Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a9974ff0-62d1-4203-bf68-04eb8602d197.roa
File: a9974ff0-62d1-4203-bf68-04eb8602d197.roa (raw, json)
Hash identifier: 4C+Sjv2nLE9bfwlaESit51HqH3SAZniPGIwHs5s1/yo=
Subject key identifier: 0D:65:9F:CF:0A:45:8C:61:82:49:B7:88:6B:09:71:2B:80:EF:68:4B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 56A1B2C92A87B34093E6A3A9DBC93B588EC8C721
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a9974ff0-62d1-4203-bf68-04eb8602d197.roa
Signing time: Thu 30 Jul 2026 01:30:55 +0000
ROA not before: Thu 30 Jul 2026 01:30:55 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a1:b2:c9:2a:87:b3:40:93:e6:a3:a9:db:c9:3b:58:8e:c8:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:55 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=b46dae85d8c05b9cb38599648d276356bfdc1251d00d5eaad1c6b4182c82c64a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:0b:b9:84:40:55:d2:c3:b0:15:ce:de:e3:
c1:a2:70:0e:6c:8e:c7:15:60:4e:3e:5d:3f:27:68:
c9:5e:0b:3e:1c:8d:e7:d1:bd:51:f0:f5:48:31:db:
b1:19:ae:ed:c2:bc:85:97:3c:4c:26:2e:7f:7e:0a:
44:70:87:ee:64:38:f6:02:86:59:7f:29:ae:4b:d7:
7e:71:1a:94:a1:2b:54:ec:13:80:39:f8:90:d8:30:
a7:5f:4f:eb:69:bb:4f:6c:0b:85:e3:bf:b9:28:2a:
d3:86:2f:4c:6d:41:a9:ee:ac:6c:01:4b:0b:91:fc:
35:4a:b4:78:77:ef:91:48:7c:70:a9:dc:14:3f:b5:
cc:9a:5e:9d:f8:5e:6e:de:32:74:45:7b:2e:6a:10:
1e:f2:ae:3a:7e:8c:65:28:89:83:51:eb:c9:5d:0c:
5f:5f:3f:9c:01:55:f2:96:e6:91:9a:2c:9d:8a:43:
86:61:4c:3c:8f:8f:e0:4c:ec:79:25:18:36:3b:e9:
3b:be:ff:2b:65:fd:41:93:ef:23:f7:c9:64:0d:ad:
01:16:02:db:a3:8e:83:11:63:63:99:b3:17:bb:fb:
f2:61:30:fa:31:8c:5b:13:7e:84:41:1c:ad:81:a9:
f4:bc:b7:29:7a:c2:84:00:25:45:5d:f5:bb:6d:9f:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:9F:CF:0A:45:8C:61:82:49:B7:88:6B:09:71:2B:80:EF:68:4B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a9974ff0-62d1-4203-bf68-04eb8602d197.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7000::/36
Signature Algorithm: sha256WithRSAEncryption
57:53:e2:02:f2:0c:80:76:95:2f:90:a6:da:60:c3:36:18:80:
53:ba:7f:d7:a7:1c:fe:7b:7e:43:18:99:c4:b8:cc:e4:aa:eb:
d7:3f:9c:04:91:d8:98:ab:50:1e:38:33:36:0a:c7:eb:72:51:
c3:c5:fe:18:ec:0b:5d:39:3a:cb:de:2d:f1:86:b6:0a:2c:41:
40:15:51:72:0a:39:25:f6:82:3e:85:f0:b9:08:1a:cd:02:d5:
14:12:ae:41:cb:b3:fd:0d:70:4e:1b:3a:e5:dc:bb:eb:cd:0c:
ca:ed:10:ff:90:fc:71:ed:eb:1f:fb:48:34:1e:c6:f6:33:4d:
66:dc:5a:74:88:26:6b:69:72:f4:77:cc:85:05:b4:ec:ae:6e:
3c:f1:46:35:2e:17:4e:65:81:62:34:2c:33:d2:58:61:2d:36:
1b:6d:0a:cf:a2:b2:df:21:51:8a:51:f2:d8:6a:7d:41:3d:05:
c3:d8:55:0d:be:d7:04:62:80:af:cf:ac:7c:2a:33:53:8f:23:
b9:50:d1:b3:a8:ae:95:e7:76:0e:aa:20:54:93:b2:a2:e7:4f:
38:36:85:10:18:19:ca:8b:1a:bb:ee:1c:d2:39:c2:67:b2:4a:
df:bb:a5:b9:59:5a:9c:f0:5c:63:99:e7:6e:15:65:9c:1d:79:
bd:b3:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:17 2026 by rpki-client