Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8141b7c7-3722-47fb-a87c-13473348f317.roa
File: 8141b7c7-3722-47fb-a87c-13473348f317.roa (raw, json)
Hash identifier: lr3AHlH5ccJnu/MWkAn0y1Vw8L7KmYbqoKdXUxouG2c=
Subject key identifier: 93:1A:80:87:EA:11:3C:B8:5D:90:AC:3E:EC:E4:98:3D:A7:F6:D1:57
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6ACFBC89A44510C9FDF0D14AA855639CD87AF2B1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8141b7c7-3722-47fb-a87c-13473348f317.roa
Signing time: Thu 30 Jul 2026 01:30:39 +0000
ROA not before: Thu 30 Jul 2026 01:30:39 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cf:bc:89:a4:45:10:c9:fd:f0:d1:4a:a8:55:63:9c:d8:7a:f2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:39 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=8a3e82cfdd47ed9a90257c8e6bec544c8f51d795043321a79b3814919d2ced0d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:73:b0:1d:60:26:a0:ca:2b:25:80:6a:27:
32:46:f1:27:cd:dd:f7:06:a4:51:60:6f:19:1f:a0:
83:10:9c:b4:4d:4b:b4:2e:3d:45:bd:60:fd:4b:8e:
b9:d4:fd:42:0d:04:cc:80:a6:f6:cc:25:e9:ff:64:
79:3b:20:6b:ae:c0:6f:08:03:0a:f4:30:f7:78:9b:
4f:af:98:fe:fa:95:b0:a6:ee:99:6b:87:18:eb:f2:
3e:de:10:f1:70:d3:69:27:0f:1f:d5:f6:9f:6d:0e:
9d:f9:21:af:a8:f3:8b:f2:3f:42:bb:5b:d7:e4:1d:
40:76:b2:e5:f5:d1:02:28:ad:da:a1:e5:fb:9f:2c:
cf:33:65:3c:33:0b:66:3f:1d:60:09:a3:1c:cd:cd:
c6:7e:4c:20:51:63:e7:32:4a:68:89:0f:d0:21:ab:
4e:d7:7c:80:14:59:c1:57:4b:94:f3:84:59:8e:c6:
a9:c9:6e:89:3b:80:1c:93:ab:05:d4:37:2d:f2:85:
6a:a0:1a:cb:0c:13:6f:2f:19:19:25:ff:fa:b6:ea:
85:54:a7:91:7d:f9:3e:a4:7e:3c:09:01:a6:35:15:
b3:bd:5c:8b:71:14:10:0b:d8:9f:07:b7:20:b2:61:
c3:b8:63:7b:78:4e:c2:82:ef:91:79:ab:a8:58:2e:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1A:80:87:EA:11:3C:B8:5D:90:AC:3E:EC:E4:98:3D:A7:F6:D1:57
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8141b7c7-3722-47fb-a87c-13473348f317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8800::/38
Signature Algorithm: sha256WithRSAEncryption
36:4d:30:55:94:fd:58:1c:6d:49:d6:c6:c3:8a:16:00:00:a7:
29:9a:8a:f6:4e:f4:24:db:35:af:7f:43:47:62:60:39:f8:9b:
70:32:52:c3:de:50:3a:29:c1:93:67:96:53:22:74:a5:a3:87:
fb:7d:09:06:a1:73:09:f9:a7:86:d7:d2:68:86:b9:b8:d7:9c:
e5:b4:8a:e6:9f:74:82:cb:39:84:8e:bf:2e:ea:94:a5:d4:7f:
3d:35:5f:0a:83:d4:b0:ab:f2:a4:e3:28:b6:54:11:f9:d9:a0:
51:59:8b:f2:6c:da:24:d8:5c:11:a8:fa:e3:1a:61:a8:da:7a:
4e:d9:3e:5e:ac:02:83:11:3b:0c:90:f8:35:d9:eb:18:7d:d8:
8a:20:8a:bd:22:52:ce:6e:b7:91:58:6e:62:85:0d:a6:aa:53:
58:17:f2:71:6f:68:df:05:80:c0:98:8d:4d:b8:4a:f1:8b:37:
51:88:0b:f9:92:e1:b3:61:cc:a4:25:2f:9e:22:b4:e0:34:b7:
eb:82:45:51:77:60:d6:a5:4e:24:39:18:03:b1:a7:0b:5c:29:
bb:02:07:6c:33:6d:ff:87:05:a3:f8:3a:94:6e:ff:36:aa:dc:
71:af:b1:57:77:bd:00:f3:82:a7:36:92:10:2f:ec:04:4d:7f:
30:8c:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:15 2026 by rpki-client