Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa
File: d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa (raw, json)
Hash identifier: zP7qs2FG8RYitKRZYW4mnK4QlZA8PA+Nd0J1b2e/DYs=
Subject key identifier: D1:5B:A9:95:63:00:F0:DD:FD:74:17:1A:67:3B:59:92:F4:C7:81:F1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 67EABDA17E32CBC05C8D12AA18EDAF1BD507AB39
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa
Signing time: Thu 30 Jul 2026 01:30:12 +0000
ROA not before: Thu 30 Jul 2026 01:30:12 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ea:bd:a1:7e:32:cb:c0:5c:8d:12:aa:18:ed:af:1b:d5:07:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:12 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=9a619c6d143e860f0d5a0b5ee45acc6d5c03736c63c8b01e5ce30aff873613d7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:51:67:49:bb:87:2f:7c:6a:bf:e3:26:3e:
56:38:68:ba:18:a1:1b:24:85:8c:50:1e:28:6d:30:
2f:bb:7d:b4:25:d3:d3:0d:c2:04:d6:83:db:d1:f9:
6a:01:08:5a:01:48:b4:08:56:6a:d8:d0:72:d5:c9:
df:32:9c:cc:e7:f3:1c:ce:b1:7c:0e:12:cc:b4:7f:
fe:16:25:bb:34:b9:6f:70:9b:28:ff:c4:45:89:f5:
75:08:ba:98:35:67:e5:a4:33:13:2a:ef:77:38:8c:
19:2f:6a:a7:af:a2:f5:ea:7c:2f:d9:a5:c2:cd:35:
6f:48:c7:8b:36:2a:95:09:03:1c:92:60:ac:e5:c2:
b9:0d:e0:55:eb:62:54:7d:81:99:31:04:72:8b:93:
72:9f:7b:1c:b5:34:97:05:8a:12:38:47:ac:e4:c0:
ae:68:f3:9c:b0:03:64:67:45:5a:8d:95:7b:02:a7:
84:85:14:25:76:71:fe:fa:c3:57:56:5c:7c:3d:a0:
3e:d4:99:c5:4b:95:b6:22:9b:8e:af:79:a0:b5:d6:
52:46:00:57:05:9c:b2:14:79:f1:a2:8c:b7:3c:ed:
93:95:e7:d2:1e:d8:fd:93:5d:ef:6a:8a:92:5b:74:
4e:79:20:b4:82:18:f0:7d:45:ff:af:d6:a8:0b:55:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:A9:95:63:00:F0:DD:FD:74:17:1A:67:3B:59:92:F4:C7:81:F1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a000::/36
Signature Algorithm: sha256WithRSAEncryption
cf:28:15:18:98:12:73:fa:d3:d3:97:4b:32:e5:76:09:1b:9d:
a9:6d:07:5b:07:49:4e:44:96:cc:44:99:4a:75:be:ae:89:ce:
dd:4c:97:a7:62:01:ba:f9:bc:b8:af:e2:5b:54:7f:be:e1:17:
1b:52:82:c5:0d:79:ad:02:bd:ef:6d:8a:dc:17:44:77:b7:78:
61:b7:72:92:b2:42:99:4c:ad:8f:a9:bb:6e:6a:52:9a:c4:9b:
ac:b7:40:60:fa:1e:cc:7e:8e:38:56:95:ae:6c:83:5d:ea:55:
19:be:54:98:77:03:40:75:fa:23:60:1b:11:45:a2:81:d6:85:
d1:b4:7e:d5:dd:12:a4:42:db:e3:d0:47:91:e5:c0:ce:88:a0:
be:69:05:d0:6c:e9:4a:39:97:4a:7e:e1:61:13:ea:ae:ed:cf:
97:b7:7c:e5:2a:0c:45:af:c5:44:97:de:6a:38:e7:8f:8e:ee:
b8:54:4d:df:f8:a7:5f:a4:98:c8:28:8f:f9:6e:86:f2:fb:1c:
7e:32:55:85:8c:58:ea:93:11:81:c3:14:98:03:fe:a9:ca:b2:
e4:15:0a:14:10:20:de:a2:f0:74:a9:9d:9c:70:95:40:2d:d9:
a4:13:c1:b5:06:e2:54:cc:9b:d4:b5:6d:16:64:4b:85:c2:c2:
22:52:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client