Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/622b7507-36ec-4fc2-a063-e1e7f57993fd.roa
File: 622b7507-36ec-4fc2-a063-e1e7f57993fd.roa (raw, json)
Hash identifier: QvP7fZXwZas+w791vEMSjvMOQVQVGbJN8OANJG3Gm2g=
Subject key identifier: EB:99:71:8B:43:CB:83:6D:77:B7:07:E6:DC:A4:28:4A:32:DB:82:96
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 67E59E1881D529A50474859DFD143A9ACACCF417
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/622b7507-36ec-4fc2-a063-e1e7f57993fd.roa
Signing time: Sun 06 Sep 2026 00:00:07 +0000
ROA not before: Sun 06 Sep 2026 00:00:07 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e5:9e:18:81:d5:29:a5:04:74:85:9d:fd:14:3a:9a:ca:cc:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 6 00:00:07 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=028954ce97a3793ccb88f52acf4dacf5eb40844cadfa770027397d0adcc1e012, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:50:95:7d:1a:5c:64:63:55:60:b1:32:d0:
e5:06:d7:22:37:7e:86:12:10:bd:e2:42:a3:a9:c4:
39:c1:64:a6:a4:b3:11:95:ef:51:ab:35:41:a2:aa:
61:2c:6b:a7:63:c2:b7:ac:f8:35:94:a7:5c:56:f9:
77:7f:21:8a:e7:4c:ec:19:06:f3:fb:7b:a2:ed:ff:
2a:47:4d:c3:f9:9b:f3:83:8a:f5:f0:31:a6:a1:80:
9a:5e:3a:54:4f:2d:c3:a7:f1:f9:b9:01:e5:e1:34:
75:c9:c1:b5:e5:fb:58:05:db:36:5a:a3:a0:95:f7:
7a:c2:af:a8:ed:34:07:80:b3:f3:9f:11:02:ae:38:
f0:d3:55:60:6d:b4:1f:81:a0:f6:5b:ef:97:9d:64:
b1:6b:60:22:4e:66:fb:ad:65:1e:fc:9f:ff:c0:76:
10:d1:31:4b:52:5d:b1:d5:9e:0f:8c:cf:b6:34:7d:
d0:f6:d4:e5:52:04:c9:71:3c:bc:8b:18:48:7e:c3:
df:5d:0d:0c:31:d5:7e:c9:65:e5:31:4b:f1:9d:38:
b9:f5:ab:90:1a:21:ac:45:a7:d6:b6:93:70:43:87:
65:86:d1:6b:f7:ec:ec:ec:81:b6:1e:9a:32:b7:06:
42:df:7b:e7:25:5f:8f:36:ab:f8:fa:f1:1f:8d:ad:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:71:8B:43:CB:83:6D:77:B7:07:E6:DC:A4:28:4A:32:DB:82:96
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/622b7507-36ec-4fc2-a063-e1e7f57993fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f480::/48
Signature Algorithm: sha256WithRSAEncryption
a0:1a:af:ff:ca:92:62:a1:94:6f:b3:37:50:57:c5:96:f0:ca:
d9:30:5a:7c:f1:1d:f0:71:ea:46:19:5f:79:6e:3e:2f:6b:31:
6b:c2:51:6f:80:57:8f:77:d2:00:ad:1b:56:c7:94:4d:ca:c8:
f2:91:29:2b:69:d5:25:62:6d:d0:66:4b:01:53:74:a3:87:23:
00:ba:56:3d:7f:21:95:56:20:20:57:98:ca:02:4c:6b:9c:e9:
e9:97:55:ae:40:6f:09:7e:74:82:fa:36:02:04:26:60:2a:cb:
fa:ee:09:e0:ef:56:8d:08:20:a6:ae:a8:2f:2a:29:10:58:fd:
65:0c:fa:61:89:d8:b9:88:a4:7a:8b:09:77:fd:80:b7:b5:9a:
02:ce:fc:ba:94:eb:a4:7c:c6:21:5c:51:7b:25:5e:2d:3b:0c:
0f:fa:0b:0f:5c:6c:ed:32:be:3f:15:d5:0f:30:cf:5d:53:b2:
43:51:c1:55:83:1b:63:4f:64:63:c0:20:1f:a8:39:01:d3:0c:
ea:54:34:73:5b:48:e6:21:90:dc:d1:ca:e3:7d:f6:e1:a6:ef:
fd:59:63:1d:8e:62:a6:c7:8a:42:34:f2:01:97:c9:e8:bf:8b:
88:6c:eb:b1:12:36:1b:ce:0d:b1:5b:ea:ab:6b:cc:d4:ee:55:
d9:b9:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:18 2026 by rpki-client