Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d5d13f03-51e3-4e02-981f-1c9a02e38524.roa
File: d5d13f03-51e3-4e02-981f-1c9a02e38524.roa (raw, json)
Hash identifier: OfRQcRYjEdzliAyS1Kjk9Bmf+Oj/SK9Eyx5BD6jEmrM=
Subject key identifier: 7C:98:B5:1C:95:68:75:D6:37:7E:A5:6A:31:CC:67:68:77:8F:10:FB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 51BBD7AE9AB707581E7AA8CA1B6A2A80CFC2CE58
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d5d13f03-51e3-4e02-981f-1c9a02e38524.roa
Signing time: Thu 30 Jul 2026 01:30:11 +0000
ROA not before: Thu 30 Jul 2026 01:30:11 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bb:d7:ae:9a:b7:07:58:1e:7a:a8:ca:1b:6a:2a:80:cf:c2:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:11 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=0beba7a05f54b384a3ad82fbd26cf57707c4b41b227f4b14d4de764e4c019f2b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:d1:2e:bf:9f:8c:fc:2b:eb:c6:9d:80:42:
3a:24:52:76:2d:5a:c7:80:80:de:f7:fc:03:e5:ac:
1e:ab:71:d8:20:39:08:79:c2:e1:d2:7e:db:ed:93:
16:32:0d:29:4b:86:4f:96:2f:53:dc:9e:e2:27:de:
04:70:c7:8d:bd:b0:d1:d0:c1:b6:51:78:88:84:fb:
73:4c:d4:cd:53:fc:6b:34:e6:5d:d5:83:a4:cf:7d:
3e:48:1f:28:60:81:18:bb:9c:00:a2:f1:8b:26:47:
7f:ff:e8:c7:38:23:1f:f0:b8:27:62:94:c9:07:c5:
34:03:82:dd:93:e5:8a:86:6e:ad:43:8e:83:8a:65:
71:dd:c7:d2:2f:dd:15:53:31:dc:20:db:08:9b:33:
67:a5:52:73:52:6b:de:95:f6:79:df:87:70:07:ba:
06:96:78:2c:bc:af:6c:5f:33:c2:b7:7f:5c:10:a8:
18:78:d1:00:0f:b4:90:ac:6c:21:c7:f9:8f:f5:57:
15:fe:44:8d:97:06:e2:7b:3c:63:d1:f5:62:9f:e3:
93:f5:99:b4:44:15:ae:c0:57:d5:1b:47:b1:aa:20:
e7:c7:4d:1b:50:a1:58:f3:8d:8a:33:9e:0c:3f:42:
d5:b5:12:c2:5a:10:d6:41:77:a9:90:bb:25:c4:1d:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:B5:1C:95:68:75:D6:37:7E:A5:6A:31:CC:67:68:77:8F:10:FB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d5d13f03-51e3-4e02-981f-1c9a02e38524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5000::/36
Signature Algorithm: sha256WithRSAEncryption
aa:ea:a2:56:e6:26:2f:71:20:ab:71:1c:7c:f1:be:40:c4:86:
bc:92:0e:46:73:e2:29:da:96:14:f9:ab:1a:47:18:71:57:e2:
37:7b:a2:8e:51:a4:4f:49:68:9f:47:87:e9:ab:7a:98:7d:59:
46:56:a3:66:20:28:9c:e7:ab:a8:9f:35:5f:5b:16:4f:d1:f6:
6b:90:9e:28:57:34:0e:05:66:55:a3:30:4c:b2:77:a8:a0:6a:
d5:51:d9:90:5a:6d:1f:e2:c2:b4:86:06:58:a7:9b:0e:b3:c7:
c5:df:9e:30:f9:ee:47:79:ba:91:6e:20:95:bf:19:eb:d1:a2:
8a:a3:64:22:e2:5f:37:5b:79:08:8f:08:9d:53:b3:57:ec:ad:
f5:db:a7:14:50:2b:04:06:aa:1f:b8:97:ef:14:59:1d:26:c3:
3e:8a:2d:9b:2f:a5:91:10:a8:29:9e:52:40:38:55:18:bf:2b:
30:48:ec:ec:69:09:26:e1:30:95:bb:20:02:b8:46:24:71:cb:
06:2a:3e:1e:40:28:be:57:23:4e:f4:fd:61:cf:70:e8:ff:87:
9d:55:8e:9e:d0:b9:d7:6c:0b:2b:af:da:81:97:8f:db:d4:dc:
20:a7:54:a2:1a:0c:ae:81:72:9f:05:fc:4c:94:b8:d8:8f:9f:
f1:d2:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:54 2026 by rpki-client