Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa
File: 40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa (raw, json)
Hash identifier: 3ov7r8EU87cEqZ4tqn/olSPNIBhaUA+Y7r6UcDkurGc=
Subject key identifier: 01:8E:A6:CA:0C:0E:A9:70:37:0A:F5:07:1D:C3:CD:64:98:BA:A2:85
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 385532D66B6B7BDFCC6FB6AE68C143CCD7203A4C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa
Signing time: Sun 06 Sep 2026 00:00:08 +0000
ROA not before: Sun 06 Sep 2026 00:00:08 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:55:32:d6:6b:6b:7b:df:cc:6f:b6:ae:68:c1:43:cc:d7:20:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 6 00:00:08 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=0f477f26be3825833e835f9209935bee8e89aae661be341cc8a422191e71b8e4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:85:3f:7b:46:1d:4e:84:a4:6a:9b:28:3a:
b9:6f:d2:23:29:24:5d:fe:9a:fd:d4:11:fc:f1:89:
18:da:f2:b8:73:bb:9c:27:98:e0:b7:09:c4:72:1f:
57:d4:e3:c9:f9:7a:f8:5e:43:1c:87:05:71:41:97:
4f:ef:46:d2:7b:f6:db:42:83:46:b6:ed:fd:39:13:
0f:e8:bf:57:8c:07:dd:a2:1c:6f:d5:1f:75:86:fe:
9b:81:7a:a2:fd:01:e6:77:44:1f:53:44:82:57:a9:
0d:65:f3:7b:15:e9:8e:88:ff:a9:57:32:f4:ba:81:
26:21:c0:05:1f:c8:4d:e7:29:cc:06:5e:38:31:1f:
29:ab:32:3f:8b:31:86:df:fc:15:f5:09:56:57:ba:
ef:35:b8:c3:19:d5:bf:a9:83:b7:ca:b3:4d:d7:9d:
af:c5:62:28:eb:1c:0e:c9:07:db:21:fa:11:44:1d:
80:f5:38:2c:23:60:8d:e9:6f:2b:80:5d:c3:fc:2f:
79:4e:4b:2c:99:eb:ff:a5:01:e8:c2:f3:06:20:e6:
31:be:c5:6a:4e:56:9d:b2:37:42:d6:42:45:55:28:
63:a6:a6:c1:8e:3e:63:69:60:a0:16:4e:67:99:0b:
83:63:6a:ca:87:3e:72:a5:61:c7:dc:c9:ef:77:fe:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:A6:CA:0C:0E:A9:70:37:0A:F5:07:1D:C3:CD:64:98:BA:A2:85
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/40cb5a3d-4f0d-4630-9769-6dc787de59a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f440::/48
Signature Algorithm: sha256WithRSAEncryption
7b:f1:40:6b:67:06:e9:a9:92:86:a8:46:0d:79:be:f4:fe:46:
10:fa:db:44:90:2a:9f:22:db:b7:6b:74:03:76:16:54:62:67:
f2:ed:da:bd:f8:cf:c7:4b:7f:a0:7b:96:a1:b7:75:ab:00:20:
6b:97:32:35:c0:3e:46:9d:f9:42:25:26:ee:bc:56:6e:d7:d8:
e2:7b:6f:10:d6:3d:e2:4d:e0:5b:30:5f:dc:12:80:d2:b9:43:
a7:75:64:73:9d:4a:cc:d5:ce:b9:a4:18:60:0f:f2:5c:ea:92:
cf:33:bc:17:ed:e9:48:76:a5:9e:25:9e:04:b8:f8:7b:b9:b0:
d7:8c:40:59:db:29:1f:5a:13:ac:ff:97:a0:11:49:a0:7a:81:
b8:38:15:10:2f:b4:22:a0:ab:e2:fd:aa:42:3f:75:f7:61:07:
6c:3d:2f:98:99:40:8e:33:5c:a6:5b:9a:08:58:de:dd:b5:a4:
8c:55:0f:8c:7e:d7:1e:f7:25:d3:be:50:87:f4:ca:5a:7c:d6:
60:6e:f8:9b:7a:67:dc:1c:58:b7:dd:93:1d:46:09:51:21:13:
dd:a2:a6:f1:b0:af:be:48:a4:23:b8:98:eb:35:70:63:50:42:
0c:96:94:19:f6:bf:a7:c6:9b:bb:e3:6e:72:68:ac:42:89:8f:
ee:93:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:13:19 2026 by rpki-client