Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
File: 81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa (raw, json)
Hash identifier: eVJIVljNZQlwNt1pRVEB0laa2RqXQB3MVjBpubHOdZg=
Subject key identifier: 66:97:E6:94:A1:52:B6:41:8D:1B:3C:5F:4F:49:0E:D9:45:B8:25:2A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 03D7FE8502C68310DA931422EC7A1ABB2414AA71
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
Signing time: Thu 30 Jul 2026 01:30:39 +0000
ROA not before: Thu 30 Jul 2026 01:30:39 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d7:fe:85:02:c6:83:10:da:93:14:22:ec:7a:1a:bb:24:14:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:39 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=c426206e0aaae0eb80db7c057f32a1ded65abafea9ac388d0ebd0f1abd7cd056, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:09:ea:56:13:f3:89:9f:11:8e:f4:f1:77:
7f:8d:22:88:2e:6b:8b:34:3a:b7:37:de:fb:66:fd:
5a:0a:25:7b:23:6f:87:0d:07:2c:31:7b:37:9e:14:
ac:73:77:98:8e:5d:a4:65:11:0d:68:c0:de:8d:2d:
ec:2a:af:cf:06:71:7e:c9:89:c6:04:2d:e8:03:b4:
60:2d:67:d9:77:44:12:13:f8:85:26:43:87:d7:9e:
a3:a5:2c:63:29:3b:04:fc:b8:d8:4b:e3:90:dd:70:
8b:33:59:57:e0:e9:42:ed:c1:bf:73:75:82:11:bf:
0e:07:84:1c:4c:ba:5b:26:ab:ef:c4:7c:d7:e0:ee:
7a:e7:03:e9:97:59:bb:de:cd:c7:e2:58:5b:dd:f2:
da:95:1c:2b:a8:a7:20:14:4c:14:03:b3:e6:26:03:
d5:51:66:c2:47:9b:bc:b0:4d:3d:ed:77:3d:0d:df:
e9:34:e7:e2:28:46:b7:d0:88:11:c3:6d:4b:1b:01:
d4:d0:aa:7d:d1:a2:99:c8:5a:e2:b4:91:ca:c7:d7:
e6:8e:32:c3:07:35:4d:c6:cb:d0:d5:ab:96:5c:4e:
d3:0f:0d:c6:72:ac:82:a2:86:0d:9f:82:4f:db:3a:
ec:b2:12:ac:24:8f:42:1a:13:c8:12:ad:53:73:53:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:E6:94:A1:52:B6:41:8D:1B:3C:5F:4F:49:0E:D9:45:B8:25:2A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/81c0e08f-5df8-4d0d-a070-70ca484fbf18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2000::/36
Signature Algorithm: sha256WithRSAEncryption
57:e5:50:36:59:38:4e:9e:5c:27:3b:1e:87:75:87:a6:8f:e8:
a4:71:3f:32:1e:25:80:10:e8:2d:f2:e6:d9:e7:7c:7c:96:58:
66:72:7e:0e:35:bc:96:09:ba:0e:48:c1:02:a9:b2:56:b7:9f:
31:5e:9d:1d:16:15:f8:c9:c1:26:75:a1:e9:2c:42:c4:43:8a:
cf:49:6a:c1:68:c6:3e:8a:8e:bf:32:e5:6e:1b:17:08:48:bb:
66:0f:5d:bf:35:92:99:7a:3a:81:77:11:48:25:d7:29:f8:90:
5d:d9:c6:bb:f2:a9:6d:88:07:c1:20:bf:2e:bd:46:36:e6:2f:
a4:27:f2:8c:c3:1c:69:cb:00:02:55:01:85:2a:f3:19:f0:4c:
35:ac:8d:30:4c:67:dd:e2:d1:a3:db:7a:54:cb:2f:26:f7:1f:
2c:9d:9e:2f:ca:c3:d7:72:ee:48:6f:67:cd:1e:8a:35:17:a5:
ea:f8:a2:0e:1c:b3:3c:c4:17:c6:6e:d9:43:30:99:c1:a0:b5:
44:d3:dd:d0:0e:7b:01:be:93:9d:23:2c:5a:c3:0a:e2:78:5b:
3a:c9:2f:a3:35:21:3a:92:2e:ad:8f:97:84:74:22:0e:c8:7c:
f5:d2:82:c9:a0:d4:fd:e6:06:be:8e:70:bc:80:2b:ff:42:0e:
14:39:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:29 2026 by rpki-client