Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a0285121-a068-4bba-9eaa-0bf4b963158a.roa
File: a0285121-a068-4bba-9eaa-0bf4b963158a.roa (raw, json)
Hash identifier: EjicFbHgilNcfrm0z7VGhNWIosVusgEx0cXsfQ18Bc8=
Subject key identifier: 97:D2:07:1A:45:BA:60:A0:B7:FA:64:74:26:B5:45:F1:A4:8E:11:D7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 30F0EFC8E1718C50FC750729B7ACE4C8D81B5253
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a0285121-a068-4bba-9eaa-0bf4b963158a.roa
Signing time: Thu 30 Jul 2026 01:30:15 +0000
ROA not before: Thu 30 Jul 2026 01:30:15 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f0:ef:c8:e1:71:8c:50:fc:75:07:29:b7:ac:e4:c8:d8:1b:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:15 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=49d996312c9592550994314216da44eeb581d84ccc1870a2a92083b6e7186c45, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:96:34:e7:97:80:97:1a:5f:03:10:de:ce:
33:a4:c8:dd:63:3f:4f:ad:34:24:06:5a:c8:90:ec:
c7:19:94:35:4b:27:02:ce:6c:df:89:41:b4:72:e3:
19:ab:c7:d8:43:bc:18:bd:1a:83:ec:f8:46:e8:96:
20:0a:22:91:97:5c:57:05:f6:0d:7e:6d:41:bd:5a:
80:8f:ba:3b:59:c6:e3:8b:8c:ee:a2:23:15:d2:fd:
34:7f:0a:16:5d:8c:31:48:5b:d5:13:4a:53:8b:53:
f2:e6:c4:30:42:e3:9e:2f:e2:18:24:38:2c:68:95:
49:d1:d4:1a:f5:0e:51:8e:30:13:31:24:f4:17:bd:
e9:c8:ed:fe:a2:b2:2e:35:d2:80:b9:85:4c:30:b2:
a7:26:6c:0a:2e:bd:0b:07:ce:64:36:5a:30:92:6c:
43:09:8f:89:28:72:66:0f:62:83:82:a5:50:0b:66:
71:d1:1e:86:62:1a:d8:ce:6c:4b:26:24:a7:c5:3f:
27:5f:63:a0:76:12:e8:04:41:d8:fe:f5:be:ff:cc:
1a:df:12:6b:08:7e:fb:47:85:7c:23:bd:63:96:44:
cb:4d:0e:c2:cd:92:a3:c3:b4:e2:5b:e9:e8:6f:21:
2e:36:74:65:3d:78:53:12:6a:20:eb:a8:fd:fd:cb:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:07:1A:45:BA:60:A0:B7:FA:64:74:26:B5:45:F1:A4:8E:11:D7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a0285121-a068-4bba-9eaa-0bf4b963158a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:100::/44
Signature Algorithm: sha256WithRSAEncryption
74:ff:26:1d:54:3b:09:0c:76:3c:5c:6f:ec:71:95:65:b9:f2:
ef:08:22:55:3e:e2:dc:ac:a8:fb:15:d7:86:4d:30:d0:a4:0e:
39:c4:5c:6e:a0:1b:88:1a:2a:99:65:d8:ed:ef:52:7c:0e:d3:
1e:e5:76:43:08:ab:7b:30:d6:4c:d8:2a:69:17:07:e2:3a:83:
65:4e:35:07:43:aa:46:8f:f7:3a:5c:ea:1c:d1:95:b4:06:08:
91:a6:4c:fd:24:49:08:b9:ef:0b:36:12:55:6c:57:fb:04:8e:
77:69:cb:87:fa:b6:b7:d3:eb:a6:83:c8:b4:cc:43:75:de:d2:
89:28:40:01:9d:87:f1:1c:44:00:8b:19:de:d1:87:87:b2:9e:
65:0b:ea:01:fe:cd:ce:51:89:9e:84:fe:38:52:d4:26:a4:f0:
02:f2:db:01:d1:14:21:ff:e4:8f:62:bc:75:42:6b:9b:1d:1f:
a3:d4:01:91:ad:a0:10:8b:6e:96:74:1b:19:dd:6d:9d:c2:3b:
9c:68:41:06:e5:99:6f:1b:dd:94:1a:7a:ef:40:5c:9a:1e:56:
ab:81:90:1e:75:40:d2:52:77:d5:51:24:b7:93:c3:9c:53:88:
c1:16:f7:df:0b:23:b4:4e:22:a8:1f:c0:ad:31:4f:7f:d3:31:
10:1c:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:25 2026 by rpki-client