Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b9d9143-86bb-4613-af25-f20b01af9f2d.roa
File: 6b9d9143-86bb-4613-af25-f20b01af9f2d.roa (raw, json)
Hash identifier: IsgVG2jkhxjwOoCVarD8C3i2YQZHBe6cuD954ck/25g=
Subject key identifier: 59:2B:FA:95:71:04:4F:B2:7A:C7:E4:71:76:94:8D:6E:42:F4:32:91
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2F964AF492748971913E0186845EEA98996FB0E3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b9d9143-86bb-4613-af25-f20b01af9f2d.roa
Signing time: Wed 12 Aug 2026 21:05:40 +0000
ROA not before: Wed 12 Aug 2026 21:05:40 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:a800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:96:4a:f4:92:74:89:71:91:3e:01:86:84:5e:ea:98:99:6f:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:40 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=8f3a19b4c4c3f5c3db1bd7f78c601770d591f624b59a7cb80a6975e877cf315f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:26:b2:7d:3e:6b:03:66:25:a9:79:72:13:
d1:c2:cd:e9:50:7f:20:c6:bf:b2:26:63:55:81:a1:
7b:5b:b0:92:0e:be:db:46:4d:35:b3:e4:77:9d:22:
af:f2:27:f3:e7:1c:e3:59:dc:24:81:0b:de:b6:80:
4d:3b:e4:23:d6:08:0b:cd:9f:b3:e6:59:7b:86:0d:
e6:96:58:59:58:d8:59:c6:6c:57:cd:5a:bd:56:5f:
f0:5f:d2:7b:ac:77:e8:b1:3d:17:c8:24:ba:3a:2c:
f3:e7:8f:3a:b8:72:73:30:b7:46:8f:e4:5f:16:3e:
e9:ba:bb:c9:23:f3:ac:6b:91:d0:26:d8:3a:11:54:
d8:52:92:6d:65:34:4c:4a:ba:e5:c2:85:51:75:25:
b4:e6:39:b9:7c:f0:82:e6:8e:94:4e:eb:22:ea:16:
83:27:2a:41:00:d4:6c:94:c7:30:80:46:15:ec:90:
66:2b:57:fe:88:f0:61:86:86:e9:68:ff:6e:88:15:
f9:5a:24:b4:35:ab:5e:cd:3c:16:50:c4:43:dc:50:
d2:01:25:01:15:b9:4c:19:0b:3a:18:5c:02:28:bf:
f0:56:96:44:be:97:91:b7:de:c4:52:c5:b9:61:c6:
68:66:cc:b3:2a:8a:e3:6e:9c:2e:b6:a1:4a:f1:23:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:FA:95:71:04:4F:B2:7A:C7:E4:71:76:94:8D:6E:42:F4:32:91
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b9d9143-86bb-4613-af25-f20b01af9f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a800::/40
Signature Algorithm: sha256WithRSAEncryption
31:c2:03:d4:05:66:df:39:82:43:4c:9f:f5:30:90:3b:c4:e6:
7e:d7:2b:e8:00:6e:3e:19:fb:b4:9d:6c:b9:6a:d3:b4:6b:c1:
60:68:f4:19:ac:c4:39:3f:c3:b6:c7:26:b1:7c:4f:0f:28:7d:
97:cc:f6:2d:0a:f8:bb:36:b0:7a:ab:27:40:a0:f7:e5:ed:af:
d7:51:ec:57:3e:da:49:dc:11:14:67:80:e0:66:55:a1:14:a4:
99:be:bf:a2:41:07:9b:ca:0a:77:d2:68:27:e3:f3:7d:6e:63:
f4:f5:ae:57:5c:f3:a0:84:52:74:b6:90:01:c3:1b:87:f8:3a:
64:a0:76:6d:1d:95:bb:a0:85:7e:dd:97:ad:5b:15:3e:cc:73:
65:d3:27:44:7a:85:71:94:74:64:c1:60:30:8a:bd:87:31:42:
9d:8c:b9:d4:3d:28:b0:40:39:98:28:72:7c:a9:76:5a:a6:5b:
d3:e8:0b:58:e2:08:9e:29:af:c2:9f:75:c2:46:0f:96:88:06:
71:c3:9d:55:96:83:e8:53:21:ff:fe:02:e2:00:e0:61:26:f4:
0a:f7:f8:9c:fd:f4:93:df:f3:7f:9a:f0:c9:fc:9b:21:4c:c4:
ae:f6:eb:53:59:34:7c:68:a8:d3:27:f1:0d:af:56:25:a9:a7:
61:02:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:58 2026 by rpki-client