Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ce56587-daa1-4400-bed4-6204cfafd220.roa
File: 7ce56587-daa1-4400-bed4-6204cfafd220.roa (raw, json)
Hash identifier: F1AhbKTIC7g4+H+cPiAC2mNSBj09kmTLtm9gy7VAi84=
Subject key identifier: 83:F1:31:A5:39:34:7E:B6:A3:33:E7:61:F0:FA:28:96:6B:93:09:CD
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2630768519041B594EFF3EA35EC1E74E25BA6639
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ce56587-daa1-4400-bed4-6204cfafd220.roa
Signing time: Thu 30 Jul 2026 01:30:59 +0000
ROA not before: Thu 30 Jul 2026 01:30:59 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:30:76:85:19:04:1b:59:4e:ff:3e:a3:5e:c1:e7:4e:25:ba:66:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:59 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=4aff34e31c728af5c457396c73da722ac0d9770a51e2e07a26b24e292bd289ce, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:72:e0:84:ff:d2:21:20:eb:99:18:9b:e5:
53:4a:a9:5d:5b:ad:ba:2a:8b:f0:20:ac:a8:15:df:
5f:3c:f9:dc:c2:5c:b9:68:0c:5f:22:b5:7f:2d:a5:
22:7b:b8:aa:78:a9:6c:dd:63:42:3c:ec:1d:11:06:
ee:e5:87:8f:b6:70:e7:56:dd:f8:fa:c5:43:20:bd:
8e:e5:cd:f9:5c:8b:d3:b4:d6:d0:ec:d3:21:54:63:
dc:be:22:40:02:0a:c5:e8:67:26:51:f3:c6:f0:23:
63:4a:36:4b:4f:0f:b9:2a:8a:53:ac:03:45:b1:50:
a3:87:d5:77:ce:98:24:ea:06:ca:c2:ff:be:8d:3e:
12:cc:af:0d:4d:41:5b:a2:04:a0:d3:72:25:3d:af:
d6:e4:0d:00:2d:54:00:5f:ad:cf:a1:9b:4d:12:40:
d7:36:53:95:f6:16:14:83:7f:a3:75:42:88:e0:35:
9c:c8:a4:50:f9:93:fa:a2:5c:c4:cd:91:9d:82:bf:
07:74:e8:c6:82:7e:7d:9e:ad:21:4c:03:90:a2:28:
53:97:77:6d:d0:e3:55:58:2b:75:21:3d:c9:48:7d:
3e:94:dd:a2:3e:2e:ef:4f:c5:22:7f:ba:70:05:ca:
d7:b1:4d:7a:95:fb:27:df:70:f9:ed:69:d0:19:6a:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:31:A5:39:34:7E:B6:A3:33:E7:61:F0:FA:28:96:6B:93:09:CD
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7ce56587-daa1-4400-bed4-6204cfafd220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
17:00:6c:a0:36:d7:b8:9b:3b:06:1d:94:f9:a3:fb:c6:20:1a:
5f:ca:2a:7d:68:f1:a0:42:8d:36:e1:4c:41:5b:5a:25:23:7e:
15:3f:bb:7f:53:53:95:ea:60:bc:e5:6c:a6:35:ea:4c:02:c7:
27:f5:92:61:cc:f1:1e:35:29:8e:51:90:c3:7f:66:cb:2a:3d:
14:30:f1:42:16:06:4e:b5:7d:07:72:53:9e:8e:ed:43:bc:14:
f2:d8:38:56:37:6c:9e:21:7f:12:c6:fe:5f:7d:46:22:21:53:
62:de:4c:a3:35:8a:b6:73:f5:be:ff:bd:68:02:38:a5:c9:e1:
f3:73:06:e1:25:9a:0a:a2:43:0e:9b:5b:e6:ed:60:53:40:5f:
50:e7:43:f5:46:e9:94:26:94:db:77:1f:5e:02:7f:ad:b3:90:
b5:c4:10:33:59:95:ba:d3:7c:8c:38:dd:e0:a3:83:b3:ca:21:
21:22:c1:f0:62:a2:90:3a:a5:f7:d8:cd:7e:16:95:bf:32:3e:
cf:ab:53:36:e8:25:52:0b:a6:e7:ae:20:22:42:c7:d0:8b:3c:
fc:db:da:36:6e:0b:6a:cb:09:81:61:21:2f:0f:ce:bb:db:f9:
10:29:b4:a8:79:e9:51:3e:de:26:9a:cf:4e:ab:e5:bd:6c:d4:
d4:fc:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:21 2026 by rpki-client