Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/661f769e-2a06-4615-bc32-942a112d13ee.roa
File: 661f769e-2a06-4615-bc32-942a112d13ee.roa (raw, json)
Hash identifier: K8JqO8F3HgNKpjLS/h/sr8I/0UKFl8FtW8crt3m23rg=
Subject key identifier: 2A:0C:7C:2A:EC:DE:84:44:4F:8E:35:F0:EE:9B:87:34:40:83:D4:C1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 03B6B3282D27A837B609013377B1A52B0A632CEE
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/661f769e-2a06-4615-bc32-942a112d13ee.roa
Signing time: Sun 26 Jul 2026 00:00:40 +0000
ROA not before: Sun 26 Jul 2026 00:00:40 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b6:b3:28:2d:27:a8:37:b6:09:01:33:77:b1:a5:2b:0a:63:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 26 00:00:40 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=05d63f40d948c0efcca7ca6ba03c80c104fbd3373c57e565de6cf06100406942, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:9c:44:a2:e9:db:19:d1:5d:c9:58:0d:89:
b4:2d:57:f2:04:8d:e2:f3:0c:b7:44:6f:14:95:26:
f0:18:c2:5c:79:77:45:71:d4:24:a7:b0:92:9c:bd:
f6:53:ca:54:37:3f:3d:89:8a:d3:e7:e4:4a:35:81:
86:29:e2:86:bf:b9:cd:b7:ce:6c:5e:41:71:c1:eb:
e8:de:8e:60:31:a5:f2:61:f1:1c:69:51:94:f0:fb:
d0:b1:41:fb:a6:8f:41:7e:cd:3f:57:c1:b5:39:02:
cd:4e:f8:71:c0:35:39:ed:ba:c3:02:6c:f7:71:f1:
8d:b9:53:08:51:06:75:70:7a:a8:01:fe:51:3e:69:
db:1f:ed:3f:aa:2d:16:7a:61:d5:7f:dd:46:ae:a0:
9b:3f:e2:06:5b:97:6d:4e:7a:7e:4e:7a:55:e0:8b:
43:3c:c2:d4:5b:d9:db:be:f1:2f:d0:5f:c0:c4:1e:
9f:3d:e1:47:e6:68:09:a3:a6:9a:16:31:8c:b8:3a:
69:78:0d:2b:24:17:ab:cb:9b:fe:95:91:a1:60:67:
d0:19:f9:13:a9:18:96:ea:81:8f:29:b9:b5:f6:89:
13:83:bd:51:50:b3:c9:62:aa:8b:ba:31:53:29:6c:
09:d0:30:96:fe:e2:6e:f0:33:1f:5e:92:e4:2c:6e:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:7C:2A:EC:DE:84:44:4F:8E:35:F0:EE:9B:87:34:40:83:D4:C1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/661f769e-2a06-4615-bc32-942a112d13ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2040::/48
Signature Algorithm: sha256WithRSAEncryption
33:dd:4b:4d:01:c0:60:20:9a:08:c1:cc:1a:68:2d:13:06:11:
00:09:f2:91:dd:64:ce:bb:0e:9d:ff:0b:93:5c:9e:7a:95:15:
d9:5d:1c:f2:09:c3:66:f7:f9:2a:e6:71:0f:04:f2:1b:87:0d:
2c:48:2d:47:0a:7e:7f:4b:e8:5e:b7:65:f5:78:32:e8:68:97:
96:d1:9a:19:09:12:9a:bd:9e:95:e2:30:d6:95:c7:a3:77:19:
24:f4:01:d9:4f:3b:b7:48:81:8b:60:b9:da:bb:e7:3f:d1:d9:
fd:e5:ca:a7:e6:e6:66:1e:80:3e:3d:9c:df:6b:fe:06:36:72:
8a:43:ce:5f:26:ce:5e:d0:b0:f3:08:af:69:ae:5e:64:0e:51:
2c:84:91:43:da:2c:b4:91:8c:43:57:e0:48:ae:ff:f2:62:98:
b4:18:99:11:4a:9f:ba:d4:d8:ae:96:7c:85:d7:9f:97:9c:df:
35:ea:c6:c7:a2:7b:33:e3:f8:0d:28:ee:36:68:44:e7:80:94:
33:1f:16:9b:94:76:58:85:16:da:0e:16:5d:20:c0:ba:1c:4b:
6e:78:8e:1f:7b:7b:b3:27:af:cc:4c:41:ab:43:18:26:74:4f:
97:63:bd:d1:75:8e:ff:23:31:dc:f6:db:f0:ba:7a:75:62:6c:
01:dc:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:53 2026 by rpki-client