Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/74f381b2-46ae-4e78-8d95-25730216e683.roa
File: 74f381b2-46ae-4e78-8d95-25730216e683.roa (raw, json)
Hash identifier: vsWZf6JMNpalJnMkOYGONc645dccFXnrVrM1LrnbD5s=
Subject key identifier: CB:38:C0:82:6A:2B:EA:47:AD:DC:F6:2C:A8:63:92:17:11:0D:39:7F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7FA718FE29C55AC17C8C216EB7DAA41E50A437E9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/74f381b2-46ae-4e78-8d95-25730216e683.roa
Signing time: Mon 03 Aug 2026 00:40:06 +0000
ROA not before: Mon 03 Aug 2026 00:40:06 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc2:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a7:18:fe:29:c5:5a:c1:7c:8c:21:6e:b7:da:a4:1e:50:a4:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 3 00:40:06 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=b9b27c02074b67dcb4bc99cf7fffaffece35b2cbd92dc5ec092d19c6ba6019e8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:a1:8e:43:4a:1c:36:51:e2:ac:aa:38:74:
78:c0:3d:5f:33:59:40:bd:90:df:c5:33:2c:98:86:
a2:78:19:65:03:03:76:cc:1a:67:d3:46:30:1f:46:
b1:3b:98:97:13:ce:26:92:70:f4:da:45:b7:03:19:
aa:05:e9:2e:80:26:b3:33:2c:0f:0c:ce:a7:60:b5:
ad:b8:8a:e6:f9:6f:31:45:80:47:04:78:a8:2f:95:
9f:27:d1:3c:ba:5b:de:a9:5e:ac:c4:be:79:82:d1:
1a:bd:23:f3:b8:80:79:86:f4:10:5d:96:b7:7f:e6:
8d:fb:84:9d:85:1e:61:55:53:d2:da:d3:e3:b3:ae:
d7:f9:c1:a4:08:f1:3e:87:40:c2:d3:c1:86:b9:7d:
aa:75:96:df:97:6d:fe:a6:65:e3:ce:84:ff:b9:b7:
eb:76:c6:73:d2:8c:75:17:da:38:44:8c:6a:3a:ac:
73:72:3b:aa:4e:c9:b9:1f:b6:a5:33:de:38:06:08:
55:4a:8d:6b:22:c4:20:5d:d5:90:98:5e:7a:6e:30:
4b:66:51:0a:20:23:95:15:31:9f:ee:31:a4:c3:c6:
4a:ca:7e:ae:49:01:e3:ff:bf:55:b0:0e:b8:99:08:
3b:61:a0:23:9b:56:28:77:a2:9e:8d:10:f4:33:7d:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:38:C0:82:6A:2B:EA:47:AD:DC:F6:2C:A8:63:92:17:11:0D:39:7F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/74f381b2-46ae-4e78-8d95-25730216e683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
14:ad:1a:74:26:37:bf:91:24:a1:c7:22:db:70:90:4a:fc:ca:
e0:6c:8e:76:19:92:ee:90:4f:ec:c2:1e:13:90:b6:5e:a5:5f:
d4:82:60:06:75:43:e6:89:5c:37:5b:88:fa:1a:cf:bc:f5:a4:
69:b5:0c:49:9f:50:82:2c:72:d1:5a:99:9b:9b:2e:f6:f0:c4:
69:40:a0:6d:ab:59:da:e5:db:4b:a4:bc:31:73:9a:00:95:83:
ca:31:c9:35:19:5f:cc:44:12:27:81:6d:01:0d:76:7b:31:18:
bc:89:b9:84:73:83:75:70:b9:35:8d:f6:93:3d:0a:b2:4b:8b:
c1:cb:6d:e7:e2:5e:76:88:44:08:83:8b:0f:bf:f4:8b:e1:2c:
55:6b:0d:e5:2f:ad:88:69:ac:0d:96:02:3c:a3:b2:23:bf:18:
1e:04:bd:4e:1b:c6:fc:93:44:3b:1e:41:70:ca:81:d4:50:7f:
15:84:fc:d1:5e:19:99:c6:f0:80:48:b0:bf:bb:b8:68:84:6d:
62:76:37:22:ec:15:fc:82:a6:8b:f9:b6:8a:16:e5:16:17:5d:
84:e5:d6:45:a4:2a:c7:95:51:0d:2f:5e:3f:1d:58:58:b0:e5:
03:b2:e3:bc:4d:78:42:f9:40:bd:95:6f:ae:73:9b:e9:e7:e4:
19:d6:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client