Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3adb09a8-6887-4e26-acd9-71256c2c7434.roa
File: 3adb09a8-6887-4e26-acd9-71256c2c7434.roa (raw, json)
Hash identifier: YUP7b89rMtx+LATnRl9nzpkUjgfVJ5qhk3PNUY970XM=
Subject key identifier: AC:F5:B6:7D:62:9D:51:21:6D:79:18:F0:71:2F:AA:3B:BE:13:1B:5A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 2B36E73EB22039D5D09CEADA6405E416AB718C4E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3adb09a8-6887-4e26-acd9-71256c2c7434.roa
Signing time: Sun 26 Jul 2026 00:00:38 +0000
ROA not before: Sun 26 Jul 2026 00:00:38 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:36:e7:3e:b2:20:39:d5:d0:9c:ea:da:64:05:e4:16:ab:71:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 26 00:00:38 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=4d41c555e82dbfa7238a06b8e939a6be202e325687f8bd118efb8f17749635e7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:22:e5:c0:a0:ba:0a:77:46:45:8e:1a:d6:
ec:6d:07:3f:03:09:51:7a:40:c2:1b:ac:ab:a4:16:
3c:0a:56:6c:63:77:8e:14:39:cb:1b:10:4c:c2:48:
b7:13:15:97:84:a1:75:91:a0:a8:a6:92:f9:d5:67:
57:8a:f9:1f:da:08:02:f5:5b:06:7d:dc:95:21:4f:
03:ed:e9:75:3c:74:19:ec:50:b0:8a:b3:7e:0b:c0:
15:80:7f:e7:07:82:cb:e9:9f:9d:56:67:f2:bd:61:
7e:4a:31:fe:f8:bd:d5:43:2b:75:cd:0a:c6:40:07:
42:91:4c:70:9f:90:d9:f1:e2:44:6e:25:57:22:b8:
a4:8f:78:69:8c:6f:76:c6:c3:f2:7d:2a:34:ae:1c:
52:6a:b9:e6:2b:9d:ec:a5:08:92:d3:b4:c5:5f:8a:
33:2e:1e:4d:b4:13:c8:47:f4:69:b3:49:b1:52:d0:
7f:b9:7f:35:2d:83:d0:f0:e0:d7:6a:84:85:1c:8e:
50:95:37:21:41:2c:fb:a5:47:f7:23:a3:4b:fc:31:
15:c1:dd:47:a6:43:99:c6:22:b0:96:10:c5:67:d3:
18:7a:13:56:7f:20:4d:65:ee:b3:7c:eb:60:c5:e3:
72:58:b5:dc:66:73:5d:19:0c:d5:a8:2c:2f:24:a2:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:B6:7D:62:9D:51:21:6D:79:18:F0:71:2F:AA:3B:BE:13:1B:5A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3adb09a8-6887-4e26-acd9-71256c2c7434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2000::/36
Signature Algorithm: sha256WithRSAEncryption
73:bf:63:14:c1:a0:33:e1:34:59:ec:73:ca:e2:b7:8f:cc:a8:
64:0a:bf:35:cd:ac:c3:8d:e6:e9:11:09:1c:d5:4d:3e:99:9a:
bc:42:8f:1f:47:92:d9:b2:d0:ef:da:e7:e3:ec:e2:8d:69:a2:
b1:a7:07:cd:33:0d:dd:58:4c:78:5e:1b:36:d1:bb:70:0e:3f:
db:f8:e7:64:e7:c3:e4:0e:42:b5:63:f6:95:59:a2:02:9b:fe:
71:c6:8d:ad:b1:e3:b5:ea:76:f4:ce:a0:f0:1e:68:17:48:16:
2a:10:bd:25:59:35:5b:e7:aa:68:6e:5e:66:d4:c8:e3:51:26:
b3:a3:2b:1a:56:5e:ac:0c:f3:fb:62:37:32:03:79:6e:72:fe:
a6:83:64:a0:e6:01:03:d8:89:69:24:c9:bc:5c:0a:c1:6a:9d:
d8:88:69:d1:dd:02:8e:ac:e7:a3:e4:74:85:da:2c:5d:25:56:
6c:fe:66:0b:91:bd:5d:d3:24:ce:aa:19:80:9f:0a:67:5c:ee:
87:65:fd:16:1d:e1:d6:47:73:5f:b0:02:f7:37:f5:85:c8:b7:
93:f3:2c:3d:be:07:82:6e:40:ab:a5:7c:f7:33:71:6e:b6:c4:
f7:e3:af:da:05:b5:65:78:54:f4:85:08:e7:bf:58:45:63:00:
ba:0a:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:29:00 2026 by rpki-client