Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/92b566f4-9c90-4070-b5bd-f89c7da23c8a.roa
File: 92b566f4-9c90-4070-b5bd-f89c7da23c8a.roa (raw, json)
Hash identifier: U03tlWsBcsOnqm/O+LXvB2OiNjXBwlVWHHfp9HzLHUw=
Subject key identifier: 13:AE:39:93:C0:96:7E:0B:AC:C4:DC:6D:04:76:20:C1:EA:8D:F2:5B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4FE7B32A5275BFF2CB1F986928D38666AE935C11
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/92b566f4-9c90-4070-b5bd-f89c7da23c8a.roa
Signing time: Thu 30 Jul 2026 01:30:13 +0000
ROA not before: Thu 30 Jul 2026 01:30:13 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e7:b3:2a:52:75:bf:f2:cb:1f:98:69:28:d3:86:66:ae:93:5c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:13 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5d62fd3e6292a21b71b835fd3506018ddbc6ae6fa8984755e65d4fcddefd2efc, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:c7:83:e1:5d:f0:be:2e:48:e3:4e:62:31:
03:70:22:de:d5:71:e7:0b:1e:59:0e:26:3b:42:8f:
cb:d9:fa:b4:b9:e7:2b:8b:61:98:30:4e:90:4b:91:
04:b5:ea:5d:08:0a:c2:6d:18:b8:d8:f6:f5:68:8a:
48:bb:a2:2f:44:dd:d9:81:09:a4:99:03:24:2a:12:
c4:35:12:55:e7:3b:c8:d8:67:67:02:77:cd:6c:41:
13:c3:e4:c9:5d:00:0d:85:61:d0:ed:fe:7c:ff:4b:
27:1f:ba:1e:a6:9c:58:00:a9:0e:34:a5:1c:6c:36:
7d:1b:f9:32:a4:ad:f6:15:75:00:c8:58:59:47:8b:
ec:c5:56:09:1d:b4:64:6b:58:5c:a7:a9:6b:72:9f:
48:33:de:5e:02:60:0a:3a:21:e1:4d:9e:21:aa:bb:
65:80:18:05:50:b6:92:7b:ab:6a:f5:8a:41:3b:e9:
dd:be:f1:ba:bf:a9:a2:40:de:e5:07:22:98:5d:56:
e9:63:fb:15:cc:b0:52:1a:72:05:c7:ab:a9:23:8d:
d5:94:a3:32:78:2e:32:a8:60:0c:60:1d:3f:19:e6:
f6:f8:e7:c1:93:87:f0:94:c2:6d:5a:a4:29:cd:5b:
89:4a:f5:e1:2f:69:13:8b:44:ea:2f:df:0f:76:34:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AE:39:93:C0:96:7E:0B:AC:C4:DC:6D:04:76:20:C1:EA:8D:F2:5B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/92b566f4-9c90-4070-b5bd-f89c7da23c8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:4000::/36
Signature Algorithm: sha256WithRSAEncryption
2f:dd:c1:41:df:7c:60:2b:2a:90:44:ef:5b:ee:2c:12:9a:e5:
23:e6:da:c5:44:de:9b:a6:19:e1:46:ab:83:75:1f:f1:83:c1:
87:7a:0d:cb:84:0b:e1:71:2c:f3:05:7b:71:4c:08:e3:7e:04:
38:6b:79:7c:8a:ea:4f:7f:65:d5:1b:6d:0a:5d:73:67:b3:fc:
83:ed:b4:50:5c:ae:7d:2f:a6:69:4f:d3:14:da:30:8e:45:54:
d5:72:08:3c:44:2f:22:28:0a:75:33:87:69:b8:30:bb:d1:e3:
89:98:83:4f:d4:5e:59:df:98:2e:c5:3a:da:6b:02:e6:c7:70:
66:bb:2f:80:08:19:0f:73:8e:34:2a:04:4a:83:4a:c0:73:6e:
b1:9d:a7:a8:a7:8f:ad:51:40:b6:52:55:58:ef:38:7a:fb:cc:
0f:e4:32:4c:de:c0:86:7c:10:b3:30:aa:21:35:97:c9:ab:0d:
29:40:64:ac:a3:f0:b7:53:c7:9f:4b:1b:2b:bc:eb:94:f5:1b:
f8:df:a1:c4:cb:c6:83:18:0b:6f:76:19:c6:bf:4a:cb:7a:93:
67:3b:15:f0:89:d0:12:28:12:e1:1d:02:49:89:5a:0c:7e:6d:
b9:0a:05:c0:88:2e:e8:c4:42:6d:e3:4d:f7:8a:4e:fa:3a:22:
a9:1b:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:42 2026 by rpki-client