Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
File: 9e51a10e-4122-46c4-8ad6-fd3986182184.roa (raw, json)
Hash identifier: RCMxUw108iIzu3ofIHA76V1ViwkCsVjj1ik4hLeihLc=
Subject key identifier: 80:49:7E:1F:EB:84:3E:88:7E:0C:E2:95:CC:16:1F:D2:54:3E:3C:11
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7B16D3D871F7ACCBE1D84D0B736D7B08F5B7E431
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
Signing time: Tue 24 Feb 2026 00:30:09 +0000
ROA not before: Tue 24 Feb 2026 00:30:09 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc2:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:16:d3:d8:71:f7:ac:cb:e1:d8:4d:0b:73:6d:7b:08:f5:b7:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Feb 24 00:30:09 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=b6638ae2c10985e369354a40d9f67eecdb00e38dc9d3246c6627354fe9a1085f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:1e:54:8d:c9:69:4a:c1:f0:e2:c1:1b:7f:
d7:81:59:c4:6f:23:79:dc:e8:ff:b1:07:15:cf:28:
ce:5a:36:d5:33:c4:26:18:c5:10:ce:59:50:1a:a6:
9f:a8:89:30:67:7a:ad:ad:8e:fb:81:bd:f9:94:1d:
3e:ed:4c:48:a2:b5:ae:2d:6e:20:c4:0a:e4:ea:8d:
ae:9a:89:73:5c:61:48:22:31:ef:c6:f1:42:18:15:
8b:9d:1d:aa:91:8d:38:cb:ce:fc:5c:8e:cd:18:d5:
fa:1a:68:7a:45:7a:11:6a:a0:d3:90:50:b6:10:78:
03:1b:7b:d2:cf:36:01:8c:aa:e6:5d:94:55:96:c5:
b8:ce:ef:ad:f9:b5:b2:ec:4d:03:65:62:f1:aa:bd:
81:22:8c:04:dc:04:44:4f:d3:66:b7:20:f5:50:11:
de:f6:aa:7b:1f:d1:ac:75:23:e2:6e:56:f0:03:ed:
5e:4e:de:92:4b:a9:c5:88:cb:4c:f7:cf:99:da:86:
7b:96:19:81:b4:84:2e:5c:09:62:6b:3f:a7:fb:ac:
92:f4:0d:d4:4f:c2:e4:88:7a:a7:6e:f4:4c:64:de:
69:6b:a9:bb:e1:ad:b5:4a:c6:c1:cd:dd:7a:91:33:
0f:87:91:b8:78:9b:b9:4e:a4:ae:78:eb:5e:da:0b:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:7E:1F:EB:84:3E:88:7E:0C:E2:95:CC:16:1F:D2:54:3E:3C:11
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:53:32:24:fc:e9:5e:88:75:55:65:9a:e4:fb:62:57:cc:2c:
13:b4:7b:9d:4d:7d:f5:24:d1:f2:e5:df:8d:9a:e4:d6:5f:32:
a7:1a:9a:ff:9b:46:2e:e2:ff:15:f2:ad:d7:f2:83:13:d9:ba:
b1:9c:7a:89:51:aa:ee:89:48:87:98:e6:3d:2e:1d:5b:ae:42:
a9:1b:6e:8f:18:33:b8:ca:48:ff:08:a6:4f:d4:d3:2c:71:47:
43:3a:ca:89:95:f7:19:d0:71:40:c3:41:84:e4:31:f9:74:7b:
eb:a3:30:d9:4a:db:c2:4b:34:d8:c9:da:49:5e:af:fb:65:1a:
da:dc:e2:bb:7e:dc:e5:60:58:c8:df:30:be:91:5b:d4:aa:06:
ef:f3:3c:ee:6a:d3:a9:d2:0a:ca:13:b9:3b:da:71:8b:97:29:
ba:f8:f5:32:88:58:12:ee:c7:77:c9:08:4c:d2:e2:f0:f5:a1:
6a:94:cd:1c:c8:71:b6:18:f2:81:47:76:ff:f8:dc:13:79:2b:
28:7e:7e:14:99:25:df:a4:07:10:64:48:22:d3:af:53:78:40:
14:f9:0f:05:28:72:2d:16:a3:97:3f:90:f0:05:81:af:8e:84:
b0:91:3d:7e:9d:b4:2b:76:fc:86:4b:2d:bb:ef:a4:02:3c:5f:
6d:37:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:05 2026 by rpki-client