Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6c976be6-c4ef-4157-bd43-d55738e2369d.roa
File: 6c976be6-c4ef-4157-bd43-d55738e2369d.roa (raw, json)
Hash identifier: Ln8hQVMoehNfdLScRVs8R+28i27N2OMfOaxoVuo6qX4=
Subject key identifier: D1:E6:1C:77:88:6A:B3:27:E2:A7:20:42:84:F9:7A:6D:0F:3D:45:F8
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5A5CD10ACB7ABA9031806554ED6450F7C675502C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6c976be6-c4ef-4157-bd43-d55738e2369d.roa
Signing time: Wed 12 Aug 2026 21:05:33 +0000
ROA not before: Wed 12 Aug 2026 21:05:33 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:3004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5c:d1:0a:cb:7a:ba:90:31:80:65:54:ed:64:50:f7:c6:75:50:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:33 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=641a7f399652fbdf07d607f24f60c1c957c1d6e8fffc00ba3ad9a1809914b16a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:6e:0a:1d:94:7d:08:b7:80:f4:e2:5e:69:
3b:fe:80:89:b4:4a:ea:30:9b:59:ac:d5:d2:fd:bd:
31:74:bf:20:62:4f:33:7b:c9:ce:0c:cc:1f:eb:e7:
ec:bf:70:26:69:ab:9c:5c:ed:ef:7d:28:d5:f4:be:
03:82:09:ca:cc:6b:85:9e:ab:82:91:a8:a3:af:4b:
7b:60:c4:74:14:5f:29:df:fe:4f:44:31:d8:a1:22:
7d:57:91:ee:e8:31:17:53:3c:0f:a1:3b:34:e1:ef:
d0:05:2f:01:af:c6:26:e1:80:96:c3:0d:bf:60:67:
3e:60:c9:5c:17:93:43:b2:7b:04:3a:45:ef:89:57:
f9:fc:6b:3e:5d:4c:e2:2d:10:78:44:30:bf:d0:00:
d1:3f:85:5c:02:89:d4:3c:f0:d7:30:60:94:1c:66:
1f:0b:7b:66:02:47:19:c8:14:59:b5:38:a5:4d:95:
ca:c2:e6:ad:ab:99:2a:dd:4d:be:ed:c1:f0:67:ae:
b9:3f:3d:b7:fc:00:e6:3c:08:9a:91:9f:b6:08:48:
73:bd:3b:43:fb:a1:f9:8c:a0:f5:31:16:42:ce:e4:
81:c4:09:db:b8:74:3c:74:40:e9:1b:4e:bb:95:fd:
e5:55:00:19:6c:12:78:6c:c7:d7:cd:a0:c2:1d:f7:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:1C:77:88:6A:B3:27:E2:A7:20:42:84:F9:7A:6D:0F:3D:45:F8
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6c976be6-c4ef-4157-bd43-d55738e2369d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3004::/48
Signature Algorithm: sha256WithRSAEncryption
b6:0f:98:16:33:0c:68:94:ef:71:a2:a0:e3:8a:7e:f4:34:54:
5e:4c:21:f0:81:32:db:c2:0c:b0:79:24:47:cc:b6:da:48:be:
cc:29:3d:80:4b:3a:a8:63:75:e6:67:ea:cb:e8:25:de:04:f4:
36:6a:cd:ba:64:56:bf:e8:a7:12:d0:e0:fe:9d:ef:ba:06:5d:
40:4e:30:11:72:af:b7:cf:05:35:ac:11:e9:5d:0c:64:fb:97:
5c:fa:2e:73:d3:61:1a:80:20:a1:ed:7c:00:2e:e4:12:11:62:
e7:d1:fa:b0:76:1f:4a:84:03:f1:7e:f1:0c:2c:7b:6b:f3:92:
90:6f:58:ce:76:fd:7b:0d:a3:07:c3:e9:df:1a:44:dd:40:f2:
4e:58:03:ef:a1:af:21:83:05:df:d4:31:07:67:cb:c2:d9:64:
cb:b3:30:fa:ef:fe:7f:13:dc:27:0a:20:32:d6:32:12:a9:0e:
5f:95:be:2e:1c:c7:05:fc:99:02:b4:ec:f0:bd:21:a0:b8:a9:
df:25:b5:94:cc:e7:96:5f:1e:74:c9:0c:93:01:43:fd:48:db:
83:81:2c:9c:48:d9:c9:fe:26:14:51:75:18:5f:ec:8d:72:01:
f3:10:f1:09:94:d9:bc:fa:e1:bb:43:6c:df:84:2a:66:a7:aa:
eb:42:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:07 2026 by rpki-client