Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d851d011-a10b-443f-85f6-00caa23acf4e.roa
File: d851d011-a10b-443f-85f6-00caa23acf4e.roa (raw, json)
Hash identifier: IQdXWBrt0xoiNyeKC2HnBm2gGpa5pXfBO++gwsVHkgo=
Subject key identifier: 8A:51:16:72:96:B1:05:92:72:4E:B4:57:60:3E:0A:F2:1E:63:E2:E7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 682CF8B5EF7F49D5521446AC03309B60C098D185
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d851d011-a10b-443f-85f6-00caa23acf4e.roa
Signing time: Wed 12 Aug 2026 21:06:54 +0000
ROA not before: Wed 12 Aug 2026 21:06:54 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2c:f8:b5:ef:7f:49:d5:52:14:46:ac:03:30:9b:60:c0:98:d1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:54 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f93cf381a1d940040789013cddf3e91a03e4a3f198399611b8f1ff92d4d41a8d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:3b:9f:cd:ab:78:81:d6:ae:3c:3f:c9:65:
f2:ff:c5:83:ad:24:89:8d:d3:a5:f7:bb:7a:f7:75:
32:f6:54:76:96:ff:ba:c1:ca:6e:fc:20:47:6f:fb:
7b:ee:81:03:9c:55:3e:4b:90:22:27:3f:ff:87:0f:
4c:e0:4d:16:b8:06:e8:3e:76:d7:00:10:0c:1d:e8:
c2:05:f5:8d:a5:23:60:9d:02:63:85:9f:38:d7:bd:
c2:05:e5:cd:cc:ef:ee:9a:c3:d9:dc:e5:8e:a3:2f:
f8:73:9b:15:37:b1:b3:c8:36:14:ea:e8:22:8b:62:
97:fb:cc:49:5c:f7:6b:80:b6:f5:39:89:ff:97:10:
8e:51:ea:de:ae:2b:e3:f9:e8:27:bf:6e:de:c5:78:
b2:10:18:e1:b2:90:12:ed:59:83:93:ef:cb:e0:aa:
16:6c:df:1b:90:36:8b:12:51:4f:dc:15:e8:75:71:
5f:c6:78:f5:69:96:2c:79:2c:c8:72:65:5d:15:82:
0f:e6:f8:82:4d:e7:c0:0a:38:54:36:78:29:16:3c:
c6:da:0d:bf:62:29:f8:53:05:d5:83:eb:99:ce:ca:
5d:36:47:04:3a:1e:82:05:b3:c7:4e:de:ee:4c:c8:
3f:7c:4f:c4:be:09:03:13:48:da:66:b5:9b:6e:ae:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:16:72:96:B1:05:92:72:4E:B4:57:60:3E:0A:F2:1E:63:E2:E7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d851d011-a10b-443f-85f6-00caa23acf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
34:d9:f4:22:45:f7:99:f7:66:9e:d7:d7:14:14:8d:90:6d:15:
81:d4:4f:1f:fc:3d:78:32:41:e5:d3:e9:7d:af:2c:37:78:d7:
29:84:00:e5:ec:67:d2:cc:c6:60:f8:4b:a3:e1:6b:3e:9f:4b:
2f:5b:d9:25:f8:01:cb:7d:2d:e6:fd:5d:be:74:27:2a:93:3f:
01:e7:a7:5d:2a:d8:a8:39:12:13:f9:f4:e1:ed:e8:52:8c:f0:
05:a7:10:4c:b8:2f:86:fb:24:8f:05:25:cd:cc:63:d4:81:b8:
ff:2b:e8:2f:bd:0a:5e:7e:2c:a8:31:43:2a:67:78:8a:27:15:
4f:82:7a:f3:47:41:94:69:2e:e6:c4:37:09:cb:29:f9:b0:44:
73:89:de:6e:5c:48:ef:18:17:5b:9d:5d:48:65:69:ef:a2:78:
7c:39:80:be:8d:09:50:08:18:52:9d:42:8a:26:78:ac:f2:05:
77:22:b9:18:79:07:13:15:b5:59:be:13:09:b9:82:f4:bb:9d:
87:90:51:2c:0f:28:84:2f:5e:e8:63:67:21:30:ae:fa:b6:c5:
e9:26:8c:d4:bc:68:9e:ec:6a:49:23:e2:8b:a5:dd:54:8c:64:
ae:8f:27:95:0e:f8:70:1a:f9:f1:72:ec:89:cb:14:7a:34:e7:
98:22:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:07 2026 by rpki-client