Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d93d1a48-1aa1-436a-bb88-1fdee7f0ac97.roa
File: d93d1a48-1aa1-436a-bb88-1fdee7f0ac97.roa (raw, json)
Hash identifier: nq9incV6St+JBve5M2SJTTGNc3ooYg8RLrKKq4Fm/Uo=
Subject key identifier: 6A:B4:CE:A5:BB:44:D2:1E:8E:15:5C:05:CE:8F:22:CA:46:BE:A3:87
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 10A7D889E7393846CBD39DC11C68EA87DA2D42A0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d93d1a48-1aa1-436a-bb88-1fdee7f0ac97.roa
Signing time: Wed 12 Aug 2026 21:05:33 +0000
ROA not before: Wed 12 Aug 2026 21:05:33 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a7:d8:89:e7:39:38:46:cb:d3:9d:c1:1c:68:ea:87:da:2d:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:33 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=855bd2010f6033f867d6279d7c375d08b7d22b049d7524c66ecc43cd4730c2fd, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:2d:ed:bc:f2:66:fc:9d:75:69:b1:b0:18:
6b:4b:60:de:69:e4:21:1d:e2:25:0b:16:a8:9f:39:
de:f1:c8:24:bc:2d:8a:b4:b1:2f:d6:8c:80:b3:18:
9b:c6:88:14:3a:e4:b3:e3:d6:31:f7:3a:9b:c9:69:
a8:23:91:14:4d:01:33:2e:a9:c8:94:0d:80:49:52:
8f:b6:f6:a8:4b:c8:6f:c3:ca:7b:6d:28:63:1c:91:
7f:f9:17:d6:28:ae:ef:4b:50:03:99:63:3d:45:7d:
56:e3:33:16:ee:e1:fd:98:71:59:10:61:e8:f3:40:
e7:f1:05:4e:32:73:7c:41:c0:c9:00:4f:15:6d:05:
79:e0:37:e5:87:ac:e7:3b:2f:1b:c6:e7:25:ae:33:
e6:19:40:41:d5:d8:a8:ba:9f:f4:a7:75:8b:c3:cb:
09:97:2e:1d:d1:f0:43:7a:5d:b7:e2:3f:b3:e1:57:
8d:53:71:93:94:a3:ad:39:27:d6:53:89:2f:73:7a:
a6:ae:c7:05:a3:0d:b0:7c:f3:55:46:da:88:d6:7a:
5f:57:97:49:3e:01:ff:c1:1e:6b:d8:33:b0:89:18:
85:b9:48:d2:77:73:52:ad:b7:9f:95:4f:40:5e:c7:
2a:66:87:17:86:eb:83:87:46:31:b5:c6:80:d3:06:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:CE:A5:BB:44:D2:1E:8E:15:5C:05:CE:8F:22:CA:46:BE:A3:87
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d93d1a48-1aa1-436a-bb88-1fdee7f0ac97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/48
Signature Algorithm: sha256WithRSAEncryption
64:6b:72:6e:5c:16:d4:e4:35:8b:b4:c8:7c:ac:ea:8d:61:5a:
f4:fb:7c:c4:8c:de:2e:91:c7:ac:bb:c8:f0:86:d2:de:5f:2f:
c7:64:93:78:37:39:45:30:3d:be:91:22:cf:91:78:02:52:39:
f5:1d:cc:c9:61:bc:48:39:54:44:9f:d4:03:b6:89:ee:b7:4c:
b9:42:88:35:e9:94:d1:c3:cb:b0:f2:e9:c3:50:8f:20:2d:0b:
7a:06:b6:68:54:97:e3:c1:71:12:62:46:82:40:5c:49:9d:39:
c7:59:3e:ac:91:43:93:9d:61:ac:91:c4:31:87:2c:3f:02:6c:
6a:fb:a8:4f:05:6d:1e:61:a7:6f:07:1d:bc:80:c4:8a:9b:59:
53:88:e1:99:d1:68:5f:aa:b4:9f:27:9b:31:f5:7a:e3:4a:80:
15:c0:55:02:39:7a:ce:5f:a5:21:69:fc:bf:e0:84:08:59:ef:
db:4b:1e:18:ba:4b:f2:5f:88:94:2d:6e:28:d1:ef:54:3d:35:
f8:52:64:8b:84:cf:5a:e2:25:cd:32:f4:57:32:4b:83:2c:99:
14:84:76:b5:96:24:d2:f1:49:b0:24:8f:c2:b3:4e:17:2f:53:
97:3f:0c:5a:66:37:31:7e:7c:12:45:a4:16:83:db:ed:ff:d4:
e5:37:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:42 2026 by rpki-client