Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8832282-6e4e-421c-a1f9-aa051a2de6bb.roa
File: e8832282-6e4e-421c-a1f9-aa051a2de6bb.roa (raw, json)
Hash identifier: I10UBWu8Zu5x48HHhXWbIb8nzRg/Z6oiluy1T+aFE98=
Subject key identifier: 6E:3A:9A:B1:3C:F4:99:45:BA:4D:A1:09:8F:2B:8E:12:3E:F3:F5:13
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 22F08CAF9AA0E2CC01336D5B6645B32CA6DB0350
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8832282-6e4e-421c-a1f9-aa051a2de6bb.roa
Signing time: Wed 12 Aug 2026 21:05:38 +0000
ROA not before: Wed 12 Aug 2026 21:05:38 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f0:8c:af:9a:a0:e2:cc:01:33:6d:5b:66:45:b3:2c:a6:db:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:38 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=10dd54e113ebc24ff6c1f3ce7179ac11be24634ee9ccbb3dcc7806693f85654b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:05:e4:28:2d:40:ca:c1:35:2d:f1:85:b6:
3c:ef:e6:77:eb:f1:9a:28:db:af:e2:b5:0f:6d:fb:
d3:2a:3a:8e:82:ee:b5:6d:b3:78:c3:87:61:fe:fa:
5c:93:8b:ef:4c:50:10:16:75:1c:a4:78:4d:97:9b:
1e:4e:f2:c2:50:f0:0d:92:77:0d:0b:9c:83:8c:23:
73:8d:1d:bf:fb:21:a2:e5:cd:78:9b:b9:8c:3b:56:
dd:ce:68:0b:96:30:2d:01:e3:28:7b:aa:4d:31:75:
5f:e0:61:51:51:da:ff:17:73:6e:1c:e0:93:6b:92:
21:e5:d6:99:68:f1:a4:a6:03:d9:59:ed:a2:c0:29:
f0:b9:5b:29:ba:bf:16:e3:fc:62:21:96:f4:a8:62:
f9:2d:b8:ea:12:93:b6:ff:a8:ef:23:bf:33:20:90:
83:29:bf:e3:aa:54:1e:aa:55:e9:1b:ca:1b:5d:20:
be:f6:f9:d3:31:25:6b:a2:91:4f:61:77:3e:0a:d3:
27:7d:66:d1:94:60:46:fb:3b:95:2a:54:08:33:2d:
44:ed:a2:c2:8e:dd:f0:8a:51:c0:f6:9c:86:23:09:
cb:59:88:ef:e7:54:cb:48:ef:9b:d7:43:c2:71:1d:
d4:8a:2c:3b:af:d8:3a:5b:c9:b1:eb:22:3e:9f:e9:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:9A:B1:3C:F4:99:45:BA:4D:A1:09:8F:2B:8E:12:3E:F3:F5:13
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8832282-6e4e-421c-a1f9-aa051a2de6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:100::/44
Signature Algorithm: sha256WithRSAEncryption
b2:9d:7f:03:71:b3:d9:7f:b4:d9:fe:ea:7f:14:d8:61:6c:79:
2d:04:21:fb:2a:57:ec:3b:96:94:9a:6e:8f:69:84:7e:ee:71:
ed:0b:27:4c:8d:09:7a:c3:f5:5e:8c:91:0b:b1:1e:df:df:a1:
b5:7c:d6:a8:82:04:5c:3c:ed:aa:ff:f8:37:bf:ed:8b:f0:db:
0f:d9:27:65:41:50:7b:6d:d4:f9:1e:db:4a:c6:cb:85:51:6f:
4d:65:b6:f8:84:ec:93:c3:9a:3c:98:95:b0:e8:1d:8d:3d:c9:
26:c4:8c:f6:e5:75:32:95:a8:ba:05:7d:77:e0:93:1b:d8:b7:
dd:ed:f9:98:08:e3:10:65:bc:c7:1c:82:6c:4c:ca:96:51:0d:
0d:7b:56:66:76:b2:91:d1:49:72:7f:56:21:cb:c4:f2:4d:1d:
6a:ef:80:3d:16:e4:d7:b1:1e:74:c9:cc:8b:8a:18:ea:67:06:
9e:44:b9:04:76:24:d1:f9:bf:e5:1e:b5:12:ae:8a:03:cc:da:
3d:04:b0:52:74:a3:e3:94:7f:c7:ca:79:5c:ce:58:b4:ad:8a:
33:1f:37:e2:f4:f8:6c:c0:35:e1:b5:e1:c2:5b:03:5a:8d:07:
06:77:24:42:69:b9:51:c8:15:52:c4:95:b6:5e:c6:c3:a1:3f:
a4:35:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:04 2026 by rpki-client