Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1761481-a0e9-4093-b4d3-7919660f0dfa.roa
File: e1761481-a0e9-4093-b4d3-7919660f0dfa.roa (raw, json)
Hash identifier: AWIOzyi9xdUoU2pXI4wKHSaLpATRxI18TQLuip9wCHs=
Subject key identifier: 22:1C:E8:29:9A:0F:2C:08:E3:21:99:15:6D:E8:64:BD:A6:61:44:85
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4107EAE1C468F50DD6C2417924D9086E6E4DB320
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1761481-a0e9-4093-b4d3-7919660f0dfa.roa
Signing time: Thu 30 Jul 2026 01:20:29 +0000
ROA not before: Thu 30 Jul 2026 01:20:29 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:07:ea:e1:c4:68:f5:0d:d6:c2:41:79:24:d9:08:6e:6e:4d:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:29 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=9d6411306c7c1c38d8742f2ecf6367f2445610aa42ad9e7613608db9df430e60, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:48:68:27:b1:6d:c7:33:8a:80:d4:78:7c:
74:91:3a:32:fb:85:2a:41:00:e5:ad:1f:af:7a:b2:
8e:59:4a:6f:bd:cc:7a:5d:4d:26:b3:20:ac:f7:7f:
49:1f:a7:43:13:5f:09:7c:d6:12:44:4b:7e:b6:b3:
11:26:42:c6:22:b7:36:f4:37:61:cb:ad:9b:b3:9b:
9f:a1:e0:33:3f:24:5f:47:e3:07:73:91:55:bc:20:
4b:70:ed:60:f1:fe:4f:28:3f:f9:0a:11:34:49:c1:
f8:d4:be:4e:13:d2:76:50:89:f5:0b:d4:ab:c6:6d:
2e:71:83:83:85:49:6f:db:13:28:ff:f2:2b:6d:9c:
23:14:4c:07:4b:58:8d:39:66:16:97:e9:71:b3:a5:
9f:26:92:b5:46:7d:33:ad:cc:80:5a:aa:dc:09:54:
29:6d:57:ad:61:32:b2:7b:b1:8f:66:bf:1c:06:84:
1c:1f:33:44:20:dc:a7:82:68:a4:3f:33:22:c2:19:
6d:f8:a8:e7:23:7f:29:72:72:61:31:62:28:2c:5b:
6d:58:ad:71:c8:2f:b4:17:76:2b:0a:7f:16:82:21:
6c:35:1e:43:f1:08:72:6d:07:9e:92:ae:3a:a6:7d:
5d:f2:08:3f:83:59:2f:ed:72:68:35:62:fc:9e:65:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:E8:29:9A:0F:2C:08:E3:21:99:15:6D:E8:64:BD:A6:61:44:85
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1761481-a0e9-4093-b4d3-7919660f0dfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
92:b3:5f:f1:e7:3a:e3:64:35:2e:a8:10:9a:d8:6a:a1:8a:ed:
d9:a7:e9:d2:ec:c7:5d:84:af:73:93:ae:33:23:ec:d2:5f:67:
90:c6:ef:e5:1d:64:b2:ac:61:23:d5:64:c3:26:40:8b:cc:fa:
48:1f:c2:c0:0f:f3:a5:a4:cb:66:c7:b3:2f:f5:97:92:d2:56:
36:90:3e:bf:84:a6:34:7c:71:46:fc:f2:c0:bb:70:ec:23:7f:
28:09:02:6c:81:45:ca:96:7d:a1:90:2a:7e:14:cd:9f:af:a3:
20:db:7e:78:80:e4:f8:36:a5:5a:aa:27:e3:1c:3c:bf:e1:5b:
b0:a3:40:54:a4:47:0c:a5:42:92:e4:ab:03:30:26:9f:f9:ac:
47:7b:88:3b:d4:9b:79:ed:7e:4a:9c:cf:eb:23:a6:71:39:06:
9d:19:0a:21:4b:3b:34:de:c6:8e:85:92:b5:9e:39:dd:55:71:
de:0a:a4:da:4e:f3:ac:69:c6:99:26:60:98:17:8c:8e:3a:cc:
48:5b:b4:51:4a:40:23:3f:b0:bb:7b:15:1e:76:fa:3f:f0:2f:
32:c5:02:dc:f5:74:1e:d1:c7:83:80:a4:22:0a:d6:36:43:87:
05:a2:e4:9b:35:b0:62:bb:f2:ad:e5:80:34:4f:02:c4:33:aa:
42:4b:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:18 2026 by rpki-client