Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/71ecb785-83f2-49e3-899e-5a6d8098f651.roa
File: 71ecb785-83f2-49e3-899e-5a6d8098f651.roa (raw, json)
Hash identifier: rU+BGSVJmPdFcuzBye7FJsJfbtp9V5XVxLtow8S/ncs=
Subject key identifier: 8E:9B:B6:E8:F8:DE:60:77:2F:45:6D:96:42:F5:C9:7E:9B:54:1D:E8
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 63ECD1976D2E9DF49342F64E984A39BDB3AA6286
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/71ecb785-83f2-49e3-899e-5a6d8098f651.roa
Signing time: Thu 30 Jul 2026 01:30:16 +0000
ROA not before: Thu 30 Jul 2026 01:30:16 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ec:d1:97:6d:2e:9d:f4:93:42:f6:4e:98:4a:39:bd:b3:aa:62:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:16 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=c3005c93bb486f362c3f6a85a03a207b195161b20c176220fe81c84835476d46, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:59:9f:fa:25:bc:79:f0:c7:ef:97:2f:d4:
7b:ff:82:d9:d5:d0:5e:3f:ed:5c:7e:16:dd:81:28:
b4:82:ec:f4:0a:fa:47:96:14:1b:ff:01:69:df:29:
7d:3a:01:ce:76:a8:86:78:ae:e3:62:8e:06:3a:7e:
2c:cb:de:55:f0:40:2d:75:77:7c:e1:a9:0d:14:be:
b3:10:23:b1:a9:b4:61:c0:5b:9d:41:24:05:96:d9:
5a:fc:ae:12:c9:4b:b1:a8:a2:43:54:21:d0:4f:97:
0f:20:83:57:62:2a:f7:95:1d:4a:b0:b5:76:f0:1e:
d8:f0:68:20:22:03:a0:fa:15:7d:2a:35:6e:dc:e4:
c2:72:ef:bc:6f:67:b5:b4:c0:3d:ce:e0:15:43:10:
e1:8b:e4:ff:ea:cc:85:a5:76:11:f1:6f:b2:19:21:
69:51:d7:c3:2e:c8:b0:14:fa:7a:13:72:84:2d:db:
be:1d:ca:58:25:dc:3d:bf:61:34:f0:db:7c:f9:4d:
08:1e:ae:19:7b:0e:6f:4f:22:65:94:28:27:86:3d:
f1:5c:87:74:da:46:a6:62:a6:a1:a7:44:65:15:79:
b9:e6:cb:ae:43:85:1e:65:45:2c:cd:44:fa:ac:7b:
68:45:0a:e8:45:f8:aa:39:50:af:3d:07:80:03:e1:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:B6:E8:F8:DE:60:77:2F:45:6D:96:42:F5:C9:7E:9B:54:1D:E8
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/71ecb785-83f2-49e3-899e-5a6d8098f651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:ef:5d:93:6e:c4:70:bd:68:6d:94:6d:15:57:7e:5f:7b:45:
d9:a8:29:49:fa:44:14:8e:8e:bb:1d:1b:4e:f2:35:d1:21:7a:
87:f9:32:12:6d:f8:27:a0:24:37:82:60:1a:f9:ac:a1:62:51:
3b:9c:a7:92:21:39:04:b8:00:b3:c2:0c:f4:0a:1c:e7:78:85:
2c:26:ad:65:29:a9:19:d8:8a:73:5c:40:a2:9b:cf:5c:1c:0f:
24:7d:47:a8:ba:ed:26:e3:5a:5d:d2:11:ac:cb:59:c0:59:4e:
4e:b0:ee:81:d0:1f:42:01:97:dc:b9:f9:9d:6f:c6:da:06:b0:
1e:05:b1:1b:49:91:95:a1:47:b2:5a:f7:45:a6:07:d0:bd:cb:
74:b6:6d:fd:a9:d8:3a:c7:f3:bc:2f:50:c4:24:61:4b:19:ed:
46:84:da:f7:77:d0:c6:a2:29:73:2c:fb:64:81:3a:5e:21:08:
87:a2:eb:b6:23:70:51:dc:e7:b3:4a:b6:37:6b:e4:69:79:63:
b8:79:b0:1e:b5:f9:37:2f:c6:8e:76:23:85:82:60:b8:22:3a:
41:f7:1b:70:53:04:68:1f:49:56:9d:d8:4c:c4:ef:33:d7:b7:
27:73:18:36:61:ba:e9:8a:2a:f8:c2:fb:9a:d7:8a:90:13:55:
f5:5a:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client