Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e9a9528c-cc4a-4cf7-8c6b-bf69a373d9d3.roa
File: e9a9528c-cc4a-4cf7-8c6b-bf69a373d9d3.roa (raw, json)
Hash identifier: L8kA0CY3zZtUzvNXTo5RNh1MLeKAnaoli46vsr7XbFE=
Subject key identifier: 2A:6C:2C:18:F9:5E:C5:BB:3D:33:E8:B4:7E:FD:8C:50:D1:2D:87:FD
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3D9679FBE0F72F44DA75BB8F50FAAF960DEC89BB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e9a9528c-cc4a-4cf7-8c6b-bf69a373d9d3.roa
Signing time: Wed 12 Aug 2026 21:05:32 +0000
ROA not before: Wed 12 Aug 2026 21:05:32 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:2880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:96:79:fb:e0:f7:2f:44:da:75:bb:8f:50:fa:af:96:0d:ec:89:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:32 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=ba42c420b53267bfcf1f01811db102408ca73a5956001f82b297426818d32dc5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:71:24:fd:c3:9f:d2:ba:98:59:50:be:b3:b2:
f7:e0:7c:d5:6b:19:e8:d7:b5:7f:cd:b5:b9:ea:a8:
ee:7a:f1:83:c1:32:34:86:87:9c:77:c2:47:e7:6e:
46:94:9b:b8:4c:04:c1:e1:1c:3c:1f:71:6c:ba:77:
c1:e7:d9:cf:42:05:cd:bf:1f:99:6a:ea:aa:79:58:
9b:a9:3d:b3:02:67:8d:ce:e7:72:da:33:36:72:da:
03:cd:68:75:c4:3e:e9:22:c7:5a:08:fa:98:00:0c:
0f:a1:bf:47:90:95:4b:08:c7:ea:fd:f1:69:24:01:
61:d2:9b:7e:f9:42:03:19:0a:e8:04:ec:73:dc:ca:
46:47:12:74:2b:8a:7d:f0:b5:3a:7a:75:13:6d:1e:
bd:6e:66:00:03:ca:d9:d2:43:bc:b7:d9:ad:b3:09:
50:f7:b1:cd:08:93:ae:b1:50:6b:34:c3:f3:37:b8:
20:a0:7c:b2:68:29:a9:61:dc:1c:f2:eb:c7:32:6c:
6c:da:31:6f:ce:8a:fb:25:c6:9f:15:d3:95:cc:a0:
15:9d:dc:cd:ab:cf:be:4c:25:0e:35:72:fb:49:2a:
77:1e:0e:ee:d9:0e:1d:09:7f:91:c4:bd:4b:e0:07:
3c:c5:9e:e9:65:86:5e:73:33:ec:d6:83:65:3c:e1:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:2C:18:F9:5E:C5:BB:3D:33:E8:B4:7E:FD:8C:50:D1:2D:87:FD
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e9a9528c-cc4a-4cf7-8c6b-bf69a373d9d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2880::/48
Signature Algorithm: sha256WithRSAEncryption
4f:0b:44:ca:28:39:52:cc:ee:4c:c7:d1:bd:43:b2:68:6c:f8:
6e:47:81:aa:82:fb:24:58:b5:f9:a6:0f:be:4e:b1:1c:75:40:
1f:12:9d:d8:da:ba:a2:da:25:d6:08:d2:22:38:e9:1b:20:10:
48:40:88:8c:20:76:8a:0b:61:ad:5f:37:44:82:9c:80:43:b1:
c0:65:e7:39:00:20:ad:0f:b9:a2:61:c8:eb:9f:2e:95:55:ad:
4a:24:48:63:b5:3f:e7:39:5c:07:66:ce:a7:12:16:de:f1:5e:
d7:d9:a8:d3:8d:bb:e9:63:eb:5e:d3:c0:2f:0a:87:a6:7f:33:
9b:07:5f:6f:bc:bb:66:80:a5:db:30:cf:04:02:b9:a9:9e:9a:
cb:d8:ee:92:41:eb:7d:d7:68:f9:cf:fa:ba:ee:48:c6:e8:a3:
70:c7:3a:5f:e2:e8:db:64:b4:b5:e5:1e:06:7d:88:2d:b1:0b:
55:db:7f:7e:1a:62:62:44:e0:b0:28:ca:38:65:f0:ce:30:4d:
08:b1:6a:57:34:91:03:5a:3d:96:ba:4b:91:33:ac:40:fb:89:
54:f1:9a:02:8a:15:54:66:8d:46:59:48:eb:e3:d4:78:fd:d1:
c3:20:51:a1:21:14:53:d4:b8:33:34:93:e0:02:d2:99:d8:3c:
7f:b4:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:50 2026 by rpki-client