Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b37de359-9d0b-4ee3-a610-21eaea66f42e.roa
File: b37de359-9d0b-4ee3-a610-21eaea66f42e.roa (raw, json)
Hash identifier: GcHlvZFs4NI6wDLiX8Ofnr6z97+tOYo3XBABGIZ9BR0=
Subject key identifier: 79:2C:A8:A9:09:A4:98:B7:D8:9B:52:4B:3F:E6:C7:D1:22:FC:85:D7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 600DE0979C2AF26F118EB679836C6A566B3DF609
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b37de359-9d0b-4ee3-a610-21eaea66f42e.roa
Signing time: Wed 12 Aug 2026 21:05:34 +0000
ROA not before: Wed 12 Aug 2026 21:05:34 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0d:e0:97:9c:2a:f2:6f:11:8e:b6:79:83:6c:6a:56:6b:3d:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:34 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=60c326e49d4f9d2ad1ccb151b259ff85fef1672ee4bb50313aaabcbc2ecc481e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:57:c0:39:8f:e2:c8:2d:9d:e9:63:6e:54:
d1:7c:62:69:d7:20:c7:df:64:04:02:29:53:6f:1a:
a0:f0:f7:a6:75:e1:52:9c:12:d3:47:49:d0:45:27:
19:73:90:20:76:3c:27:23:72:7b:82:c8:1f:03:0e:
a9:16:0f:55:3f:04:bc:13:56:41:61:1f:b3:af:78:
a8:c3:0b:fc:ea:21:01:66:05:aa:e1:b2:23:de:f0:
aa:dd:11:8a:67:d0:e5:f3:db:fe:bf:a4:0f:6b:0b:
ff:98:bd:60:01:1e:45:92:63:91:d4:db:63:8c:0b:
5c:d0:b5:06:b0:ad:2b:e3:9c:33:a6:ee:9e:d1:29:
3f:79:67:00:ac:76:f7:fa:36:a9:ac:1d:9c:f3:3f:
97:b5:bc:f7:eb:a9:f3:3f:15:a5:e9:23:26:f5:df:
65:8d:7b:04:e0:b7:67:e7:68:b8:c5:cf:67:1f:d5:
43:fe:fc:6a:e3:a4:b3:df:8c:d6:69:9e:57:49:1f:
ef:db:70:ce:62:ed:8f:a1:a2:25:65:da:e0:ff:6d:
df:2d:ea:f3:2b:c3:76:f0:78:f4:9f:37:c3:70:d7:
14:28:13:a1:e4:33:c2:40:95:75:00:63:60:eb:14:
04:4e:4d:5e:6d:03:9f:32:3a:29:b1:20:0b:57:eb:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:A8:A9:09:A4:98:B7:D8:9B:52:4B:3F:E6:C7:D1:22:FC:85:D7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b37de359-9d0b-4ee3-a610-21eaea66f42e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6800::/48
Signature Algorithm: sha256WithRSAEncryption
7f:8f:77:43:e5:1f:c6:f0:2a:46:3d:19:ab:2a:79:bf:db:92:
7c:18:b5:09:33:6c:88:c7:44:9c:25:44:2d:df:64:be:4b:30:
0a:50:c3:42:df:02:4a:e8:c9:48:0f:d2:70:eb:a8:82:07:81:
80:f9:49:fd:d2:bf:12:80:ef:37:b7:03:f3:99:e1:40:71:2b:
c2:85:7f:3e:e8:45:e9:40:a0:28:cb:ff:f4:39:de:7a:fd:5c:
b9:3c:e6:db:53:85:9d:ad:a5:da:82:d3:a2:0e:43:37:92:eb:
c3:73:4e:b6:42:d7:5f:07:d2:5d:c1:3b:8a:0f:3d:de:5e:b4:
a2:d9:71:6e:af:55:26:b3:38:48:e7:92:0d:98:ee:b3:a3:77:
e6:4f:79:db:2f:51:b1:46:1d:df:13:28:2a:62:78:70:b0:0f:
9d:6f:f6:b0:e6:a1:2d:a5:98:bc:27:dd:5f:74:bc:a2:78:8b:
a7:0d:a4:38:4d:12:f4:ef:3d:cb:17:8e:91:7b:d2:15:58:33:
7b:c9:80:9e:a3:a5:0f:6f:0e:eb:60:bc:ba:0e:13:4f:c2:17:
30:f1:d0:ca:b9:ab:16:5d:91:97:4b:42:37:10:64:33:79:a3:
ba:17:6d:f1:25:79:e9:c3:c3:ab:80:52:b0:1e:b6:a3:c6:d8:
59:6c:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:02 2026 by rpki-client