Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f7c8f8c3-c979-4a23-9820-1f21b788eb60.roa
File: f7c8f8c3-c979-4a23-9820-1f21b788eb60.roa (raw, json)
Hash identifier: P/dynqSmtX5uwTN0zM7gCkInC5RsO9X/MdtJQTfFayI=
Subject key identifier: 7A:1D:C1:BD:85:8C:D1:0C:B4:10:48:F0:14:3F:38:03:96:87:32:B4
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4B18286CEF23BC8B39E334255E5CD650663F32F0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f7c8f8c3-c979-4a23-9820-1f21b788eb60.roa
Signing time: Wed 12 Aug 2026 21:04:28 +0000
ROA not before: Wed 12 Aug 2026 21:04:28 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:2020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:18:28:6c:ef:23:bc:8b:39:e3:34:25:5e:5c:d6:50:66:3f:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:28 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=cd8fd93da5a0b3c8d73f19b9bc4339c9d546396f7ed7284e02df18fff2971b59, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:34:80:17:fe:42:b7:81:b7:a3:cc:1c:9d:
49:e7:06:c1:0f:ac:61:53:e6:58:96:21:11:dd:11:
8e:fd:52:93:7d:12:43:f2:a9:67:88:18:6e:ce:e8:
9e:a4:5d:11:b7:f1:a9:16:1c:dc:3b:66:35:ac:05:
b1:98:33:e8:cf:56:1a:41:82:fd:2a:20:99:5e:f1:
3d:f3:92:04:3a:d7:50:18:9b:47:ab:37:c4:66:09:
45:c0:65:81:59:8a:90:ec:3e:c1:ed:bb:22:4c:08:
fc:55:ce:e2:17:6e:9f:01:8a:1c:30:91:1c:6b:84:
17:9d:f0:bf:88:b9:72:06:cb:de:e6:91:23:3b:2a:
67:6e:93:08:85:ec:70:01:55:6c:e7:3c:11:35:b1:
2a:c7:f7:4e:e0:e0:72:85:b4:29:52:f8:23:b9:b1:
05:57:70:fc:0a:11:e9:8f:dd:bb:f4:d1:00:35:a2:
c2:f5:a0:a8:75:73:79:d7:01:17:a6:e9:41:32:22:
f3:5f:28:59:97:1b:05:91:3d:eb:fe:ae:5e:1d:89:
26:09:73:11:41:5b:75:18:ec:e6:a9:e6:c6:ef:95:
07:86:25:b1:7a:4a:c8:18:2c:26:2b:d8:d8:05:09:
f0:8d:3b:e7:df:7e:cc:0a:9b:90:a1:65:9a:ac:c8:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1D:C1:BD:85:8C:D1:0C:B4:10:48:F0:14:3F:38:03:96:87:32:B4
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f7c8f8c3-c979-4a23-9820-1f21b788eb60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2020::/48
Signature Algorithm: sha256WithRSAEncryption
6e:6e:d7:70:77:00:a5:3e:a8:c9:9d:49:69:5e:88:8a:f4:94:
cc:1a:ad:7d:c8:ca:a4:f2:39:dd:63:e4:fe:f7:6f:c0:8c:8c:
0c:4c:86:a7:fe:0c:4a:16:84:f0:ee:77:78:f2:96:11:f3:ab:
e6:18:58:84:d6:86:01:86:e8:52:72:b8:39:85:6a:d2:fa:62:
ac:34:50:1c:e4:8c:26:97:22:29:97:ef:ff:2b:e7:5c:7c:8a:
be:a7:5c:8b:85:5e:d5:91:f7:57:9b:dd:33:be:98:6d:49:ca:
05:66:01:50:10:36:e0:a3:27:6e:45:45:b7:c6:79:e4:e8:0e:
fd:7c:23:ab:92:7d:61:c7:bc:2b:d3:80:04:1c:5b:07:27:da:
1c:c0:b5:5c:fd:b7:7d:f4:7b:1c:8b:ad:73:45:bd:7f:c2:2b:
8d:6f:07:bb:d4:f2:ac:d9:ad:d2:33:1a:3f:88:ee:b5:87:87:
1c:a3:3d:3a:93:2e:51:0e:57:a4:1a:54:af:7b:4d:99:9e:98:
cf:f6:9d:f7:c4:1f:8d:bf:9a:ee:a4:7e:65:38:15:23:2e:87:
6d:de:f2:85:26:9b:64:e6:82:89:b1:19:12:f3:1d:31:5b:95:
ff:fa:b9:74:db:4f:65:4c:ae:8e:1e:8f:58:e2:0a:dd:eb:40:
90:a2:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:32 2026 by rpki-client