Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/21d4170c-c1ef-47cd-8708-3b0548bfa5c5.roa
File: 21d4170c-c1ef-47cd-8708-3b0548bfa5c5.roa (raw, json)
Hash identifier: GeD4YQdumz0g144rYV/+bC7vHwoADAEBDr8CNYHRPts=
Subject key identifier: 94:81:3B:54:3B:84:9F:C7:B5:88:CC:16:F4:78:87:3B:41:8D:C4:FB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 623A50AE69B1152C50B6EAD7B20F4AD24044E4D6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/21d4170c-c1ef-47cd-8708-3b0548bfa5c5.roa
Signing time: Tue 25 Aug 2026 00:00:07 +0000
ROA not before: Tue 25 Aug 2026 00:00:07 +0000
ROA not after: Mon 23 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3a:50:ae:69:b1:15:2c:50:b6:ea:d7:b2:0f:4a:d2:40:44:e4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 25 00:00:07 2026 GMT
Not After : Nov 23 23:59:59 2026 GMT
Subject: serialNumber=3b9c3ff0635481cf5e40863fe2b33a62297405e0d68199be837e568dec5e5c5e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:8d:66:24:83:22:33:43:a5:4d:b4:eb:f3:
75:da:3e:64:16:3b:85:21:2c:c8:a1:f7:7c:60:8d:
e1:6a:9c:d6:9f:46:8c:ed:a2:0c:b0:8a:d5:e6:e1:
d0:08:64:83:6a:9d:29:57:30:96:72:b6:bd:8d:27:
cb:5e:e4:7b:f7:b4:85:7a:86:75:1c:1d:7a:bd:64:
2c:99:f1:59:cd:54:60:8f:46:e6:bd:77:2a:e9:ab:
fc:cc:a9:3c:19:d9:d4:c3:98:f2:0a:06:98:2b:17:
13:17:0f:98:f3:32:6c:5a:d5:08:4f:f5:7a:ca:00:
bb:d4:1f:d1:2c:b4:b0:a2:78:35:be:e9:a8:ba:f9:
2e:c3:d4:3e:32:9e:24:90:e1:04:25:f8:df:42:e0:
8b:5c:81:33:6f:44:a1:a1:c2:64:6a:0b:ae:00:e2:
7c:e5:b9:bb:6d:61:2b:68:db:9c:f4:79:17:bf:3c:
0b:50:21:ec:74:ca:e8:10:e1:b4:e7:97:11:59:b8:
90:9d:95:7b:a2:ff:1c:d8:1c:0f:5e:56:c4:f8:0f:
35:a1:3a:73:f7:16:75:d0:0f:bf:a5:90:8c:e2:79:
80:12:e8:2b:53:3b:2f:2c:37:da:6b:0d:87:0c:6a:
80:5f:f3:68:2a:c2:e8:4f:e8:66:b9:83:6c:4a:f2:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:3B:54:3B:84:9F:C7:B5:88:CC:16:F4:78:87:3B:41:8D:C4:FB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/21d4170c-c1ef-47cd-8708-3b0548bfa5c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6800::/48
Signature Algorithm: sha256WithRSAEncryption
c5:7b:f8:81:cb:88:95:d5:ec:9d:11:38:6e:72:ea:19:52:d2:
c2:52:ec:96:36:e5:56:6e:09:6d:20:4b:23:e1:04:aa:79:74:
63:0b:d1:d8:11:e2:43:50:29:ad:5e:09:dc:fa:96:fc:31:6e:
26:58:ed:ea:e1:c2:a0:9d:50:a7:62:74:6c:71:4e:c0:aa:3b:
0a:f9:f0:5d:b0:3e:1c:ed:ca:14:a5:ab:f0:65:da:e0:da:e6:
d2:df:86:ea:57:b9:3e:91:4c:96:b2:d5:2a:d3:b0:d4:90:b5:
53:53:52:55:86:99:8c:42:08:a2:a2:94:6a:4c:2a:c5:ea:b7:
c7:52:a6:2c:1b:e9:39:e2:a7:9d:68:8e:38:ce:56:cc:3d:cf:
af:92:e7:08:80:30:7c:0a:7f:da:e5:0a:59:e0:57:fe:ce:b8:
34:9c:8b:0b:22:d0:a9:4f:b3:96:8e:27:66:70:fa:da:e3:dc:
81:ce:25:01:59:7d:e6:c7:ce:dc:75:f3:e8:92:ca:19:1b:f0:
7f:85:fd:8e:ef:5c:e7:e4:be:86:08:59:a4:d1:eb:86:37:0e:
a7:3c:41:db:df:4f:d9:8d:8a:2f:41:6e:e3:4e:55:b5:d3:e8:
aa:78:ca:15:fa:ad:8f:0a:96:b5:30:7c:1c:ff:56:a9:d4:b4:
be:ed:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:49:48 2026 by rpki-client