Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c772bd5a-4f72-4ad4-a5d0-9ed82e5f1e95.roa
File: c772bd5a-4f72-4ad4-a5d0-9ed82e5f1e95.roa (raw, json)
Hash identifier: 8PBEm6WAIiQHi+wwkFENpxpxwroz+zSP1YwkERNhjEw=
Subject key identifier: 2D:44:BF:57:47:D4:7D:BE:4E:0B:26:4D:F8:3C:22:03:1C:54:AB:32
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6B0591D30CFCB8E215B033885733FC442001B203
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c772bd5a-4f72-4ad4-a5d0-9ed82e5f1e95.roa
Signing time: Thu 30 Jul 2026 01:30:35 +0000
ROA not before: Thu 30 Jul 2026 01:30:35 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:a::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:05:91:d3:0c:fc:b8:e2:15:b0:33:88:57:33:fc:44:20:01:b2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:35 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5353307646c4ae65488ede85fa449650fc756313e9dedd592c8d19055ad0e2f2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:be:37:c8:f3:24:98:e6:80:88:b0:8d:7e:
42:43:fd:3f:84:a2:a6:6f:e3:61:bf:de:73:73:72:
e2:b5:d0:bf:ed:ba:05:fa:3d:c7:5c:e7:3e:a7:bd:
58:18:ca:20:71:ed:62:2a:cb:69:6c:96:1b:71:f1:
f2:fc:b8:f4:6d:a3:fa:89:07:20:9c:c4:6b:ab:af:
e1:03:16:f0:73:84:13:4d:63:1c:1f:4b:aa:c0:46:
ee:11:11:b9:fa:4d:75:30:dc:ce:8d:8a:25:34:c3:
4a:65:ab:8b:6b:48:be:20:cd:a2:00:aa:f3:0a:73:
a3:8d:0c:c9:ed:11:38:ea:43:77:46:03:b6:d3:6e:
89:a4:02:c4:5a:78:59:e5:ea:df:21:75:8c:52:13:
d7:5f:1f:30:ed:d7:88:5d:14:d3:f8:3a:b3:fa:5e:
dc:7c:7b:e3:0f:48:37:b0:95:6a:ab:f9:00:9e:ca:
30:56:8e:8d:f0:35:43:7e:d8:40:4f:88:98:55:77:
df:87:93:3a:fc:eb:89:0b:59:f5:13:01:05:49:b2:
36:89:7d:58:45:2b:28:e0:3b:37:6a:89:6e:20:48:
92:5d:c8:04:da:9e:9b:e5:ec:6d:5f:b5:77:47:76:
b2:3f:fb:5f:c2:c4:35:7c:09:9b:07:b1:72:c4:ed:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:BF:57:47:D4:7D:BE:4E:0B:26:4D:F8:3C:22:03:1C:54:AB:32
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c772bd5a-4f72-4ad4-a5d0-9ed82e5f1e95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:a::/47
Signature Algorithm: sha256WithRSAEncryption
b0:c1:3e:5e:bf:26:ed:e0:f9:03:1a:90:72:a7:4e:9a:b6:14:
63:ed:d7:f5:f9:b7:71:56:77:ad:28:29:2e:8a:fb:9d:7b:99:
26:4b:d4:0a:62:83:f1:8d:90:7f:ec:08:a5:ab:ff:d6:9c:d3:
19:d5:91:75:15:2f:4a:57:89:58:1c:20:96:43:7a:6b:61:5b:
46:a3:6f:64:7a:00:0e:05:80:35:4c:65:ed:bf:ba:05:10:04:
92:eb:ae:01:03:e6:e6:70:e8:e6:30:08:86:dd:a2:00:f7:db:
3b:54:ea:41:1e:15:d1:05:4b:09:43:bf:ca:d2:be:a1:e9:05:
a6:da:35:9f:45:57:f5:42:74:bc:46:04:97:bf:91:2d:2c:7f:
05:77:76:7e:ca:a3:61:88:33:df:b4:9b:55:f5:96:81:79:1b:
9b:6d:08:2e:b4:f4:1b:d4:1e:ee:f7:f6:66:04:40:7a:cb:6e:
42:89:26:0d:9b:39:ea:5f:c8:7b:4c:95:51:07:75:15:0d:13:
ea:55:84:47:c8:dd:49:4d:c2:52:e0:bb:88:b1:cd:16:2f:4a:
76:c0:14:a2:01:17:f8:98:ba:2f:4d:9c:7d:ef:9b:b1:cc:43:
f2:9c:26:8d:06:7c:53:0e:c2:33:a4:f3:f7:1c:4d:7f:af:06:
73:60:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:27 2026 by rpki-client