b2:8c:b9:30:b5:48:5c:7a:fa:fc:71:04:97:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:26 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=913aed8106c0bcbbe993f2a7b4504232ddffc58d0d3a819d0ed5a65b34799d7b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:7c:6b:10:d4:81:73:9a:23:41:79:5d:e4:
af:32:bc:75:d9:07:45:fc:41:dc:40:ad:53:7d:30:
9e:6d:48:22:09:24:a8:75:fb:ef:8f:de:b9:fc:42:
71:ec:d3:16:58:ed:ad:95:bb:49:68:6c:48:c4:ed:
06:8b:e7:45:3c:37:78:34:cb:46:60:e6:02:09:63:
45:ec:e9:aa:31:5c:c1:ce:ac:93:4c:ce:65:ab:35:
e5:33:86:03:b2:4d:f8:ad:4b:f4:fd:5d:78:27:21:
1c:2e:55:c5:5c:c0:09:56:2c:e7:ec:98:5b:ba:6a:
10:c9:bc:06:1e:4a:4c:0d:25:51:c2:74:77:57:66:
23:aa:5c:ba:4c:59:58:99:fd:23:23:86:82:79:28:
75:82:9d:ef:da:b8:7b:70:c3:98:3f:36:cc:0d:a3:
eb:73:50:98:76:ca:84:ab:f3:29:95:c3:8c:a6:45:
a1:5d:b4:ff:41:08:87:c2:19:06:27:67:98:44:47:
bd:09:15:74:8e:13:ef:3f:81:4b:6a:3c:d0:c2:f9:
b1:f4:5f:76:43:bd:14:32:d5:36:d3:2a:ff:47:9a:
57:e3:5d:95:17:aa:bc:dc:9d:ad:65:de:bf:cc:a6:
b9:ba:de:1e:fc:ff:a4:ab:11:aa:52:c8:94:28:3f:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:44:A4:EB:A9:E6:F8:C2:5C:EA:A2:5B:73:22:B6:62:01:D8:F7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
ad:7d:ad:5f:f0:34:2e:d7:61:c3:37:79:37:42:05:0c:9b:29:
77:85:3b:9a:4d:09:fe:81:e3:e6:2c:f4:ef:f3:d0:a1:34:cb:
06:15:b3:8a:e2:2d:95:a6:a7:6d:d1:96:36:40:fc:be:ca:ad:
95:62:cc:c2:05:b8:3b:43:5f:67:8d:c3:78:79:86:2a:74:bd:
d0:75:70:4c:ba:b8:0c:42:0b:78:c4:d3:00:7c:e5:f1:57:51:
a3:1b:01:23:a2:bf:f3:53:3f:2f:ee:57:3f:33:9b:72:35:b0:
8b:af:c0:69:7e:74:4e:6c:af:23:8e:10:eb:ef:b2:fb:be:0a:
b3:33:cc:cf:22:66:c5:b8:fe:d1:d4:f4:cd:23:ad:c6:e3:55:
f8:e4:e8:27:8d:f4:b4:07:78:1f:d5:b4:83:fd:12:53:16:32:
80:ed:e6:fc:6d:51:6c:fc:6a:72:c0:32:a8:84:bb:b2:89:18:
96:31:76:54:ea:fc:b7:ce:a3:80:2d:9b:58:e5:3c:db:0a:4e:
8f:62:34:21:c1:0d:4a:f5:10:7a:86:07:0b:16:78:30:89:d8:
ae:9b:54:e6:11:22:26:7c:fc:0f:63:4d:46:83:ed:af:52:25:
3e:de:20:03:a4:63:0c:5c:0c:97:07:68:39:4b:cc:b1:b3:7d:
e5:82:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:23 2026 by rpki-client