Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7f69a634-b398-43dd-9ddd-ad4d0f06e934.roa
File: 7f69a634-b398-43dd-9ddd-ad4d0f06e934.roa (raw, json)
Hash identifier: YCG3m5sqn3t/7zuoLgClbNPD7HvVfwpBHCLTPo/JgZA=
Subject key identifier: 30:E7:D4:80:8D:EC:39:53:53:D9:FB:B9:27:83:4D:47:05:15:16:2E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 32792586AEA76B40C82ADB23830D1D975625B3C1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7f69a634-b398-43dd-9ddd-ad4d0f06e934.roa
Signing time: Wed 12 Aug 2026 21:04:25 +0000
ROA not before: Wed 12 Aug 2026 21:04:25 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc0:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:79:25:86:ae:a7:6b:40:c8:2a:db:23:83:0d:1d:97:56:25:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:25 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f3e99a7a352b8553a34d5d7f16986125fbc9d015cd92cac087b8317e9d3ed0f5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:5b:ef:06:f7:15:a5:f5:eb:ea:43:89:f8:
99:ac:13:35:d2:1e:4c:d0:98:c1:0e:3a:00:7e:df:
d6:d6:79:25:d9:0b:ce:d1:d5:2a:73:9b:da:02:92:
7a:cd:33:e8:df:f6:51:f4:8b:70:9d:67:c1:d5:65:
a6:10:1b:e5:00:17:37:e6:9b:d4:df:3b:55:57:8e:
52:a9:44:17:d0:5d:f8:bd:f2:df:61:c3:52:49:24:
45:f0:25:3c:1c:62:dc:0a:26:74:3e:6f:71:e0:53:
b0:0c:e8:53:92:e5:eb:b3:02:90:b4:57:68:60:31:
92:c8:7f:34:bc:c2:62:f3:be:1b:fc:0a:b8:0b:4c:
21:98:54:40:fa:8e:cd:9b:80:a8:2a:05:f6:0a:e2:
e9:11:8c:14:9b:c4:5f:84:f0:3f:5a:5f:de:e9:db:
58:2e:98:d4:ec:00:67:2d:aa:c0:ea:3a:1a:dd:24:
79:2d:31:5a:4f:be:21:7a:d8:21:1b:13:de:11:f6:
ea:4f:5e:e6:a4:f1:5a:a0:82:84:59:d4:3a:2a:0f:
a3:21:80:8d:02:5e:e1:81:34:39:bb:31:36:9a:b4:
d0:b9:3c:4a:63:b6:9a:b2:78:75:07:1b:bf:7f:9e:
fc:b7:51:bd:58:9d:7e:06:56:53:f5:45:9e:1b:f3:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:D4:80:8D:EC:39:53:53:D9:FB:B9:27:83:4D:47:05:15:16:2E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7f69a634-b398-43dd-9ddd-ad4d0f06e934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:880::/48
Signature Algorithm: sha256WithRSAEncryption
18:d5:1f:74:e2:32:0e:4c:80:5d:a0:6a:61:5d:05:3c:e8:c5:
6e:a1:08:d6:05:fa:9f:cb:90:5f:9d:09:ef:4c:ca:fd:b0:48:
62:c6:ac:6b:2a:a3:b3:b9:66:23:08:b3:08:4c:93:7c:69:c9:
29:32:9d:c7:e3:28:f2:2d:4a:62:34:9c:88:8d:ec:60:2a:1e:
64:cc:5b:70:dd:75:16:6c:6b:ed:af:99:94:05:b6:30:1f:48:
b9:67:e2:a5:92:43:80:dd:a5:75:6a:25:f0:52:d5:1a:07:6a:
d2:3a:8d:fd:1a:73:e7:fe:5a:3a:0c:9c:a5:92:99:d8:7d:43:
c6:cc:a1:e9:13:68:c0:84:5c:68:12:03:9f:90:78:02:8b:70:
ae:48:2c:5f:f4:cf:c1:0a:6a:ba:b1:e3:1e:cf:59:1c:da:a8:
e9:45:5e:26:5f:f3:02:bf:2d:fa:7f:a3:c3:d7:5a:4f:cc:07:
53:d5:b4:61:00:61:37:7e:76:f9:e0:fd:cb:18:ea:29:fb:34:
3e:13:6e:cd:d7:0a:fc:41:c5:36:d2:e7:19:25:01:25:69:05:
ab:79:d3:1d:bc:a2:d5:30:d7:c6:81:78:7f:b1:33:c3:f0:c5:
62:cd:a7:06:5b:e7:4c:be:f4:a6:09:75:6a:96:a4:d9:44:a2:
4b:05:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:28 2026 by rpki-client