Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/da0b49b0-b156-4b2e-a793-983211e2cce0.roa
File: da0b49b0-b156-4b2e-a793-983211e2cce0.roa (raw, json)
Hash identifier: P0RuyCnEAp3Gew7OEItzELuPelT7F46Ftmnisp95hIs=
Subject key identifier: D4:65:B5:E3:18:05:91:5F:B7:FB:2F:BC:65:5C:9B:E8:C0:FD:B5:E6
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7976A814A27EEB71381DC3436A56E2D82C555BD0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/da0b49b0-b156-4b2e-a793-983211e2cce0.roa
Signing time: Wed 12 Aug 2026 21:06:46 +0000
ROA not before: Wed 12 Aug 2026 21:06:46 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc1:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:76:a8:14:a2:7e:eb:71:38:1d:c3:43:6a:56:e2:d8:2c:55:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:46 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b2d4df6a3737f041f1ff9541372e69180c0c520ee4f0506a92d71badec9d0093, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:7d:4b:22:82:78:d3:9e:68:ba:5d:85:d6:
b3:b4:c3:9b:2c:5b:25:52:e7:7c:fa:dd:6e:46:37:
87:b0:f0:73:5c:c1:99:e3:4d:d2:28:f1:05:3f:de:
46:23:8f:62:9e:d0:fc:48:09:0d:ba:af:71:d1:be:
bc:be:3c:f8:bb:6a:71:b3:e0:c7:06:f0:5f:b5:77:
4f:3e:10:8b:3c:08:0c:8f:b6:26:66:e4:3d:6f:49:
d9:c1:4f:08:0b:c7:1d:6a:e2:ed:f9:c8:27:88:e4:
c8:ec:3a:ef:e8:13:89:11:4e:88:2c:be:a4:fc:d0:
d6:62:25:89:77:3b:68:f1:12:6f:06:58:4e:e3:0f:
0d:7d:2b:79:22:4d:13:5a:ea:1f:f9:f2:1d:55:9c:
79:52:60:51:2a:d3:58:c2:92:e9:4a:d5:eb:4c:1d:
c5:00:77:48:47:c8:d4:04:e9:c5:55:07:7e:84:8a:
58:15:d3:9f:c8:38:c8:4a:77:e9:c9:9a:c2:c4:ae:
ab:54:92:af:ad:dd:c3:27:a7:62:ec:89:19:11:8a:
c1:d6:b0:34:b6:27:e2:cb:01:b4:f3:ef:3c:ee:1d:
25:e1:0c:ea:3e:02:0d:ad:20:db:f5:aa:f9:13:4b:
d4:28:c8:a4:65:7c:b9:4a:9e:1f:ff:0e:58:67:44:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:B5:E3:18:05:91:5F:B7:FB:2F:BC:65:5C:9B:E8:C0:FD:B5:E6
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/da0b49b0-b156-4b2e-a793-983211e2cce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8800::/38
Signature Algorithm: sha256WithRSAEncryption
ca:db:8c:aa:62:fa:03:42:52:79:7f:0c:d6:8e:75:95:e0:c1:
4d:19:5a:66:6f:ad:e0:1d:42:51:d0:39:87:97:b0:cc:13:d6:
27:54:d9:86:1c:53:c6:9b:ce:ec:ee:50:e7:31:f7:e7:2a:4b:
84:15:91:a5:31:e2:92:93:b1:96:f1:e0:28:d1:c9:14:eb:2c:
2e:95:2a:cc:aa:1b:a0:7e:c3:17:a9:b9:3f:63:1d:fd:f2:c7:
8c:2e:c3:48:a4:23:84:6b:94:67:e3:de:eb:12:7f:73:64:57:
88:8c:07:2f:57:87:5c:c3:d0:d0:93:69:c1:0c:ce:eb:43:ec:
57:dc:c4:90:8c:d0:bd:d6:64:24:93:b1:02:43:17:fa:10:5e:
59:a2:6f:14:dd:79:00:c0:4b:0e:89:45:a9:8c:62:ee:af:fb:
41:28:49:d7:2f:74:87:a0:b1:51:c0:15:21:e0:fd:bd:96:55:
1e:e6:e5:79:04:bf:74:26:b2:51:2a:08:e6:18:69:1f:d0:f8:
72:7a:b6:d4:27:55:9d:2d:62:07:01:a6:34:1d:30:08:f3:12:
df:42:55:93:63:39:be:86:ed:ca:fa:1e:0e:d7:c6:28:dd:88:
79:6e:62:a6:24:3e:b5:dc:27:ce:dc:ad:dd:b0:2f:0c:90:18:
c6:7d:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:11 2026 by rpki-client