Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a936f77c-971c-455b-97d6-b0b05543c41e.roa
File: a936f77c-971c-455b-97d6-b0b05543c41e.roa (raw, json)
Hash identifier: q5YWthTSGi5kkQqiDx3z7GQskTxTbG1H/Y1f8IjWbM0=
Subject key identifier: 38:AD:10:24:66:CD:CA:0F:47:61:2C:C7:B1:68:CB:A7:97:B1:58:68
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5B1EEAA3451CAC94D8309C95C39812425F0B02D8
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a936f77c-971c-455b-97d6-b0b05543c41e.roa
Signing time: Wed 12 Aug 2026 21:05:44 +0000
ROA not before: Wed 12 Aug 2026 21:05:44 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1e:ea:a3:45:1c:ac:94:d8:30:9c:95:c3:98:12:42:5f:0b:02:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:44 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=25304073f0412a33a49d1f854c0c5c27a4f7bf49fcd8c633df16f08e76d7567e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:24:35:f1:14:fa:00:22:50:48:6d:7a:66:
ce:c9:2c:95:fd:2e:3b:03:28:87:d1:69:4e:78:ae:
3e:b1:0c:99:92:28:5a:d0:db:15:6b:73:3a:0f:57:
75:e4:1d:b6:1c:fe:84:f2:d1:ac:d3:af:c2:77:0f:
fe:20:27:7d:ef:de:b0:18:f4:61:e6:f1:cb:7a:47:
49:11:f9:fa:d5:db:fe:fd:92:43:cc:cf:ff:c6:f7:
81:f8:59:ec:dd:e2:c0:bf:10:b6:a3:76:c6:1f:31:
ec:0e:37:7f:10:73:d3:b9:6e:ae:2e:7a:8b:ac:33:
d3:06:eb:5a:8e:1f:2c:88:be:50:62:88:d3:ba:b6:
19:22:bc:86:fb:59:37:b2:94:b7:80:de:2d:88:7c:
f1:8b:fb:2e:0b:b9:93:32:1f:87:12:4f:ef:c3:d4:
c8:b4:78:2e:60:db:d8:c9:4a:17:e6:44:f0:8e:9a:
e8:05:57:23:75:c5:4b:64:96:fc:25:a2:46:21:9c:
07:3c:77:71:6b:75:c6:12:65:b6:7d:35:4f:02:66:
d6:a0:05:56:15:d3:48:a2:80:77:67:06:f4:2e:94:
2f:6b:1c:b6:92:25:59:2c:f4:b1:7a:a2:2b:92:0a:
b9:f8:6b:bb:bc:f9:56:95:87:12:c8:99:5e:08:57:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:10:24:66:CD:CA:0F:47:61:2C:C7:B1:68:CB:A7:97:B1:58:68
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a936f77c-971c-455b-97d6-b0b05543c41e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/40
Signature Algorithm: sha256WithRSAEncryption
18:6a:d2:df:9d:10:79:d9:3b:c3:30:35:d1:2a:fa:57:ea:94:
1a:d5:2a:04:71:03:c1:7d:ca:0c:09:49:36:36:96:eb:84:99:
58:2a:2c:09:e2:21:46:58:a7:95:73:2b:6e:84:fc:bc:03:9b:
bb:7a:2e:81:f3:2c:98:7c:68:16:fd:0a:93:b5:f7:cb:e0:e7:
09:6b:53:76:5a:72:2f:14:88:4d:2b:42:99:73:72:23:89:54:
86:e6:9b:c5:09:eb:b8:38:1f:65:8d:dc:b4:fe:87:4f:b2:c8:
35:8f:33:69:7a:41:b8:6b:24:96:6c:42:d0:a6:e3:77:6b:35:
9c:20:2a:c8:dd:b4:60:ec:9b:9d:57:6c:c2:6b:64:51:32:e0:
d8:a8:0f:ed:e3:39:f8:e0:ff:a3:c2:f6:26:09:67:1d:bb:68:
12:9a:e2:5c:02:b2:1c:70:19:af:b0:dd:8b:74:ba:a9:19:49:
fa:cf:db:a1:95:ba:30:3c:5b:fd:8a:7b:d9:46:30:b6:4c:49:
2a:5c:32:f9:1d:d0:e3:9d:93:3d:42:ae:27:61:bc:a3:ab:70:
41:c3:43:e7:72:04:14:6a:e9:77:cd:cf:42:12:34:16:e4:03:
b7:9f:b3:2d:11:c0:7e:e3:69:7f:22:34:17:20:7e:a8:19:71:
1c:c1:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:45 2026 by rpki-client