Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e27e7a59-99bf-4559-b0df-87da2f6dc6e9.roa
File: e27e7a59-99bf-4559-b0df-87da2f6dc6e9.roa (raw, json)
Hash identifier: NKoWFW6+xDRGH9+tPbSVcb5d6h4vqeBRBThRDvt7qTc=
Subject key identifier: 83:B0:8E:75:45:48:20:D4:76:90:60:E0:F4:14:51:D7:FF:C2:FE:16
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 69D00C61DE30D3F6D847A82113D9F1A6B69341FC
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e27e7a59-99bf-4559-b0df-87da2f6dc6e9.roa
Signing time: Thu 30 Jul 2026 01:20:30 +0000
ROA not before: Thu 30 Jul 2026 01:20:30 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d0:0c:61:de:30:d3:f6:d8:47:a8:21:13:d9:f1:a6:b6:93:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:30 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=de06b3d532252df244c9d5e1b280e3b873bb4d4b2e59de74fc30f8d5d6c7838a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:a5:9f:46:5c:f8:7d:ff:1e:7c:31:7b:66:
a4:a8:dd:00:bc:cc:c4:33:e9:71:29:e7:5b:10:81:
b6:94:0b:42:2f:7b:ad:0b:ef:1d:33:7d:df:af:d7:
16:74:f0:48:46:64:fb:39:8a:63:a1:93:71:36:08:
6e:f3:40:69:fc:60:96:24:6b:bd:af:52:ce:e3:95:
82:09:41:a1:44:34:b5:96:02:fd:10:dc:25:b2:fb:
da:69:e0:29:d2:37:34:83:c2:03:db:e5:0b:b8:fa:
d3:0d:fe:e9:7a:12:f9:6d:e7:52:c4:77:7a:c5:12:
b7:f7:83:86:d8:40:c5:cd:cb:59:53:89:a5:31:32:
1e:9d:65:b7:78:fa:07:00:a4:f5:c1:bf:33:63:f9:
36:d4:67:0f:7f:02:d1:a6:ba:7f:1b:ab:9b:fa:19:
e0:11:99:8c:55:77:a5:72:5a:2e:ea:eb:d2:09:ad:
cc:3e:4b:d3:9e:55:74:f1:1d:a9:f7:38:19:b9:26:
01:a2:89:df:8f:dc:a1:4e:45:cb:bb:31:52:78:77:
ca:7a:b1:50:b4:72:4f:32:e9:43:5f:ba:dd:24:cb:
b7:0b:a0:9d:03:a8:9c:26:64:6a:6f:34:cc:21:79:
0d:65:dd:29:9e:ef:cc:79:f4:7b:41:c8:f3:e0:08:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:8E:75:45:48:20:D4:76:90:60:E0:F4:14:51:D7:FF:C2:FE:16
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e27e7a59-99bf-4559-b0df-87da2f6dc6e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8000::/38
Signature Algorithm: sha256WithRSAEncryption
15:9f:0c:c8:cb:25:c7:c6:e2:9a:24:da:17:5d:7f:60:61:d2:
ae:0d:48:2e:36:bf:73:40:6c:1a:09:f2:3b:f3:63:71:dc:50:
36:20:91:7f:87:29:ea:be:7e:7d:92:31:44:9c:ba:9e:c3:65:
7d:55:5a:6b:41:5f:7e:b9:4b:90:67:ac:66:64:9c:28:8e:89:
35:ee:2e:87:52:aa:01:07:71:63:0b:67:0c:f1:da:7d:5b:e2:
0e:ab:52:c8:ae:4b:8a:00:7c:09:78:5f:5f:31:2a:3a:e1:1c:
d7:f4:8c:dc:e1:84:93:b6:db:69:79:b9:e0:65:94:fa:68:95:
19:e2:31:b9:d7:78:f2:df:d8:c7:af:03:f6:e3:d5:3f:7e:e6:
d4:ba:5c:f9:bc:6c:5f:09:ba:ce:5c:0a:11:14:57:51:b0:6c:
4d:9f:83:c3:b3:b8:8c:3d:9f:25:9d:ac:42:14:ea:9c:85:d5:
7f:fc:2d:ce:4d:7d:59:ed:e5:11:5a:54:80:48:37:53:a4:54:
20:c7:49:44:d8:d3:8e:ab:a0:8b:df:a3:06:0a:6e:c7:14:d0:
ec:a5:5e:09:6d:8e:58:8b:cf:b5:3b:f7:2c:ed:ce:d5:53:d1:
e8:b6:89:ee:70:64:59:97:f6:db:0c:7f:62:ce:f5:0b:88:cd:
f8:ee:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:32 2026 by rpki-client