Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e9f4ce17-d5bc-43d8-8103-26915437335f.roa
File: e9f4ce17-d5bc-43d8-8103-26915437335f.roa (raw, json)
Hash identifier: Kx4fSd5CJSmGcomNHMn30HdyRzo33wqp977BV1lBt2k=
Subject key identifier: 63:37:1E:D1:BC:2F:62:84:AB:A1:BC:51:99:36:05:02:AA:E7:83:48
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 41C95F7ACFF71E25A2C1B1975E5BBAC2F702B3C9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e9f4ce17-d5bc-43d8-8103-26915437335f.roa
Signing time: Wed 12 Aug 2026 21:04:21 +0000
ROA not before: Wed 12 Aug 2026 21:04:21 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c9:5f:7a:cf:f7:1e:25:a2:c1:b1:97:5e:5b:ba:c2:f7:02:b3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:21 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b0bf0e0243c54e28e4e1e79a484b6e973d5aa0f3f1cdcd27ea1275d25b20c8c7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:fd:c0:8d:e3:b5:1d:6a:7a:9e:3e:d4:aa:
87:58:31:e3:15:38:3b:ff:b6:ce:22:28:0a:f4:14:
81:0b:d9:12:c0:63:f6:a6:33:87:95:6b:32:eb:61:
a7:47:0d:e7:84:26:45:82:80:05:55:ee:63:71:b5:
a0:40:9f:08:3a:f7:67:34:e4:24:d8:c6:ca:1f:f8:
5b:7d:1e:75:e2:8a:cd:ec:50:e6:58:30:fa:bb:56:
9c:03:3d:cb:f1:cd:71:88:b6:32:b5:ca:82:11:48:
78:b3:ce:5b:eb:7c:e5:84:2d:40:be:86:fc:70:ae:
6e:4e:6b:4b:dd:39:a1:80:3f:c8:64:ba:98:e2:95:
25:72:22:1b:35:70:55:3d:d5:84:28:19:41:42:41:
13:2d:ae:5f:7e:09:31:b7:3e:3a:78:7b:11:c3:05:
90:90:79:e3:15:72:aa:7e:fe:56:26:e2:74:0f:47:
85:38:30:68:90:49:ad:bc:71:37:ad:06:4c:c2:08:
ca:6a:d3:cb:b9:fd:9d:1b:a2:66:8f:70:48:dd:74:
d0:a6:00:69:be:04:15:c7:fb:93:d3:e1:5f:28:0a:
a7:cc:2f:e5:93:f1:9b:25:2e:09:cb:1d:79:66:7a:
63:c1:69:0c:1a:8f:3b:dc:49:2b:20:58:2b:77:51:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:1E:D1:BC:2F:62:84:AB:A1:BC:51:99:36:05:02:AA:E7:83:48
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e9f4ce17-d5bc-43d8-8103-26915437335f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b000::/36
Signature Algorithm: sha256WithRSAEncryption
7c:84:e5:e3:e0:03:58:4d:fb:93:95:33:94:57:8b:53:7c:a5:
02:95:5d:87:4f:f9:fd:c2:f0:f0:6c:b3:0c:17:ff:a9:37:25:
3c:c1:e3:bd:61:06:63:76:f0:3c:9f:ca:05:b3:6c:8a:f3:a3:
1e:17:f8:f3:a9:26:bd:58:ac:3b:6d:88:21:a8:40:a5:97:4d:
5c:d5:1c:71:40:36:62:c3:e7:fe:6c:49:f4:eb:3b:b0:84:0f:
c5:24:c4:47:64:23:25:4f:7e:08:ef:a8:11:65:f4:28:23:9d:
0d:45:3e:38:6b:b2:8b:a1:4c:79:d3:a4:0c:59:8d:02:bc:dc:
2b:c6:59:29:2f:1a:35:ab:ab:98:3c:f5:a3:78:9d:86:b5:c9:
f9:b7:4c:8a:ac:b7:c1:5e:86:59:b2:3a:b4:5f:dd:2d:e0:39:
67:df:12:0e:a2:7c:98:cf:ba:1b:f7:93:3f:0f:9d:fd:db:24:
86:bd:a2:55:55:42:06:38:0b:a9:74:34:a0:cc:bd:33:10:c7:
39:de:f0:86:02:81:28:5f:38:f8:61:0f:fe:2e:54:b1:a6:91:
be:6e:f0:00:6a:04:ec:c1:1a:bf:25:ae:8c:df:a5:0c:a6:38:
3b:c9:f1:f2:8a:28:c4:c3:d9:0a:d6:c0:0f:ea:ae:8d:cf:e5:
8c:b3:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:45 2026 by rpki-client