Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa
File: 6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa (raw, json)
Hash identifier: +Cn9vilfDUbl9M8+hghD+SrmeZGVBtGt7DznJST8FhM=
Subject key identifier: 68:32:68:FF:8E:C8:C9:97:B4:59:0E:14:1D:36:94:78:6C:96:C3:EF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 36FFD54A79F8BBB1B96C83A4726F6AEC66060690
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa
Signing time: Thu 13 Aug 2026 00:00:10 +0000
ROA not before: Thu 13 Aug 2026 00:00:10 +0000
ROA not after: Wed 11 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ff:d5:4a:79:f8:bb:b1:b9:6c:83:a4:72:6f:6a:ec:66:06:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 13 00:00:10 2026 GMT
Not After : Nov 11 23:59:59 2026 GMT
Subject: serialNumber=36842f2b867ef6df3c181246bf19fa7ed3e856a086f3f29f739bcb5136344b8f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:c8:a3:c3:64:49:c9:5e:e3:06:5a:d6:48:
36:87:56:b0:e7:85:ed:5c:a8:ec:d7:e9:1a:47:e0:
63:3a:bc:89:1a:fb:e2:ae:0d:af:bf:a3:28:df:57:
7a:fd:96:54:66:d2:db:f9:aa:ac:f9:22:e8:4a:27:
08:db:79:4b:c8:09:1c:c5:da:68:b0:5a:6e:aa:44:
26:fa:c8:5a:4c:ca:b7:1d:d6:53:b8:66:59:89:e9:
4c:17:75:7a:00:82:12:f3:4e:bf:1c:41:b9:a5:79:
12:81:40:29:a0:ef:4b:f9:39:29:15:16:df:ea:e6:
0a:05:a1:a5:24:f2:13:72:62:14:63:2c:78:df:2a:
4d:fd:63:73:0e:13:39:1f:71:9c:6f:74:a7:e9:9c:
bc:17:95:8d:a3:4e:d4:da:1e:b0:ae:2e:99:50:5d:
16:45:e0:51:95:86:c5:e0:10:87:25:f4:63:ad:00:
b5:90:91:94:37:0f:fd:46:f0:5a:f2:40:ec:1f:73:
92:43:19:1e:19:3f:c8:91:06:91:e8:fc:d0:1c:16:
e6:01:17:d9:1c:92:c6:cd:52:2d:59:8d:27:13:0e:
50:e4:e8:82:25:b7:a1:1b:ac:ed:59:b2:24:95:04:
30:99:ec:af:a7:be:0c:6a:68:3a:9e:52:60:cd:75:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:68:FF:8E:C8:C9:97:B4:59:0E:14:1D:36:94:78:6C:96:C3:EF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6d69a6a5-1d1c-454d-a569-3c74d280c7d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:2::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d0:b5:07:4a:03:3e:09:5d:e5:73:97:54:8a:44:ec:81:ca:
fe:47:ed:3c:4d:91:db:62:91:4c:8c:30:e4:e2:51:18:82:be:
90:d3:10:f0:36:c0:2f:a6:fe:ca:2d:d9:61:af:25:db:79:18:
c7:4f:56:76:87:69:83:d3:ed:96:40:df:72:79:e9:2d:36:fb:
80:fd:59:e9:09:8b:73:9b:58:7d:4c:1c:a8:c3:4a:46:b3:11:
6d:88:2a:fe:2a:b5:1f:20:0e:ef:b3:a3:11:15:2e:22:a4:dd:
77:a2:a7:be:db:06:71:6f:53:72:fd:ae:c0:e7:68:94:d8:0a:
88:4e:af:54:14:a1:9d:69:ba:97:3e:b3:d8:c6:a3:7b:f3:f6:
5f:27:fc:c5:66:75:e1:f3:5d:3a:a5:53:e1:95:84:91:06:f3:
b7:9e:6e:08:6c:5a:27:29:2b:e8:98:d2:52:36:ea:73:3f:7f:
66:c4:c0:a7:68:3a:0b:0d:53:02:82:99:bb:b9:9f:44:94:a3:
1e:c4:4b:fd:28:32:4f:84:78:91:d0:3b:60:e5:54:9c:a4:88:
45:9f:e7:04:4e:33:e7:3e:c2:20:75:46:43:37:50:d4:6c:1f:
74:c5:33:cb:2b:8d:49:c6:7a:5b:8b:22:e9:5f:a8:c1:44:18:
82:53:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:58 2026 by rpki-client