Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a632cec9-97f5-4626-be20-d8726b08840c.roa
File: a632cec9-97f5-4626-be20-d8726b08840c.roa (raw, json)
Hash identifier: s4+1tx9Ase3VdL460HHj6Rh+hpAC4778SGRGkN5pkKo=
Subject key identifier: 42:86:5A:EE:A4:95:77:ED:D4:54:94:6D:2B:EF:15:81:17:E4:47:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7E4424C790343B1F8250742D4560242118063968
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a632cec9-97f5-4626-be20-d8726b08840c.roa
Signing time: Wed 12 Aug 2026 21:04:28 +0000
ROA not before: Wed 12 Aug 2026 21:04:28 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:44:24:c7:90:34:3b:1f:82:50:74:2d:45:60:24:21:18:06:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:28 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7fcfab3616087019866695fe6e95f563351fd2078da4a04d4ebd27d8d750b330, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:cd:72:c9:bb:b3:7f:f9:0c:a7:2a:40:d8:
d1:a1:ae:5e:a7:d6:38:86:e5:6c:a2:f5:30:6c:dc:
21:1e:a5:47:7f:60:75:80:29:b7:12:0c:e1:ba:0d:
a5:dd:54:1b:35:12:65:a4:43:23:e6:99:05:61:87:
15:4f:a9:71:a4:30:ee:ba:48:e7:30:d8:e2:ed:eb:
fb:47:23:85:a6:c9:f7:af:ff:f5:35:19:0c:cb:6f:
61:44:65:56:8d:64:b1:fe:f7:8e:8a:51:a9:57:f3:
51:a3:6d:a0:b7:a8:9c:90:e0:fc:4e:0d:f4:1d:87:
54:ef:f6:dc:81:15:64:db:e9:0d:61:7c:18:f1:75:
b0:a4:d6:d4:4e:91:f5:fc:b4:94:20:c1:8b:03:86:
54:ce:e7:f2:9c:6b:b2:ab:75:37:2e:60:7e:d4:44:
89:6a:ef:b9:f9:d5:64:05:6f:1f:47:fa:31:77:17:
e4:db:15:7c:11:c1:88:21:e6:a7:b1:32:18:77:c2:
f5:5e:46:69:78:58:6a:15:75:4c:20:6f:c4:e9:36:
71:bc:6b:07:9f:3e:20:19:23:5a:42:2d:69:6c:e8:
54:87:4f:d6:18:91:b1:ff:c0:6b:4d:59:6d:0a:7b:
f9:0c:f8:07:b3:8b:df:17:f2:06:f3:f3:ed:c4:dc:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:5A:EE:A4:95:77:ED:D4:54:94:6D:2B:EF:15:81:17:E4:47:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a632cec9-97f5-4626-be20-d8726b08840c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1080::/48
Signature Algorithm: sha256WithRSAEncryption
6f:35:ab:3e:93:50:b8:20:b5:dc:3b:43:20:96:75:e7:d9:b9:
f4:2f:9b:ef:a1:a6:6b:1a:c8:3e:94:c2:bf:8e:aa:3b:e9:6d:
ed:c1:6c:b1:e3:47:5e:be:ac:92:06:ed:be:01:ea:0a:89:4d:
cc:ca:61:37:27:ad:88:99:83:65:42:1c:d5:85:9a:5b:d7:ba:
29:4b:00:ff:25:bd:4a:fc:52:a3:0f:ea:f7:a3:9c:eb:43:d3:
13:6c:1c:ff:c5:be:76:91:9c:e4:4d:9b:7c:b5:fa:87:42:8e:
bc:cd:de:61:1b:d1:43:7c:12:cc:36:7b:5f:5c:3d:bc:d4:61:
93:44:1f:6f:6a:4d:92:c5:2c:94:d6:cd:17:a0:f7:e5:2c:36:
bb:f8:c0:9c:24:2a:e3:4f:9f:89:9a:e0:d7:56:82:81:81:59:
b9:dd:6c:82:16:e6:33:a5:56:f6:8d:63:e0:20:cf:69:c6:e2:
1a:67:f6:28:f2:6a:75:4f:1a:4d:3c:af:28:b0:c7:72:ce:71:
d1:0f:9b:6c:f8:01:f7:9f:ad:ae:4b:42:f6:e2:0d:05:da:39:
f3:6c:82:ab:40:66:d6:90:33:68:2e:70:37:e3:00:9b:b7:93:
c9:73:6b:df:bf:7d:fd:e3:67:c3:68:60:a9:a4:c7:ee:22:2d:
fa:b3:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:29 2026 by rpki-client