Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/92d3ddbd-8804-4644-a5a1-8cd197b8ef15.roa
File: 92d3ddbd-8804-4644-a5a1-8cd197b8ef15.roa (raw, json)
Hash identifier: Wi9UXTJZelKehRyJaGlo5kDHNE4Krj+nz1eqTmqW4lU=
Subject key identifier: E1:5C:FD:CD:F4:48:00:41:3D:7E:7A:13:F0:08:2B:AC:F5:A2:10:D2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6BBE7B54C4DED1BC06610421B2816E4B99E56E96
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/92d3ddbd-8804-4644-a5a1-8cd197b8ef15.roa
Signing time: Wed 12 Aug 2026 21:04:22 +0000
ROA not before: Wed 12 Aug 2026 21:04:22 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:be:7b:54:c4:de:d1:bc:06:61:04:21:b2:81:6e:4b:99:e5:6e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:22 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=e4d90a97fc33efebef102172d8bc23411f5c852be320ec7ed159c8b47b7a0151, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:d9:58:70:52:74:6c:a4:e2:b9:b8:f2:33:
66:79:dc:c9:f0:21:6b:78:4f:1e:f5:cb:f8:7f:a9:
28:16:10:af:5e:e2:f2:86:4f:3f:0d:1c:42:bc:24:
da:9f:c1:b2:b9:00:10:dc:ad:a0:8d:92:9c:1f:6d:
c3:84:d6:bf:43:da:1f:56:63:71:0b:0d:fd:9c:e6:
45:31:d6:5b:22:9e:e6:fe:26:64:0a:91:79:a6:02:
0f:1f:24:db:4a:0a:e6:22:f6:85:3a:bc:8f:c6:b3:
28:cd:dc:52:63:1b:3a:a6:7a:53:67:a4:7a:c6:d2:
48:a4:a3:99:86:7e:ee:29:be:81:46:fc:31:f1:c1:
7d:32:a8:3f:09:2a:a3:82:19:f5:0b:24:96:a0:d8:
c6:17:22:32:e7:21:a6:1d:7b:7d:25:51:dc:76:eb:
0d:e9:b6:e3:67:b3:b2:08:2c:3a:53:ef:51:75:84:
f3:1e:5b:44:1f:cc:93:7f:5f:ff:ac:2f:15:b2:3b:
f3:eb:4b:f3:cf:f9:d2:76:be:19:5c:2b:81:4e:5e:
02:1a:8f:2f:09:22:aa:a5:56:4e:6b:15:94:03:b6:
5c:aa:3c:70:f9:bf:3f:89:97:39:cb:e5:9c:91:cf:
f4:35:43:21:5d:83:30:b0:45:e4:2b:2a:8a:ba:d6:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:FD:CD:F4:48:00:41:3D:7E:7A:13:F0:08:2B:AC:F5:A2:10:D2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/92d3ddbd-8804-4644-a5a1-8cd197b8ef15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:e000::/36
Signature Algorithm: sha256WithRSAEncryption
3a:14:04:86:dd:e9:8c:4c:a7:2a:7f:2d:73:32:2d:9b:4b:37:
ac:cd:3d:16:90:4d:76:a5:33:92:f1:f2:1a:cf:9f:f1:45:20:
0f:0c:ec:0d:43:8c:ce:9a:76:7f:39:4a:a6:ea:36:20:9c:d4:
93:20:16:41:da:d4:d6:81:3d:da:b4:a3:a3:c8:a7:ad:ff:6c:
ff:da:d1:e8:4b:1d:b9:3d:25:b9:c3:73:7c:82:5e:d8:a4:25:
8d:a3:57:53:75:75:91:7b:6a:6b:c5:84:36:61:fa:b5:6c:a2:
23:ef:cb:55:57:6b:0f:b9:f5:80:42:e0:d2:43:cd:e9:38:ac:
f8:db:95:b9:5e:a5:e3:fb:cd:e1:7e:b4:dd:c5:ad:60:01:30:
b2:4d:d4:3e:d2:ba:b7:9f:36:23:50:03:6e:e0:00:fd:0c:de:
a5:5f:be:42:d6:db:c6:70:94:47:c9:22:33:fa:1b:dd:8e:18:
1f:53:11:bd:f8:f5:aa:33:07:31:f7:16:49:bd:4c:20:ec:ff:
7e:71:19:0a:2c:9c:98:3e:02:58:6a:9d:d3:b3:94:79:84:7f:
21:2f:02:bb:4e:1d:1e:c1:fa:25:25:5a:7b:fb:2f:d8:ed:8f:
10:bb:ff:7d:f6:e5:9c:fe:16:27:e0:ee:a3:91:46:db:53:e0:
90:93:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:27 2026 by rpki-client