Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa
File: 6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa (raw, json)
Hash identifier: hEI41CZesE2mq+OXFIfVx3OonR2sw/J5GiZPzjdTDEU=
Subject key identifier: 06:64:ED:7C:A3:EF:40:75:89:6C:83:9B:3D:9B:B1:FB:E9:F5:55:D8
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 69EC518083B8EA829C269164660326DEEB0DE657
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa
Signing time: Fri 06 Mar 2026 20:06:40 +0000
ROA not before: Fri 06 Mar 2026 20:06:40 +0000
ROA not after: Thu 04 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ec:51:80:83:b8:ea:82:9c:26:91:64:66:03:26:de:eb:0d:e6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Mar 6 20:06:40 2026 GMT
Not After : Jun 4 23:59:59 2026 GMT
Subject: serialNumber=f4c24c63816c8c2a81b5e621f253736c27d0e4a97ea7b708336741b7694e78bf, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8b:db:0f:4a:94:c3:2a:8c:b5:79:01:c9:2f:
35:9e:49:39:50:97:c5:50:82:a3:68:32:1e:9c:9b:
7c:69:ce:ba:10:52:f8:e5:94:6c:64:91:3b:0e:01:
6f:f9:3b:4c:c6:e6:e3:69:3c:4d:47:af:87:2c:2b:
6b:93:cb:9d:2a:28:ed:b5:84:1f:73:af:3b:c9:a7:
b0:34:56:e8:91:f5:7d:df:64:6f:5b:7c:7b:ae:27:
61:9a:32:45:5a:ce:a0:cf:cb:80:df:49:08:0f:f6:
04:3b:63:9f:eb:91:49:40:08:09:5d:c2:98:e3:40:
b0:41:a8:b8:e2:6a:e8:0a:34:2d:cc:45:fc:ef:4f:
05:e8:5b:cb:74:e4:2a:f2:e2:77:7e:e1:45:67:13:
c0:a3:81:20:58:d8:15:84:08:d6:4e:c8:c9:8f:d6:
0c:49:8b:2b:d9:a8:33:f7:59:83:c4:2e:1c:d6:e7:
90:75:d8:38:d7:f9:3a:74:03:db:d6:05:c7:e2:39:
53:ae:83:93:40:e5:3e:d3:91:a2:f3:47:36:2d:8b:
c1:84:5f:82:31:54:19:24:46:45:02:ab:27:4f:aa:
37:b0:e5:e0:d1:71:a7:56:ce:f8:c0:9b:ed:fe:26:
0f:18:eb:71:05:5d:6d:79:ff:ab:d2:60:d6:99:c2:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:ED:7C:A3:EF:40:75:89:6C:83:9B:3D:9B:B1:FB:E9:F5:55:D8
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:2::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c7:d2:4f:2b:2c:da:5b:ab:7a:47:a8:26:43:ed:fe:d7:a3:
56:d1:d7:ed:8b:e9:df:fb:8f:cc:bb:ed:b3:4d:86:ee:5e:71:
cb:95:06:9b:fc:69:3d:31:b9:a8:bb:6b:71:02:9d:fe:61:ad:
4e:f4:09:a8:31:43:2a:37:43:20:cd:3e:3d:bd:93:d1:d3:d1:
c4:7d:2b:42:16:3a:47:f1:ee:7b:c8:7e:4d:db:b5:ce:28:6a:
94:bb:9c:be:da:81:61:93:2e:ca:11:33:e5:d3:38:2c:88:3b:
f2:3d:bc:71:94:65:d1:dc:e0:5b:5c:d4:80:d8:54:e4:11:74:
a7:44:d7:2f:73:2c:8e:46:36:d2:f4:7f:7c:d0:11:9d:2b:49:
cb:9d:ff:fa:4a:01:6b:e2:5a:a6:48:07:36:3a:71:53:94:36:
e3:ce:d5:88:b9:a3:9f:7f:d9:82:1e:85:06:07:73:03:73:8c:
e5:d8:0e:fe:21:4d:bc:6c:14:db:1b:f2:e9:ca:ef:1d:79:59:
24:23:5d:68:39:28:de:a0:f1:4e:1c:43:97:75:42:c3:68:ac:
e2:a6:95:5d:2c:15:d5:e4:68:0c:1d:64:34:52:ad:10:1e:a3:
04:c8:4b:d6:f2:76:ae:49:18:80:58:03:8a:95:28:c3:8a:f7:
0e:5f:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:28:00 2026 by rpki-client