Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ad6ff079-e148-46b3-a9b1-17f29623af38.roa
File: ad6ff079-e148-46b3-a9b1-17f29623af38.roa (raw, json)
Hash identifier: 6pVyHiHrj+WhuCBJqeFRRqMqqq0CZZ7NSyv7S4SlnWI=
Subject key identifier: ED:95:32:74:34:04:42:27:89:E9:13:DB:A6:78:CC:77:66:B9:F7:11
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7BCE25EDD7A02138D317E1B09A3A1CC9D334D691
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ad6ff079-e148-46b3-a9b1-17f29623af38.roa
Signing time: Wed 12 Aug 2026 21:06:53 +0000
ROA not before: Wed 12 Aug 2026 21:06:53 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ce:25:ed:d7:a0:21:38:d3:17:e1:b0:9a:3a:1c:c9:d3:34:d6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:53 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=620f6a1663c93e98c163d5214c25eff22201e00e3683bae92389894814691b39, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:8c:1c:a9:34:a7:09:74:b6:3c:4c:78:38:
0f:44:a7:a6:52:16:de:8b:4b:7b:7a:d7:69:21:94:
9d:7a:9a:a8:13:a1:9c:23:6d:0f:59:63:90:37:87:
3e:89:f2:75:5b:2d:66:75:c3:27:b5:28:de:dc:14:
d0:cd:4d:00:a8:46:dd:78:e8:f6:ce:89:88:19:dd:
f8:86:82:71:8e:b1:b3:41:14:f0:0e:de:ad:87:c7:
70:e7:ee:a8:ad:fc:f7:e6:a1:65:01:d9:86:fd:4d:
af:b2:37:8a:1b:42:b8:fb:2a:00:7a:1e:d6:9d:b7:
69:c9:96:08:3e:b6:e0:82:8e:bb:9f:8f:35:bc:7c:
42:3c:b5:10:59:2f:e0:d1:6b:9b:e5:87:f0:eb:8d:
4a:1b:ba:e4:0f:a7:c6:b3:47:a8:14:07:aa:b0:2e:
b3:24:e1:a6:b5:1c:fe:a7:6f:a9:bf:31:23:ab:61:
55:ef:bc:d2:41:73:f9:0a:39:5c:f2:0d:96:91:83:
bd:16:ee:87:13:b4:56:48:df:25:40:52:e3:1a:df:
3a:41:93:3a:b7:a3:8b:8a:22:ee:16:81:ea:27:b1:
f7:de:7c:0e:ea:08:1c:6e:01:47:b5:12:00:11:27:
77:ff:9a:63:20:e6:f6:85:f5:8c:42:0b:c8:98:d1:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:32:74:34:04:42:27:89:E9:13:DB:A6:78:CC:77:66:B9:F7:11
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ad6ff079-e148-46b3-a9b1-17f29623af38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
71:b3:07:4a:86:04:66:db:bd:9d:9e:a1:55:42:c7:ad:59:0e:
1e:09:a7:5a:7b:d1:3d:f4:86:1b:7e:ef:4f:97:a2:63:01:26:
1c:bc:d0:3e:d8:a7:0f:40:6e:b5:90:dd:e3:15:20:16:c0:60:
69:8c:75:47:b6:ce:ac:61:fa:69:c0:ff:f4:5c:32:f2:63:18:
65:2e:0d:2c:09:b6:91:a6:fb:98:e5:61:23:07:d7:c8:0d:5b:
98:f7:22:11:b1:b0:d5:5a:6e:9f:27:ae:8a:50:01:2f:4a:8e:
e8:db:01:d7:69:8d:71:76:10:21:7a:a9:cd:d8:d2:9b:99:74:
90:1a:72:b3:ee:be:d9:ec:b5:75:6b:d6:8e:b1:75:59:f2:d5:
bb:5d:12:1e:da:fe:59:30:eb:f5:ef:a8:66:38:41:ce:55:4c:
e4:b4:1b:1e:e9:a2:18:21:e2:e5:b8:1c:c6:97:44:74:89:dc:
65:bc:48:99:59:a7:26:97:d7:84:82:08:40:d0:47:17:cc:76:
8d:2d:da:9a:d1:6a:2c:72:87:c5:25:3a:90:1c:9d:e2:a2:f2:
ef:cc:0c:28:f8:b4:62:6d:83:b8:21:e1:de:1b:93:74:06:a9:
6b:de:6f:c9:f1:23:20:44:51:2f:49:72:7f:f9:d6:a0:fd:f0:
58:49:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:44 2026 by rpki-client