Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f0473587-345b-4fdd-b3ed-1e88e69fa930.roa
File: f0473587-345b-4fdd-b3ed-1e88e69fa930.roa (raw, json)
Hash identifier: x514R7zQvd1XjuXipUYH9tljQXqfypQ/nsdS/0coqv8=
Subject key identifier: 0C:7B:2C:6C:F0:DD:9A:A7:B2:48:CE:34:7C:0E:60:E3:B9:30:7A:5A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1EB89922A63702F05A943B92A6E38BF91346EB3C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f0473587-345b-4fdd-b3ed-1e88e69fa930.roa
Signing time: Wed 12 Aug 2026 00:00:14 +0000
ROA not before: Wed 12 Aug 2026 00:00:14 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b8:99:22:a6:37:02:f0:5a:94:3b:92:a6:e3:8b:f9:13:46:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 00:00:14 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=7c29f0aeff6d9eb4a6cb8a15161f06264f2befb466a78617661b7d04caaed5b1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:95:ae:23:db:c7:67:03:61:5d:88:4e:a3:
48:7c:a1:61:06:94:0b:30:74:93:36:fd:8f:e7:e5:
4e:f0:dc:28:98:8e:ba:51:db:39:34:08:f4:87:ac:
c5:34:aa:69:3e:d2:57:49:36:c5:bc:85:20:90:84:
52:1d:0e:62:c5:69:9f:7c:58:7b:ef:c8:b1:bb:8f:
fb:bc:b5:48:03:b1:ab:97:ec:d0:1f:9c:8e:30:5f:
d7:77:a4:1d:59:0b:07:be:14:93:f1:ec:4f:19:71:
46:82:05:90:8a:2a:d3:8b:8b:98:f7:75:4d:d7:38:
02:e4:0a:e2:65:61:2f:04:82:79:d0:86:d3:52:49:
01:86:5f:f9:eb:91:2d:02:06:69:9d:d1:77:36:e9:
25:aa:1c:19:24:73:ed:3f:c3:8e:00:82:62:27:72:
f1:79:21:f7:5a:f7:2c:e7:9c:cd:c2:89:97:eb:3f:
ad:26:47:68:9c:c4:2d:6f:2c:4a:8b:6d:64:c7:50:
fe:fd:bf:a7:05:10:e0:fc:4c:ac:85:3c:c0:97:7f:
cb:c0:a4:84:37:91:66:e5:a9:e4:3d:fb:fe:47:f3:
ca:9d:50:fb:83:8f:3a:84:6b:9c:47:43:34:20:59:
bf:b8:31:d6:f6:45:85:33:57:06:59:e7:df:0c:17:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:2C:6C:F0:DD:9A:A7:B2:48:CE:34:7C:0E:60:E3:B9:30:7A:5A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f0473587-345b-4fdd-b3ed-1e88e69fa930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3008::/48
Signature Algorithm: sha256WithRSAEncryption
34:b4:11:4d:80:df:2f:74:ce:4a:da:ad:0a:02:b5:45:99:b1:
96:7c:7c:80:af:57:47:f5:81:c1:a6:69:9b:98:e8:53:cd:50:
a3:ee:cd:ab:21:db:6c:14:61:b6:6b:dd:6b:91:ce:f1:f1:c0:
d8:40:3e:59:23:e6:6e:1b:6d:84:15:87:48:91:6b:48:2f:11:
01:64:6c:f6:1a:c4:2f:c7:ba:4d:2a:f9:c8:f0:60:03:0a:7a:
e8:5a:51:88:3a:38:e5:33:d5:95:c2:77:95:d6:32:9d:42:8c:
bf:59:3f:5a:7f:d6:42:ff:63:1b:59:73:8e:e8:12:cc:b7:d2:
78:26:56:36:74:c3:42:89:cc:ee:a7:2c:a7:2d:c9:12:c5:ee:
bb:3f:2f:94:ca:9e:61:84:31:31:66:ad:42:05:a1:d1:4e:10:
19:5c:e1:58:07:13:87:f7:28:24:6b:a0:19:19:db:96:c8:40:
17:fe:41:24:8b:de:d0:6f:8b:24:b2:db:80:a3:eb:8b:e6:aa:
1a:cd:df:6f:c6:d0:c7:cf:a8:fa:10:83:b1:53:ff:09:d8:68:
f6:f7:c7:10:a8:22:45:7a:1a:eb:20:f2:61:29:f6:4b:29:f6:
da:59:5a:63:30:ba:ed:03:70:82:9b:f0:e9:ca:c5:35:7d:da:
52:de:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:28 2026 by rpki-client