Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e2415890-c44e-4265-b2bd-60cda9771647.roa
File: e2415890-c44e-4265-b2bd-60cda9771647.roa (raw, json)
Hash identifier: GDNDkKv7diK5hGwkEojdHBDUr3FLpHy/KJT91HN6uzc=
Subject key identifier: B2:6C:0A:81:77:E8:89:67:EE:5D:7E:64:80:1B:3B:1D:1F:86:1F:AF
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4AD741A84FE2B7237EE2CB591CCF08DECB72CA50
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e2415890-c44e-4265-b2bd-60cda9771647.roa
Signing time: Wed 12 Aug 2026 21:06:51 +0000
ROA not before: Wed 12 Aug 2026 21:06:51 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d7:41:a8:4f:e2:b7:23:7e:e2:cb:59:1c:cf:08:de:cb:72:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:51 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b1515a3d0bfb83ad1a14a9f88a14bd3d0f98f2e20fe38999266bc1951bba0d0a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:61:e6:83:53:78:fa:3f:4a:b7:38:4b:df:
2f:be:42:8e:2a:73:08:d0:79:9a:a6:11:6b:0c:e4:
b7:b8:26:30:5a:23:be:2d:b5:da:a9:28:54:8e:f0:
74:63:b2:b3:81:dd:d2:87:b5:15:5e:ed:21:36:19:
40:81:ed:35:70:f9:ff:f1:03:90:05:35:a2:13:94:
8e:88:50:7b:4c:db:76:59:5a:e2:0c:46:ce:c5:0a:
b5:e4:97:bb:6e:82:08:19:cb:02:29:18:a4:20:7a:
a7:01:7b:29:5c:6c:88:26:95:8d:40:d7:85:6e:67:
00:87:a9:98:a3:c1:f1:fb:bc:9b:2c:9c:c0:2b:cd:
2d:47:02:49:1a:90:da:5d:97:1e:80:6f:53:60:b3:
03:9b:37:4f:9d:e8:41:ca:dc:a6:d5:d2:11:e7:6e:
e2:5a:a8:56:bb:05:11:4d:36:f4:98:35:85:40:a0:
57:89:d7:ed:ae:9b:2b:16:d9:28:9a:2c:34:68:f7:
f8:bd:f4:5a:a0:67:d0:ef:cb:cf:b4:5e:e3:54:11:
ce:f2:f8:40:e1:8e:4b:28:ac:d7:18:ae:11:e6:1c:
f1:51:ca:34:fa:6a:8c:5b:14:e9:33:16:44:41:65:
6f:63:aa:76:e2:0e:9a:91:9b:c5:e9:e7:9e:69:e4:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:0A:81:77:E8:89:67:EE:5D:7E:64:80:1B:3B:1D:1F:86:1F:AF
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e2415890-c44e-4265-b2bd-60cda9771647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:8000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:21:71:59:02:92:f8:f0:01:05:67:97:4c:48:63:aa:9c:34:
2c:c4:32:34:93:b2:da:65:9c:9a:da:43:69:ba:0d:0d:de:c7:
f9:e8:1a:f0:14:d4:0a:d5:e5:aa:6c:21:fd:96:22:96:76:a6:
2c:f6:13:1c:87:74:63:d8:6c:99:d4:8f:05:13:d3:39:dc:f6:
20:31:33:5f:be:85:57:6a:ac:1d:bc:45:ce:3b:30:6d:61:b6:
d1:83:68:74:a8:df:a2:10:aa:e0:47:35:ae:b7:9d:20:ef:3a:
6e:21:74:6b:39:7a:f6:44:ac:48:47:54:cb:2b:a7:ee:74:36:
5b:ab:01:39:f6:eb:85:5f:88:d6:cd:d2:e9:2c:aa:af:e9:1e:
b0:7d:50:a0:66:45:5d:50:ee:c9:16:66:7a:92:6d:28:de:3a:
e6:71:64:45:2d:6e:49:1a:73:0a:04:62:c2:5a:70:eb:4b:20:
f1:00:77:8b:58:79:89:5e:a9:43:8e:62:fc:01:e8:27:87:19:
72:47:d5:3b:5b:f1:db:d0:f5:86:8e:45:48:2e:b8:f6:ad:7a:
eb:c2:1a:64:8b:dd:6b:1e:f0:04:17:25:9f:8b:ce:d5:d0:fd:
04:10:87:fa:b6:3f:22:b0:49:ba:93:fe:73:0b:3b:e4:bb:5a:
ae:16:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:47 2026 by rpki-client