Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/82447f39-606c-4fd4-b51c-911eb0449adc.roa
File: 82447f39-606c-4fd4-b51c-911eb0449adc.roa (raw, json)
Hash identifier: E5qTCy7ic0CJ/At9xnfXqlBi1nAHDOsX6SMBEIP+L/k=
Subject key identifier: A5:98:8D:7D:0A:A3:81:34:88:C3:B3:E7:CF:4C:D5:A3:56:EF:3C:91
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 047E75150B95D42EC6C66C7CC641551674EDE396
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/82447f39-606c-4fd4-b51c-911eb0449adc.roa
Signing time: Sun 26 Jul 2026 00:00:40 +0000
ROA not before: Sun 26 Jul 2026 00:00:40 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:2020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7e:75:15:0b:95:d4:2e:c6:c6:6c:7c:c6:41:55:16:74:ed:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 26 00:00:40 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=2e6980c35d16db3a93d50096736c3e5ab49397d853726f49942f8c1e835f27eb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:d6:4f:76:90:d5:bd:bc:9b:7a:be:90:71:
5e:1f:89:ce:a6:a4:cc:4d:4a:43:a7:11:84:aa:c2:
8a:70:83:7d:2d:f6:99:bc:98:42:3c:d5:9a:8d:e4:
3f:b1:2d:0e:93:7a:78:ab:e9:b6:7f:60:ac:5f:39:
bf:fb:48:17:06:e2:5a:57:03:7b:f3:66:c5:0d:11:
84:0c:b4:05:c3:c4:20:56:ea:ee:68:e8:f1:21:0f:
97:96:4f:59:5c:ff:36:bb:33:76:f2:67:36:5a:cf:
99:7a:81:81:bb:81:3c:18:ce:16:3a:75:e6:1b:04:
db:36:4a:cb:73:87:3c:9a:ae:4e:ed:17:55:f0:c2:
f8:3b:11:2b:8b:54:4b:bb:e5:6b:f2:e3:28:3e:c8:
68:d8:e6:7c:15:d9:0f:e7:87:09:33:c3:12:ca:54:
5d:10:84:11:14:1a:1b:42:81:9c:d0:a2:66:fa:9f:
63:0c:78:4a:9e:1c:38:74:15:17:cf:3c:78:40:8c:
4c:84:31:c3:4c:d5:a8:20:21:76:ff:23:1e:6a:1d:
69:0b:55:87:1f:e9:66:d2:36:37:48:e0:b6:46:e2:
04:2e:ed:3f:b7:d4:5f:10:30:4e:29:42:e0:c6:64:
78:7c:71:a6:c4:9e:09:e2:96:58:ae:58:8c:b0:28:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:98:8D:7D:0A:A3:81:34:88:C3:B3:E7:CF:4C:D5:A3:56:EF:3C:91
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/82447f39-606c-4fd4-b51c-911eb0449adc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2020::/48
Signature Algorithm: sha256WithRSAEncryption
65:37:f6:ee:2e:e6:53:26:6f:5c:c2:af:16:9e:ce:44:3f:40:
2d:ce:4a:2e:8c:4e:3d:d0:98:e0:8e:ef:4e:76:95:c7:85:2f:
4b:9f:d5:0d:45:34:54:73:df:8a:a7:2c:7e:f5:df:ff:2a:49:
0c:0e:97:15:b6:16:f9:ab:c1:81:8e:7e:21:64:3b:aa:67:e7:
36:c9:bf:78:57:0f:7a:a9:04:3a:d6:87:54:8d:cb:d6:36:55:
f9:7a:0a:8f:07:bb:0b:69:1a:31:26:2b:47:76:3c:54:87:99:
56:a6:5c:cd:78:fd:4b:31:77:98:84:57:75:a3:1d:0d:6c:12:
b9:25:3b:62:cb:8e:49:b8:11:c5:22:3d:0d:c8:6e:52:69:60:
9b:6d:f2:ac:fa:05:39:85:35:8a:f0:0e:e2:f9:b9:4a:c7:75:
d4:a8:32:b4:eb:bc:5b:47:9e:a5:08:87:f5:33:9d:6b:63:05:
99:52:cf:ef:5f:d6:9d:12:1a:cc:4a:08:46:15:6a:9d:22:88:
25:b1:ed:0f:93:d1:f3:8c:88:02:f8:68:78:ba:9c:7d:be:d6:
6e:73:cf:97:54:53:56:75:dd:3d:84:06:a7:94:bc:5f:9b:aa:
60:bf:f6:ba:a3:41:d8:0a:63:97:43:f0:b3:75:80:04:0a:db:
30:fc:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:06 2026 by rpki-client