Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
File: 932067a7-3440-4f62-98a4-f23b9058ac95.roa (raw, json)
Hash identifier: 0e8YMBvy9RGKxi/iVOzkJFr51aNzScuhm+2l14IEgug=
Subject key identifier: EC:AA:D5:21:B1:01:A9:DF:3C:64:CB:FF:40:F7:39:F7:65:AE:BE:40
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0546F639BE9066F2692D1E57FED9C11CF13D3A6B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
Signing time: Thu 30 Jul 2026 01:20:26 +0000
ROA not before: Thu 30 Jul 2026 01:20:26 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:46:f6:39:be:90:66:f2:69:2d:1e:57:fe:d9:c1:1c:f1:3d:3a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:26 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=56ba2d345e8e3b42b449e148cccbb67b422fce6c701c2c8b06a5a4953c266304, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:68:57:41:c5:37:33:1a:40:ec:d8:d0:75:
f1:7f:96:c0:db:1a:ba:fd:61:79:d8:29:0d:0e:33:
4f:c6:50:1c:9c:b3:ec:0d:e5:a1:15:e1:72:57:be:
03:86:fc:29:c0:b8:46:29:a9:40:76:7b:99:ec:24:
c0:f9:ce:6a:10:e2:cb:28:cf:15:51:42:05:e3:10:
ec:da:25:50:b9:39:34:03:0e:d6:fb:05:69:61:a9:
f8:80:8d:5e:8e:39:45:c6:59:65:97:fe:22:ad:be:
7b:40:90:b5:22:1c:5c:c7:9c:82:20:b3:b8:2a:88:
4f:ba:59:d0:5a:1a:00:b0:15:b4:53:a2:1e:1f:99:
a1:b5:7d:7b:10:4e:63:d8:73:1c:76:ba:bc:5f:42:
c0:a2:8a:df:cd:83:3a:89:36:98:d6:e5:55:93:b7:
d8:8a:f0:79:e1:32:1f:cd:b9:d7:6d:2f:da:0b:99:
b0:c5:5d:30:21:05:a7:c6:3c:f8:65:12:99:46:5c:
e2:a9:b7:35:47:f4:7b:ff:c6:f1:12:34:48:b2:b8:
55:df:29:cc:c0:a9:9a:eb:a0:b9:47:a7:97:ad:7a:
3d:44:34:44:b9:d4:13:ac:7d:a8:20:f7:80:f8:91:
6a:ae:25:37:7d:8d:ad:0f:d4:4a:95:65:0b:ab:be:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:D5:21:B1:01:A9:DF:3C:64:CB:FF:40:F7:39:F7:65:AE:BE:40
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/932067a7-3440-4f62-98a4-f23b9058ac95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6::/40
Signature Algorithm: sha256WithRSAEncryption
b7:3c:87:2e:e1:70:74:25:b6:5e:06:42:2c:5b:8b:e9:ee:c1:
68:38:52:00:b4:3f:84:1c:20:a5:bd:f1:31:22:61:92:1b:8a:
fb:9e:17:7e:d4:c9:3b:07:de:cb:94:e4:5a:16:01:98:13:f4:
bf:74:32:ee:94:1e:91:3e:c2:9e:23:39:b2:e0:8a:c0:9c:31:
28:69:0a:bd:15:f1:d0:9e:80:54:8c:d9:7a:50:8e:95:d8:20:
b1:c8:87:3d:2e:6e:72:c7:83:66:68:2e:33:bd:e8:4d:63:8c:
5f:dd:bb:5f:74:4b:3e:5a:0c:8e:ff:17:00:75:35:d1:bb:17:
5d:9d:fd:9e:06:48:50:5a:cf:93:be:f5:27:d7:c6:ce:57:cb:
c5:f5:93:10:d3:ca:54:a5:ab:24:2c:69:43:c0:29:73:3e:7c:
88:f9:ed:64:77:c0:24:c1:31:d3:7d:33:7c:14:02:7f:e4:fc:
59:d6:3d:24:89:cd:a7:d0:02:45:09:34:71:c2:d6:cf:6b:af:
32:39:05:1e:0f:9c:07:f0:34:1a:22:c5:33:d6:9f:94:b0:51:
a4:94:f1:26:69:53:5a:6b:a7:f9:d8:fc:47:75:2b:54:45:7a:
18:4a:4d:7a:41:51:e7:71:cd:a6:41:18:95:8c:db:8f:17:b6:
0b:1f:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:17:38 2026 by rpki-client