Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa
File: b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa (raw, json)
Hash identifier: KGLHolM6tGqLC9Mn1xQJKG7xVxHcsLrqi6nwdnFz40k=
Subject key identifier: C3:5A:7D:BE:DE:72:1E:66:90:4E:D3:F0:3B:1D:D8:AB:BB:93:AB:18
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 10A63066E7B2DD61AAB8BC1626D442B824B2B3AD
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa
Signing time: Thu 30 Jul 2026 01:30:18 +0000
ROA not before: Thu 30 Jul 2026 01:30:18 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a6:30:66:e7:b2:dd:61:aa:b8:bc:16:26:d4:42:b8:24:b2:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:18 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=9e7dc7428b5041954c5a789714205692f20eb5e10ae06dc76feb06a806d204ea, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:39:91:99:3b:9f:96:19:4a:cf:77:94:c7:
92:40:d3:18:e5:4b:a6:27:c8:eb:84:d0:91:74:ba:
0c:d7:3e:01:17:a1:97:ee:39:0c:e8:8e:9d:cd:e3:
f6:6b:e6:2f:af:f7:44:dd:da:1a:ff:fc:62:cc:77:
a3:c9:b6:5d:29:b2:56:91:d3:bf:d4:40:e0:dc:96:
43:64:fb:79:da:39:f2:36:b2:e7:e8:59:10:3c:46:
4d:b0:7f:80:e4:25:9d:49:40:a3:38:94:49:21:9c:
97:fe:97:3e:22:c3:90:68:b6:a3:75:66:dd:3c:46:
af:d4:90:7e:07:26:4f:95:e3:13:17:31:21:bd:9c:
3e:1c:5b:8d:8a:98:4e:de:e5:12:99:86:c9:2f:bd:
13:23:6b:db:26:d8:e4:95:97:5a:07:9f:5c:cb:63:
3d:04:a5:cd:15:6a:7d:31:53:7e:e5:bb:27:1a:8d:
1e:bd:e6:94:55:9d:e2:53:a0:03:19:6b:e7:12:5c:
91:6b:66:b7:97:40:ed:43:e3:68:00:c6:7d:f6:d2:
fc:5e:79:e4:b8:75:c3:a8:82:d3:0e:10:5a:80:78:
e1:04:31:46:47:d4:27:15:81:f4:fd:1e:f7:20:e8:
e0:c7:d1:a5:af:63:d4:78:0c:f1:b9:70:d4:af:17:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:7D:BE:DE:72:1E:66:90:4E:D3:F0:3B:1D:D8:AB:BB:93:AB:18
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
c2:fa:59:7a:52:69:51:37:be:40:8b:a0:a6:61:0e:64:de:23:
84:58:3d:99:64:25:d5:47:be:8d:ea:9f:b8:75:f9:de:b5:59:
7c:59:d7:27:02:33:5e:f2:fa:04:54:0b:3b:9f:e9:e9:72:c2:
8f:cd:ce:c1:98:ca:c4:6f:33:e1:ed:6f:39:2b:e4:73:12:b9:
9d:2b:b0:93:96:c5:ef:e3:41:95:d6:a4:36:3b:b3:03:a0:00:
d5:3b:56:b3:32:e8:7b:a4:b6:c3:c1:5e:6d:05:02:81:a4:2a:
fa:01:65:b1:94:73:a3:88:f4:60:86:65:03:c5:1e:8a:0b:2d:
3b:f3:d4:6e:28:a0:3a:e9:77:66:b8:88:67:c2:f1:ee:1c:9b:
b5:dd:06:c4:b8:e2:c3:11:2e:d8:aa:e1:b4:e0:a9:7a:bf:81:
28:4a:e0:c3:0c:41:d8:05:53:c5:b1:cd:df:1d:fb:05:2a:49:
4b:47:3e:06:91:ec:b4:50:da:05:50:a5:8b:42:87:29:c5:ae:
cb:db:17:9f:3b:c9:26:0d:c2:21:5a:0c:21:31:c1:05:a3:f4:
01:4c:f5:fb:14:0b:89:b0:95:e6:42:37:b1:ee:08:ef:88:59:
73:3d:09:b8:48:8d:6e:67:67:70:6e:4f:bc:ae:16:94:ff:e8:
a6:91:2a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:30 2026 by rpki-client