Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/359a9122-fd59-4d98-8cb4-b8f026add67b.roa
File: 359a9122-fd59-4d98-8cb4-b8f026add67b.roa (raw, json)
Hash identifier: 2/LPPW3mgzpBDCqh+ufT3rThmXusF/3zzTJ56wr3uic=
Subject key identifier: 46:92:6C:65:35:DE:ED:F8:3F:55:36:88:3D:CD:56:49:5E:D4:3E:5D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5FBDDCF6CA76A6C5269BB82EED67A696753FF656
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/359a9122-fd59-4d98-8cb4-b8f026add67b.roa
Signing time: Sun 06 Sep 2026 00:00:06 +0000
ROA not before: Sun 06 Sep 2026 00:00:06 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bd:dc:f6:ca:76:a6:c5:26:9b:b8:2e:ed:67:a6:96:75:3f:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 6 00:00:06 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=296bb53ce81188672c7235a8928f3d1f8901a589b0598d28a51f6f717eaa11ec, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:f3:84:75:ab:29:f3:15:c0:40:82:1e:d0:
42:94:1b:05:ee:bf:74:a0:07:ff:05:ec:5e:77:f8:
bf:a0:c5:c0:7c:ab:21:03:85:e4:a8:b8:6d:7d:b3:
7c:21:5c:4a:70:cf:b3:c7:8a:f1:fd:bb:26:fe:ed:
c3:d3:4e:ea:2a:f7:98:41:cd:ca:9b:b2:b4:88:47:
46:3e:d1:39:24:d0:d5:17:d7:34:18:7a:ba:07:5b:
cc:e3:1d:2b:df:a5:db:fa:68:f6:8e:95:32:72:d7:
4f:f6:4d:ed:73:56:1c:87:6b:35:9f:90:0c:5b:ac:
5d:1e:e1:49:72:40:cd:9d:25:80:20:c4:f0:26:cb:
84:50:ac:01:36:ec:72:c6:54:3f:31:f4:b0:48:bd:
e2:f4:77:05:24:b2:ca:e8:8a:8b:01:80:c4:c5:a0:
e6:fb:ab:9e:6a:ca:4b:b9:f5:85:f1:09:48:80:9c:
11:fc:55:f9:e4:e4:94:10:41:7e:03:93:39:81:8f:
ad:4b:2c:e7:a6:d0:dc:0a:8a:35:37:da:6e:2c:fb:
14:26:c6:66:71:18:51:fc:9f:07:83:9a:3b:f1:e2:
dd:5a:fb:c2:3d:41:4f:a8:29:24:fd:ad:a3:47:04:
29:e2:7d:27:54:6a:42:a5:55:6f:f1:aa:40:e3:99:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:6C:65:35:DE:ED:F8:3F:55:36:88:3D:CD:56:49:5E:D4:3E:5D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/359a9122-fd59-4d98-8cb4-b8f026add67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f480::/48
Signature Algorithm: sha256WithRSAEncryption
a8:a6:e7:f0:15:c6:31:45:5c:08:3c:34:b4:41:d1:88:2b:8f:
1a:96:a3:e7:25:42:b8:25:33:fc:86:d8:de:be:29:f4:13:2e:
18:02:03:ce:ca:25:97:a2:31:70:a5:08:14:ed:e0:92:7b:28:
52:cd:73:ea:1e:b3:37:cb:b5:89:61:78:cd:f3:ba:3d:cc:98:
4e:d1:e3:b7:bf:64:2e:d6:e9:67:22:10:8e:6f:21:eb:d3:42:
22:7a:27:96:6b:f2:02:03:aa:ce:01:d4:e1:59:22:1c:00:6b:
7e:57:26:6a:86:65:4e:6a:cf:bc:a5:ea:53:c6:b9:20:44:d2:
b6:46:38:9c:ef:a3:29:4f:43:6e:e6:c4:02:a3:27:d2:56:27:
68:b6:d7:e5:18:dc:c6:2b:5e:a4:29:31:16:8e:94:fd:85:39:
83:15:7d:5f:79:f5:8d:bd:5c:c1:9d:70:0b:ad:04:57:21:6f:
ff:7f:af:c8:64:17:04:6b:5a:63:08:da:78:0b:60:96:22:d1:
20:66:87:10:f6:c4:7c:42:5c:67:e5:dd:0c:ad:3c:b2:96:8a:
63:60:d4:6e:d6:f2:8a:86:ce:30:14:6b:a4:13:af:74:e4:a8:
bb:bd:92:1f:e1:f3:2c:79:f4:a8:f4:15:b2:68:91:2b:66:ff:
0f:67:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:26:02 2026 by rpki-client