Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ecfac2f3-79d5-4611-9977-14a354495dc8.roa
File: ecfac2f3-79d5-4611-9977-14a354495dc8.roa (raw, json)
Hash identifier: +41MyMMF5Wrl6Q+/MDgNCbW0/oR6U4GVlQJ35+KDAVQ=
Subject key identifier: EB:D5:8D:8B:B7:1E:CA:1C:4D:A1:EE:DD:43:F2:4C:51:A2:47:9B:C4
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1CDD488A7B0099BE11F71F68AF9D511FCC28074B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ecfac2f3-79d5-4611-9977-14a354495dc8.roa
Signing time: Thu 30 Jul 2026 01:30:36 +0000
ROA not before: Thu 30 Jul 2026 01:30:36 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dd:48:8a:7b:00:99:be:11:f7:1f:68:af:9d:51:1f:cc:28:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:36 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=9e51fe18706db69ba5509915604ae720ee9b47fec1b90ad32a699dd43159d86b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:42:a4:fc:bc:93:bb:fc:27:a7:b7:3d:fb:
5c:dc:01:66:a5:ae:c3:d3:8e:c4:28:8d:08:91:c1:
27:0e:34:3f:44:ed:05:70:aa:aa:2b:96:78:c0:7f:
0a:66:2f:9f:cf:94:9d:89:09:df:72:d4:fe:de:5f:
3d:21:03:54:6b:c1:5e:b4:ed:b4:3e:11:e3:ce:3f:
21:50:34:1f:4f:0e:f1:59:67:8c:90:36:41:89:9f:
bd:e0:e1:50:13:6b:2c:99:32:04:4a:01:75:99:d1:
64:ec:23:6a:ef:65:27:0d:61:71:9e:29:5e:b5:0b:
5f:5d:b9:f1:c3:fc:6d:83:25:67:9c:66:e3:f3:c1:
7d:5d:19:10:da:fb:4a:2b:dc:ee:c6:11:4e:e4:6f:
dc:80:95:b8:0e:e0:01:76:f1:b4:c3:cf:9f:b9:ce:
fd:76:b4:bd:d8:1b:47:17:05:ef:a3:dc:47:7d:22:
ab:50:38:4e:2e:8f:ef:ba:fd:fc:e4:a8:d7:69:70:
ac:21:18:26:31:e5:f6:1b:72:23:99:5f:37:20:7a:
03:83:a5:4a:e4:13:4e:28:40:32:24:f3:c2:bf:2a:
c6:eb:51:1a:22:e6:67:ec:51:93:b8:84:0b:79:60:
75:c0:6a:36:ff:bb:51:b2:25:8f:f4:12:c3:d0:f9:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:8D:8B:B7:1E:CA:1C:4D:A1:EE:DD:43:F2:4C:51:A2:47:9B:C4
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ecfac2f3-79d5-4611-9977-14a354495dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
23:8d:5b:29:a4:9f:62:69:96:11:68:2e:28:e0:34:8e:37:e8:
ad:14:03:86:dd:91:80:3d:74:54:24:f9:c6:27:68:23:90:ee:
80:67:50:6c:bb:fb:87:c1:7e:11:28:c5:aa:0c:1b:15:f8:0f:
8d:53:a5:e8:0e:19:58:a5:ec:b6:1b:8d:79:5c:e7:6c:e8:1c:
e2:49:bf:cd:27:5e:8d:d0:a9:66:ab:92:dc:2d:3c:04:e9:43:
7e:53:7a:46:be:23:8e:3b:e6:d8:1c:90:28:84:97:09:85:0f:
9b:c2:06:3d:40:56:25:47:d0:ca:d2:0c:b9:1a:27:61:68:5d:
e9:4f:5f:90:17:b7:46:4f:da:af:14:77:a4:8e:9e:88:8a:4e:
06:a3:08:53:d1:1e:99:35:be:d2:4e:bc:30:97:0d:7a:ba:d2:
6d:9e:48:2d:4b:bc:56:6b:b6:dc:5b:08:d6:51:9e:b3:26:e7:
d4:c2:e7:ae:b4:ba:1a:a3:06:a4:5c:4f:ae:3e:12:65:23:ac:
37:c3:68:1b:9e:7d:59:d3:a2:9c:45:bc:92:4c:7b:02:a5:69:
4f:18:a1:f5:71:5e:40:b8:c8:c0:f3:be:f8:e2:d9:e3:89:06:
39:7e:45:0a:b1:48:25:c2:d9:ed:be:17:92:51:c4:44:b5:54:
ca:ff:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client