Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae013680-e4f4-449c-9a2c-715867c85a51.roa
File: ae013680-e4f4-449c-9a2c-715867c85a51.roa (raw, json)
Hash identifier: xHPbczlsXgB91JpVWHEUGYOKkVt52YbjRhO6CYxY1QI=
Subject key identifier: 2C:D4:13:F1:CA:42:02:2C:D7:F7:88:38:C3:2C:F4:8F:14:AB:D7:4B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 140792D422E7755C217ABB3761725D88E0BEE294
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae013680-e4f4-449c-9a2c-715867c85a51.roa
Signing time: Thu 30 Jul 2026 01:30:17 +0000
ROA not before: Thu 30 Jul 2026 01:30:17 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:07:92:d4:22:e7:75:5c:21:7a:bb:37:61:72:5d:88:e0:be:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:17 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=db3005250b2b6ee041b7a1a7794128b2de4a866ab16d0ff427d4c88f80454a0f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:fd:89:60:e8:13:d1:23:77:f8:bc:7a:4b:
df:a3:ab:f0:80:2d:ab:21:c3:74:6e:37:17:20:65:
6a:12:a7:d8:b8:77:aa:e7:9f:3a:9b:d4:de:ef:5c:
46:65:90:b9:7a:e6:1c:cd:ec:3d:28:59:d3:ae:e4:
c6:fe:b0:a6:ed:23:b9:28:cb:29:a6:a6:e8:f6:e0:
bf:78:80:78:76:c3:7b:99:9e:e6:56:f0:31:38:e7:
9c:8e:f6:e1:1f:3e:2c:40:e9:f5:83:70:ea:f5:2b:
9d:98:f7:62:08:de:cf:89:4f:84:b1:7d:99:49:bf:
a1:38:f2:57:76:3e:1a:67:46:96:ca:e2:05:41:c5:
81:e2:f7:33:ca:eb:be:df:98:4e:7b:4c:ef:43:08:
fe:6b:bd:99:13:2d:17:02:69:5b:bb:74:ab:30:e6:
25:5f:e7:e2:22:85:c9:dc:87:e8:81:1f:36:fd:84:
ec:07:49:a4:04:59:58:d3:25:53:cf:b9:ad:3b:08:
4f:a6:3e:ec:70:4d:43:ba:f7:f3:9e:e4:13:0d:79:
df:07:cd:81:b4:60:2b:4a:d0:56:98:59:fc:75:9a:
14:7c:6d:d4:ca:93:46:79:82:24:97:0e:29:63:7d:
a1:26:f0:4b:5e:bd:01:15:ac:1b:92:78:d6:98:29:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:13:F1:CA:42:02:2C:D7:F7:88:38:C3:2C:F4:8F:14:AB:D7:4B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae013680-e4f4-449c-9a2c-715867c85a51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:8::/45
Signature Algorithm: sha256WithRSAEncryption
5f:ed:3b:29:b5:86:d0:53:3a:95:ec:46:d3:b9:7a:70:77:86:
10:53:32:73:f9:37:73:d1:02:32:23:8d:6f:98:2e:e8:b2:0c:
51:76:a7:53:b1:1d:bc:cd:c1:e6:60:82:0c:ae:42:d4:e3:f9:
0d:81:04:5b:39:28:ab:da:3e:d5:1e:c2:ba:08:e5:52:35:db:
dd:e7:34:72:95:1f:20:b6:89:6b:46:6f:59:45:81:a6:c8:b4:
00:3b:f6:bf:db:c4:3c:60:11:a9:9b:6b:ff:8b:1c:b2:d0:0f:
8d:08:5c:6d:c7:68:a5:d8:ce:09:01:05:80:b1:b4:fa:1c:7e:
7b:cc:52:3a:54:13:ee:17:3c:b6:62:e1:56:c3:d5:92:40:4d:
e7:26:38:4d:64:c4:39:bd:72:fb:72:11:c1:20:05:09:17:6f:
f3:68:79:94:88:b3:8a:28:82:2c:3d:bc:fa:5f:2d:9a:fb:63:
16:0e:36:f6:e0:b4:32:31:58:49:43:af:b4:61:4f:eb:e7:cd:
62:de:a8:65:41:c7:98:a6:d1:a3:7f:b6:49:08:5c:a8:48:c0:
85:4b:e2:53:ea:65:80:39:69:97:5e:1a:6a:05:1c:5a:cb:bb:
77:9d:14:21:43:1e:52:f6:1f:88:bf:50:ed:0b:02:5c:9f:11:
7d:18:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:30 2026 by rpki-client