Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e6d3cf25-63da-4c6b-9257-7270b8323f8c.roa
File: e6d3cf25-63da-4c6b-9257-7270b8323f8c.roa (raw, json)
Hash identifier: ABlRCrpTVQZ+jqJ4pAffdfMTieD3YYza4i0JyTbZsOk=
Subject key identifier: 51:35:CC:5C:7A:88:FD:CC:8C:7E:57:03:BA:FD:72:C8:0F:1D:3E:D3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 249F1C8D320ED4BE195FBCA79D3CE5E0C0AE1DB3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e6d3cf25-63da-4c6b-9257-7270b8323f8c.roa
Signing time: Wed 12 Aug 2026 21:06:45 +0000
ROA not before: Wed 12 Aug 2026 21:06:45 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc1:8400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9f:1c:8d:32:0e:d4:be:19:5f:bc:a7:9d:3c:e5:e0:c0:ae:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:45 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=f1c1c1ccdedbd17e892842e663bd3c451ba5e41658efd4572593d9815eb7ae9d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:9b:83:81:98:83:73:b0:42:8c:e3:d6:8b:
c6:38:68:7b:43:bd:ee:aa:c0:1f:ec:03:fe:38:14:
46:f8:fe:b2:34:fb:4e:61:7b:dc:a0:68:35:06:10:
c7:e6:88:15:95:30:32:ee:8c:55:d0:3d:2a:95:33:
8d:7a:91:03:0b:0b:3a:31:bf:71:0f:a8:81:25:ab:
10:10:24:5a:83:4f:89:3c:90:9e:ba:75:b8:05:cf:
9a:9c:9a:db:58:6d:e3:26:e1:18:22:54:ed:de:f0:
0b:88:29:6f:1d:a6:0a:b2:bd:bc:a4:fb:35:b0:bf:
4c:6d:56:0f:21:10:cc:a0:fb:27:b3:1d:3b:19:a4:
68:3c:8d:5a:10:f5:c3:4e:5d:a3:7c:b8:b2:fe:33:
33:54:17:70:de:90:15:81:95:51:43:75:65:58:7d:
6b:52:e3:6f:f7:cf:3b:69:30:a5:fb:e7:7c:aa:c6:
86:41:2e:53:c9:f3:6c:7c:7c:21:02:6b:a3:ac:62:
71:59:ae:f9:51:4b:53:de:cd:68:79:1d:7a:ac:e6:
dd:2d:d1:e8:60:8e:86:b9:b8:70:e6:5b:e9:de:9a:
50:85:fd:6c:8f:66:c7:7b:a6:f8:e3:90:2e:5c:de:
42:ae:e0:2b:33:30:6c:75:c4:30:53:45:e3:c9:e1:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:CC:5C:7A:88:FD:CC:8C:7E:57:03:BA:FD:72:C8:0F:1D:3E:D3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e6d3cf25-63da-4c6b-9257-7270b8323f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8400::/38
Signature Algorithm: sha256WithRSAEncryption
b8:5f:4a:b8:80:4a:9c:be:e7:fa:82:c7:3f:6e:49:36:ba:ea:
30:bb:38:13:e5:de:b2:d9:3a:b9:9c:d1:d1:7b:66:f7:26:be:
fc:cb:ab:7c:7b:fd:e1:b7:d4:af:73:09:65:27:19:75:ff:57:
35:0c:77:4b:f3:70:1f:2e:f4:fd:e2:0b:58:c2:71:01:65:a7:
6a:f3:af:52:bb:95:36:da:33:c7:7e:da:35:08:e9:6c:bf:cf:
ad:fc:31:8c:4e:72:ae:0e:c5:52:f5:a7:16:8c:54:a2:83:8d:
8f:ca:34:ab:90:dd:0e:a7:63:b8:5a:b6:57:e8:81:a3:7e:0a:
d3:20:e7:5c:02:55:26:84:4c:81:3c:16:c4:e9:a9:e6:7a:a8:
02:13:29:a5:e6:1f:d0:22:9b:67:2c:0f:f9:a2:6b:a2:9c:0e:
d6:7b:af:46:7b:d1:b6:59:00:e1:80:5e:54:89:b4:4c:a1:79:
13:57:88:9a:15:a8:6c:90:ed:9c:9f:20:97:8a:bb:61:93:60:
76:54:b2:02:00:c5:3d:1e:75:0d:da:12:09:c8:34:d7:3d:0d:
6c:d7:c1:34:dd:2b:bf:b8:85:f9:e6:35:23:45:7c:6c:25:ec:
f3:6d:ff:80:40:87:b0:69:3e:3f:31:92:84:53:8b:3b:1d:60:
56:b4:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:16 2026 by rpki-client