Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf23b1b-5fbc-4a8a-a8c3-da9f9de1aaf9.roa
File: 7cf23b1b-5fbc-4a8a-a8c3-da9f9de1aaf9.roa (raw, json)
Hash identifier: kKDV6kmhLRIsY/ZGkGe1qqTUKb52kvGPtYrPvCjmTIo=
Subject key identifier: 6B:3A:DF:8E:BD:6B:BD:17:92:CF:25:38:DC:92:49:74:0D:A1:C9:32
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4C74319A61ADF623640F8D7FE963F594708003D0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf23b1b-5fbc-4a8a-a8c3-da9f9de1aaf9.roa
Signing time: Wed 12 Aug 2026 21:05:41 +0000
ROA not before: Wed 12 Aug 2026 21:05:41 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:74:31:9a:61:ad:f6:23:64:0f:8d:7f:e9:63:f5:94:70:80:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:41 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=fb0c8c0434740c0e37f4f395cb78e09b394df8164a691170eb3c8b460c2a9148, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:2f:2c:3d:06:5a:5e:a5:a0:a8:68:0c:09:
3a:47:72:b5:a1:ed:1d:1b:f6:08:45:71:e0:5e:0d:
e8:19:fd:52:a3:ce:8f:55:65:bb:82:03:7c:c0:e8:
86:f3:aa:46:21:44:92:10:dd:73:a3:1d:1d:f2:ea:
07:05:b2:94:53:9f:04:9a:a2:74:7c:7e:d9:ac:b4:
90:a2:02:05:eb:d7:7d:2d:06:f1:c3:e1:8b:91:e5:
0a:78:1d:61:ab:90:3b:8e:ca:16:f6:16:6c:5d:b7:
7f:3b:30:1a:33:7f:f2:4e:90:34:06:d2:36:78:26:
6d:09:8a:80:dc:a0:5f:59:cb:8e:2a:16:3c:cb:a9:
18:a5:d3:6b:f9:8b:ef:7d:9b:fb:62:c9:4c:75:b9:
e8:03:e7:2b:61:84:14:f7:83:74:4e:67:e2:70:64:
b3:e1:2c:46:0a:38:c4:94:82:b0:4c:40:b4:1c:59:
e6:1c:61:a4:a4:df:68:a5:0d:bf:1f:cb:07:0e:88:
9e:52:32:1b:ce:8d:75:51:c6:74:e5:53:b4:40:f9:
32:d7:29:a5:62:e6:90:68:56:54:4b:fa:8b:88:ad:
3e:a3:3b:4e:10:72:2c:61:e7:3d:17:5c:6d:60:4d:
c7:af:03:be:8e:03:b3:6d:56:fc:0b:f0:07:6a:70:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:DF:8E:BD:6B:BD:17:92:CF:25:38:DC:92:49:74:0D:A1:C9:32
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf23b1b-5fbc-4a8a-a8c3-da9f9de1aaf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a9:06:80:5b:86:6e:3a:f0:42:17:c9:c6:2e:50:af:75:36:24:
96:91:31:be:4e:71:da:67:ec:c1:f5:a1:71:3e:8e:e5:6a:b1:
86:26:cd:f3:58:67:93:24:05:3f:5d:b0:fb:e7:26:ff:d9:ee:
e8:c4:4f:a3:ff:00:35:72:f5:7c:1d:64:0c:bf:fe:41:02:77:
8e:61:39:0b:b6:05:0b:0e:a6:2b:c0:e1:6e:d0:f0:c6:6f:5c:
3a:21:65:d3:0f:1b:58:f9:c4:03:c4:e5:0a:8b:e1:7d:94:fa:
7f:ee:04:be:83:e6:08:3c:0e:28:ed:79:7f:5e:3f:f1:ff:ef:
56:5b:f8:20:03:ed:82:bd:39:34:90:de:e2:21:7e:71:a0:77:
2d:77:5f:ba:08:7f:4b:40:79:e4:f0:ad:25:09:81:62:55:4d:
d1:a2:f1:aa:30:6d:af:b5:ff:bf:da:47:0f:cb:70:34:a9:3a:
e1:8e:87:37:8f:63:b6:e5:11:87:60:dc:7d:6f:35:b2:9b:82:
e4:91:42:41:03:8f:58:dc:89:48:89:76:0e:a2:7e:07:bf:b5:
54:e2:6a:c1:58:d2:60:c5:f2:39:ce:3f:ea:ab:01:09:e5:9e:
e7:13:5a:ca:cf:4b:52:95:a9:37:ec:96:ba:f5:e5:b8:8d:d0:
8d:2a:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:08 2026 by rpki-client