Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aab50dd8-a220-4509-8901-cb5ca23cff5f.roa
File: aab50dd8-a220-4509-8901-cb5ca23cff5f.roa (raw, json)
Hash identifier: IokUwDnDzoDOJKwzMQiihLU7Uyvtn5UTLnfBqQVnlk8=
Subject key identifier: 77:82:33:A6:EB:51:85:D1:0D:EE:18:DE:CC:25:AB:ED:5B:8D:9D:4B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 272BAA0A35B3C1126D4E125A3E264C7A8E18E6C9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aab50dd8-a220-4509-8901-cb5ca23cff5f.roa
Signing time: Thu 30 Jul 2026 01:30:59 +0000
ROA not before: Thu 30 Jul 2026 01:30:59 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:c::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2b:aa:0a:35:b3:c1:12:6d:4e:12:5a:3e:26:4c:7a:8e:18:e6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:59 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=1a8b4092afe66fc81643c91e4e3d4d48f8d3d58956b40ac543eb38fefb7305b9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:ec:81:29:92:cb:f4:b8:97:f6:b4:ee:9f:
a9:2b:f8:72:db:b9:f6:b3:9b:aa:ed:3f:ff:b2:00:
a0:87:fa:c4:95:60:8e:6a:ad:dc:cc:35:ee:b5:5c:
ff:c5:ab:ea:74:57:f1:a6:c3:da:13:8e:fe:63:42:
24:19:7e:e2:d2:15:35:91:eb:14:22:b0:d9:03:ea:
1f:b1:84:47:24:cc:a6:03:1c:c9:26:25:9b:91:70:
24:42:26:da:75:48:cf:4f:1b:cd:e8:bf:7b:0b:b6:
a7:01:e6:1d:e2:81:6c:73:16:6d:bd:90:2b:e7:cf:
2a:58:25:83:c1:41:5e:dc:98:4e:72:a9:a5:4e:ae:
6c:50:55:94:a3:4a:2f:76:08:03:48:5d:cf:a5:32:
cf:79:3f:05:b0:de:d7:b7:44:24:c8:12:b0:32:6a:
27:9e:0a:11:1e:cd:3e:69:53:8d:28:78:74:c8:7e:
7c:ff:c5:58:70:2d:f9:49:64:38:2f:58:05:0c:da:
23:2b:f2:ac:64:d3:0d:63:fb:12:ff:e3:af:2b:2b:
37:bf:84:2a:71:dc:d7:5e:a9:12:34:a7:02:b3:03:
9f:3e:3a:f5:4b:c0:c0:4f:6e:ee:6c:ab:dc:09:6e:
a3:77:bc:76:0d:88:b7:3c:c6:c7:97:1a:8f:0f:88:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:33:A6:EB:51:85:D1:0D:EE:18:DE:CC:25:AB:ED:5B:8D:9D:4B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aab50dd8-a220-4509-8901-cb5ca23cff5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:c::/47
Signature Algorithm: sha256WithRSAEncryption
0b:70:a4:1a:d4:14:83:47:7f:ac:80:25:28:27:ee:62:15:93:
6d:4f:4b:a0:cc:de:92:0d:10:fc:03:0e:8c:06:a3:f1:f2:e9:
ff:7a:de:f8:19:96:c9:86:c2:73:53:5a:3e:b9:8d:d4:a1:27:
de:ef:03:eb:9c:a3:37:2c:b5:d9:e1:94:20:d4:32:f6:d4:58:
52:0a:de:cb:2e:c1:dc:0e:a4:58:a3:1d:a3:b1:22:0d:6b:ca:
35:df:ee:b6:7d:0d:b4:ef:7b:0f:7f:2f:7f:0c:c8:cd:ae:fd:
7f:df:5c:45:ba:f3:aa:d8:f4:f8:c9:da:f8:5e:90:7f:ef:97:
20:16:d9:03:24:9b:15:21:57:5d:c4:5a:35:2f:c1:f5:f3:18:
e6:65:98:12:b0:a5:3f:ed:cd:7e:96:ab:16:93:f9:ad:17:7e:
a8:bd:0e:6c:5e:e6:29:67:2a:08:be:ba:73:90:7d:8c:12:d7:
f9:68:8e:7f:82:dc:29:eb:e8:8f:86:aa:ec:ef:25:70:ec:45:
0f:d8:96:51:86:b0:39:e6:a6:dd:43:97:c7:93:32:7a:13:e3:
33:2c:84:75:41:af:ae:f7:06:22:f5:a9:63:94:3e:98:58:ef:
10:9f:8b:81:61:b6:9d:4d:ff:3f:2d:cd:eb:ab:b1:a6:9b:fe:
20:79:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:40 2026 by rpki-client