Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ef2e1fb6-d368-45de-866d-0e09f49b5eef.roa
File: ef2e1fb6-d368-45de-866d-0e09f49b5eef.roa (raw, json)
Hash identifier: vqTuME4BtT34BxOr8L17dgTBnw7lVERqtmQyiFoQMr0=
Subject key identifier: 14:D3:AC:5B:2B:54:F8:0C:F6:4C:33:79:15:A3:A1:7C:AF:92:AA:48
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0BA77C0C8345D8B1C243B03A3186CE6990286FE5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ef2e1fb6-d368-45de-866d-0e09f49b5eef.roa
Signing time: Thu 30 Jul 2026 01:30:35 +0000
ROA not before: Thu 30 Jul 2026 01:30:35 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a7:7c:0c:83:45:d8:b1:c2:43:b0:3a:31:86:ce:69:90:28:6f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:35 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=8e36724ba8260fe83e00f94cefda70c8877ce4ca1e5f999dc0ab2685a26ce8b3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:b3:66:74:46:85:3d:39:8b:26:2b:ac:df:
71:bc:16:d5:79:5f:0c:d8:50:74:48:fe:d3:58:34:
71:56:5d:cb:e6:76:e8:21:f1:c6:65:f6:dd:10:c3:
75:40:ff:b9:00:74:87:4a:36:42:69:00:5c:2e:f5:
2b:d1:2b:c8:1c:9b:dd:5a:d0:6d:5c:fc:e4:6f:2a:
8c:9d:23:37:fc:9b:af:11:05:a7:81:1b:ae:17:b4:
3e:68:3c:1c:d5:40:3b:c1:28:13:1f:7e:ad:e0:48:
be:51:98:90:6d:56:c7:8f:25:45:01:07:32:7e:3f:
72:a3:c7:b5:68:17:a8:b9:7f:09:53:a5:8b:96:af:
a9:d7:8c:64:3e:fa:8f:f5:f0:45:1f:27:33:7d:45:
e4:73:bf:50:0e:c1:84:21:92:3e:ca:a5:52:29:6d:
4b:ee:0f:8b:f7:3f:cf:dd:f1:89:e1:f2:f2:fb:f4:
46:54:28:22:e3:ca:89:ed:45:ee:22:d6:8b:82:3e:
77:f2:cd:67:51:e4:9f:75:3c:63:c5:30:a4:4f:68:
68:69:39:86:fc:6e:34:66:86:4e:fd:5d:19:e8:52:
38:5e:fa:64:0f:44:1c:ca:90:85:3f:c9:31:72:4a:
52:f4:a8:88:c4:a7:9d:0f:12:7c:bc:da:8a:ca:5a:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D3:AC:5B:2B:54:F8:0C:F6:4C:33:79:15:A3:A1:7C:AF:92:AA:48
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ef2e1fb6-d368-45de-866d-0e09f49b5eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0::/36
Signature Algorithm: sha256WithRSAEncryption
d0:bc:d1:f1:42:00:28:d7:69:5e:12:b1:04:28:5b:32:d0:97:
07:9a:1d:48:f9:66:8b:34:bb:0a:47:02:78:ab:e6:40:a2:5c:
6f:dd:c6:42:e4:7c:4e:ba:4e:0b:d6:15:8d:05:15:53:ca:ff:
32:81:27:9c:24:48:d0:9d:2f:87:a8:90:6c:e5:3a:b3:e2:da:
92:fd:60:04:99:50:e8:5e:d0:a3:b3:57:c5:f7:3b:70:b9:1a:
6b:ed:fa:ff:54:21:56:9b:71:db:22:77:af:d5:a1:3b:20:aa:
9c:d6:12:56:96:02:de:5d:1d:fa:28:e2:c8:67:cd:03:88:ef:
fb:a1:e1:cd:6e:d2:1e:49:5a:c2:e2:f7:c4:6f:6c:58:fe:71:
af:0f:19:47:a8:a0:28:a7:0b:ff:55:4d:60:6d:84:ab:a2:29:
0f:3b:07:48:20:53:c1:57:b5:d6:7b:31:5f:b7:82:0f:de:59:
45:c1:66:b5:79:33:f3:1e:af:46:e7:49:30:e1:34:f9:9c:8c:
c6:a1:60:f3:e7:68:02:ab:bf:71:d4:1c:31:16:bf:ae:c2:ae:
99:eb:5a:b2:ba:55:78:dc:8e:ac:e9:56:db:25:ef:51:ba:e5:
72:a8:f6:cb:65:8d:1a:46:9b:e9:61:71:aa:31:84:fe:78:e0:
b3:11:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:34 2026 by rpki-client