Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa
File: 5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa (raw, json)
Hash identifier: hbC5xfcMA+l3HrL3ahgMefT5uSzE897mKwo12EHDyoc=
Subject key identifier: 9A:D5:8B:6D:3A:B8:76:82:16:40:19:38:70:90:44:9F:5A:16:38:2D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 365E2DF9353B32773AA928E0DEA3C793983B6C12
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa
Signing time: Sun 06 Sep 2026 00:00:07 +0000
ROA not before: Sun 06 Sep 2026 00:00:07 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5e:2d:f9:35:3b:32:77:3a:a9:28:e0:de:a3:c7:93:98:3b:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 6 00:00:07 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=66202881c37bec8d4494ea7f579317d500cc600f0351d94f06a46eabce030cff, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:2b:08:99:30:dc:94:ed:67:dd:b6:b0:6b:
7a:e3:2e:5e:82:ba:49:28:8c:3d:6d:c2:ef:16:36:
92:99:38:a0:78:db:4c:e9:b9:09:2f:a8:45:f3:88:
90:8f:ac:b3:36:5c:33:a1:9b:f8:ee:30:f2:40:e8:
df:cc:a3:9b:c5:cf:80:31:5f:7a:5d:a9:49:67:4c:
6c:fe:8e:66:5b:5b:da:19:e9:61:8b:c8:59:f9:0f:
a3:da:db:26:c8:ad:aa:49:da:94:36:ac:e4:93:c0:
bb:ad:f1:4c:1c:c7:e9:78:c8:8e:e7:33:56:7f:fd:
f0:46:27:99:57:4a:de:47:82:f2:b0:0b:dc:a9:d0:
cb:2f:4f:0d:7d:d4:51:9c:46:1d:b4:13:e8:0a:18:
2d:38:19:b8:d6:32:b5:cf:b2:b4:9c:27:da:39:59:
47:24:bc:4b:6b:6a:91:1a:05:c6:07:4c:6d:c8:4c:
f1:d5:71:18:30:ed:e7:e4:6a:4c:e4:8c:2a:18:8a:
78:94:0e:33:ae:b3:dd:0c:f0:75:e2:ec:11:5d:d3:
fc:6e:a6:2e:85:89:76:d8:d9:70:ec:7f:4e:70:c9:
34:85:0f:9d:b8:b1:f9:8a:d6:8c:c0:bb:a6:18:d9:
c2:f6:18:4d:59:4f:45:fe:a9:0d:8d:fc:34:01:a5:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D5:8B:6D:3A:B8:76:82:16:40:19:38:70:90:44:9F:5A:16:38:2D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5d53db3e-52cf-4ade-8a3d-1e1d3a183fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f400::/40
Signature Algorithm: sha256WithRSAEncryption
17:9f:0b:73:62:4c:7f:35:a7:ae:ce:41:bd:9b:2b:cf:2f:99:
d6:ae:3b:f6:79:01:66:0d:01:21:2e:07:e0:9a:c9:6e:45:c8:
eb:61:e9:de:52:02:8e:74:e1:06:dd:4c:b0:83:e1:8f:80:1a:
3f:48:ee:e1:3e:9c:e1:31:62:b6:5d:2a:b9:62:54:b2:10:45:
b0:a5:92:80:f7:68:90:ad:49:99:fb:fa:7d:3f:80:83:ac:a3:
04:9a:66:16:12:1f:c7:02:ef:4c:82:14:6e:09:00:71:14:6a:
75:6d:6e:2e:01:b2:cc:d9:e8:29:11:e8:ed:0c:e2:0a:22:ea:
ac:ad:8c:7d:a4:79:fe:b7:4c:32:27:ff:6b:05:08:b5:e0:1d:
cf:86:95:33:93:1f:66:a7:d2:ea:e6:9d:3e:ad:d8:c5:d4:74:
5b:39:dd:75:69:87:e8:16:8d:99:b7:63:8a:e5:e9:7f:19:23:
bb:7b:7e:15:fe:14:dd:22:7e:8e:d8:d7:da:6f:6e:a6:0e:a8:
6a:f1:6c:a8:48:a1:27:c9:89:68:c8:3f:1c:78:4c:5a:31:38:
79:1a:f7:48:77:7e:dc:a7:83:e7:d6:40:8b:ad:1c:4f:65:d6:
b9:16:31:e4:e3:d5:89:0b:f7:4a:74:ae:9c:1c:17:e6:02:f3:
d2:2c:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:36:21 2026 by rpki-client