Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7be7c7d4-c45a-4bfa-963b-b4a0cc9c5a03.roa
File: 7be7c7d4-c45a-4bfa-963b-b4a0cc9c5a03.roa (raw, json)
Hash identifier: 1u/R+o5W7asczbR0h7FUv00geLX4h5fbbekV/1wn4dg=
Subject key identifier: A4:A3:CA:F8:7E:89:9E:1B:89:3E:D2:8F:78:BD:B3:C6:9C:73:40:E2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 54EFC9A0D67315741FCBEACEDDBD137D273240AA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7be7c7d4-c45a-4bfa-963b-b4a0cc9c5a03.roa
Signing time: Wed 12 Aug 2026 21:06:47 +0000
ROA not before: Wed 12 Aug 2026 21:06:47 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc1:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ef:c9:a0:d6:73:15:74:1f:cb:ea:ce:dd:bd:13:7d:27:32:40:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:47 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f60c47926e55935c96463ea815e9d61776ae5711633b9a2671e080905480b652, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:66:48:58:36:52:9f:dd:44:e9:cc:32:25:
77:1a:9a:91:84:b3:d7:32:e7:c6:65:2e:bf:b1:02:
21:f9:c5:d2:65:2d:42:3e:b0:d7:44:3a:67:a6:b8:
ec:dc:73:37:7b:3c:a0:eb:82:75:25:60:a6:0c:a4:
2a:79:80:f4:e1:03:e4:61:d0:15:53:fb:71:db:4d:
1a:d2:2c:ed:1d:3d:f4:01:3b:7f:74:50:94:e3:89:
35:96:97:df:cb:25:9d:42:0d:2f:d4:ba:83:4d:74:
35:1d:85:01:cd:85:a7:b5:ba:02:03:66:a2:0a:e7:
b6:d5:4a:d7:b1:5e:6a:93:1a:b6:28:e7:2a:c6:77:
a4:17:78:78:3d:d6:dd:6b:dd:1f:5f:02:9c:83:80:
ee:0c:41:dd:5e:4f:30:4e:e8:7a:f3:c0:b6:34:f1:
43:a3:46:67:43:5d:15:c4:ae:42:28:92:01:60:e4:
d6:2c:fe:4c:12:52:44:6d:9a:a0:76:4d:d7:4f:c7:
2b:37:1c:84:87:bd:ce:43:68:4a:b8:91:2d:5d:c9:
1b:dd:2e:c7:15:ae:66:27:b9:8a:4c:66:1d:35:48:
e9:ba:fd:33:3d:58:b2:09:3f:6b:d0:4d:4c:58:b2:
17:5c:8b:ca:27:d7:62:05:f3:7c:58:4d:d8:a2:2d:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:CA:F8:7E:89:9E:1B:89:3E:D2:8F:78:BD:B3:C6:9C:73:40:E2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7be7c7d4-c45a-4bfa-963b-b4a0cc9c5a03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8000::/36
Signature Algorithm: sha256WithRSAEncryption
86:61:6c:9b:bd:c1:12:97:5b:60:f6:47:0d:20:48:cc:c7:67:
9e:37:47:2e:50:c9:19:9a:58:cb:b3:e6:b9:57:14:64:79:95:
7c:f5:6d:61:0a:b5:33:bd:e0:02:77:7b:cf:e0:fc:39:54:48:
eb:d4:25:e9:81:77:40:bd:71:0f:16:1c:c8:bd:2f:d6:d9:60:
10:a5:d8:1e:80:d9:86:ca:b6:43:c1:3a:85:56:3b:ff:de:b3:
47:12:b6:e7:56:0f:3c:da:23:ce:cc:f5:88:be:07:0b:91:74:
ff:3a:0b:e5:9f:f5:eb:b2:ec:40:15:a6:ee:67:fb:15:7b:b0:
c0:60:a9:ef:d7:ed:9b:88:37:0b:da:64:70:09:e4:d1:23:2a:
0a:7e:cf:eb:84:22:7c:f0:44:59:32:06:e6:db:f9:f7:7f:55:
f0:bc:29:bf:b6:b6:4a:17:35:22:5f:2d:bf:17:82:c3:9a:3c:
2e:6c:28:d0:e4:8b:91:f8:db:0e:c1:b8:de:60:9a:b5:29:15:
cc:f0:96:43:65:b1:07:7a:0e:9c:55:08:c3:a8:18:e6:aa:87:
d1:9a:dc:05:1d:41:e0:7f:31:c9:c3:9e:bf:32:26:75:7c:e3:
d8:02:b9:85:c7:7f:c7:f8:b1:18:b8:a4:aa:98:7a:f8:7a:66:
f8:aa:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:52 2026 by rpki-client