Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e4dad8c7-9a9d-474f-aaf2-ab7a9e517288.roa
File: e4dad8c7-9a9d-474f-aaf2-ab7a9e517288.roa (raw, json)
Hash identifier: Ns00fj3/e4ScwNqZWjGVwuBnp7IidltTC9WUYZiEjrw=
Subject key identifier: 26:4C:74:95:42:E4:12:30:AC:32:5C:99:9A:17:48:E6:B4:9A:0B:98
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 26BC0390550F953845A68A77D16EE0811E7BEABF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e4dad8c7-9a9d-474f-aaf2-ab7a9e517288.roa
Signing time: Thu 30 Jul 2026 01:20:08 +0000
ROA not before: Thu 30 Jul 2026 01:20:08 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bc:03:90:55:0f:95:38:45:a6:8a:77:d1:6e:e0:81:1e:7b:ea:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:08 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=d4dec64e5cbb38de285ed11524d0961230add0f34a6045de377b6dba61695064, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:78:fa:b7:6b:63:58:fc:62:36:73:22:b7:
a9:26:25:dd:b8:ad:d7:6e:6d:0a:f6:fa:0f:24:5e:
3a:87:5f:4e:6f:1e:1c:c8:bf:61:9f:91:43:1c:11:
61:69:b2:b8:dc:35:bd:05:d0:de:9a:86:bd:cb:ad:
6b:75:e3:c4:35:51:ec:0a:a3:c2:47:ea:a5:39:79:
41:58:9b:6c:08:8f:9c:cd:01:8c:2e:5f:c2:c2:6a:
ab:20:62:0a:8e:3c:e9:a0:f5:bc:74:ff:9a:79:63:
12:b0:76:d7:d4:87:8f:b0:27:c7:c5:6c:ef:b0:b3:
ee:94:2e:45:4d:ae:2c:52:ff:2c:7f:bf:e8:29:c2:
d3:71:d4:4d:52:ff:8b:a0:7a:6a:70:00:44:60:a5:
d6:e0:b5:6e:4a:20:ac:65:d4:b6:a9:1d:08:3c:59:
20:c5:4b:40:14:c3:f5:50:31:52:74:af:d3:aa:02:
57:10:93:a9:0c:40:5e:c0:ed:6a:9d:f0:00:96:9a:
a2:bf:be:4b:df:75:e0:bd:d7:c7:07:ec:6d:f7:53:
56:67:2a:86:40:c2:1f:22:ff:34:da:5d:01:c2:a4:
98:69:cc:25:0c:9e:db:32:d9:98:c1:c9:4e:c2:13:
fb:9f:a4:fc:7c:97:1b:4a:65:77:4b:2b:5d:bd:93:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:74:95:42:E4:12:30:AC:32:5C:99:9A:17:48:E6:B4:9A:0B:98
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e4dad8c7-9a9d-474f-aaf2-ab7a9e517288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:100::/48
Signature Algorithm: sha256WithRSAEncryption
1f:87:5e:3d:a1:e3:03:c8:e2:24:14:e6:18:b0:95:fa:cb:8f:
02:07:60:d9:e0:e2:f5:7f:6c:de:76:1c:c8:81:b2:c4:bb:69:
af:58:f0:67:ab:d9:1c:cc:d2:02:a2:98:91:15:b3:d2:3e:59:
e6:0f:27:fe:96:d2:bc:57:e8:e8:39:49:e9:b5:13:94:ec:c5:
3c:09:55:b1:e9:30:94:e6:68:e4:71:15:05:fc:98:01:46:e4:
6e:3b:e7:81:01:3d:8f:b4:94:21:6f:06:7f:78:ec:5a:96:92:
83:db:8a:6e:2f:e7:b3:2a:9b:b1:e4:63:a5:79:01:6e:29:c2:
b1:be:dc:d2:61:d0:3a:3b:8f:92:97:1c:9a:e1:9c:4b:40:21:
e7:52:9a:96:14:62:5f:d4:92:25:33:3d:33:0e:bf:64:c3:f8:
19:7d:55:fe:c9:a9:06:44:84:55:11:aa:06:84:cc:8f:09:df:
87:26:f1:1e:64:f6:b1:76:14:e3:eb:3c:b4:51:a0:b1:67:95:
37:6c:16:27:08:72:a8:5f:3b:3f:ae:7e:e4:bd:b6:78:94:06:
9c:96:0b:48:75:f7:87:f7:6f:34:18:c9:f1:d6:7e:5f:cd:38:
17:43:41:cf:9e:ed:78:2e:4a:0c:05:ae:db:0d:de:f3:04:8f:
36:57:f3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:47 2026 by rpki-client