Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b37de359-9d0b-4ee3-a610-21eaea66f42e.roa
File: b37de359-9d0b-4ee3-a610-21eaea66f42e.roa (raw, json)
Hash identifier: TXl6ZplqXvXYjhSIT4VX1HMK2WMDnPJSZP97611oMoA=
Subject key identifier: 49:E9:F1:46:BB:D4:83:CB:1A:E2:3B:51:1B:EC:77:9A:7B:34:5D:1A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 359B6CECD2726F534F0B31645C4BE77BE4510780
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b37de359-9d0b-4ee3-a610-21eaea66f42e.roa
Signing time: Tue 25 Aug 2026 00:00:07 +0000
ROA not before: Tue 25 Aug 2026 00:00:07 +0000
ROA not after: Mon 23 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9b:6c:ec:d2:72:6f:53:4f:0b:31:64:5c:4b:e7:7b:e4:51:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 25 00:00:07 2026 GMT
Not After : Nov 23 23:59:59 2026 GMT
Subject: serialNumber=8e9f7abd9fc9ea2ed6c3a7a242702fef94e0d854d6a9e3f58484a87ef934b551, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:4a:58:0f:87:cc:b5:6e:3c:b2:c6:1d:19:
21:f1:1d:0c:74:ea:7b:05:ca:38:0e:db:ac:db:15:
ee:4f:f1:4e:2d:0e:b1:e1:2c:c6:27:16:ee:a7:d3:
b3:ce:69:4e:cf:d4:ca:18:13:cf:26:8e:b1:44:04:
81:38:d7:c7:5d:20:0d:b6:0d:d9:cb:2b:09:bf:7f:
38:1f:90:e2:59:f2:71:6d:b5:ed:94:79:de:b0:e0:
dc:66:24:0c:15:d1:9c:22:25:c5:38:37:a7:34:64:
e1:14:d2:12:54:00:5c:e2:8c:77:57:9b:63:c5:8b:
fb:80:13:66:a3:d9:d2:42:85:fa:95:6b:4d:b0:5d:
67:42:0e:55:14:e3:e8:8f:4e:f6:05:bb:1e:95:8b:
5f:3a:0e:4a:4a:0b:3b:a0:a5:48:bf:23:2e:84:87:
4d:d1:e7:8e:aa:33:f3:a5:8a:fe:cb:36:4f:da:49:
a2:ca:19:5d:f8:ac:5f:1e:36:4d:2f:ad:f6:a2:6f:
5b:28:d0:eb:71:02:38:21:da:44:7a:e1:17:be:c3:
ec:0b:1e:01:c0:1e:e2:01:4c:65:02:3e:64:19:15:
6b:f6:c0:8a:bc:70:59:17:13:b1:b8:d3:80:bc:7a:
f7:34:9b:3c:38:37:8e:94:9a:82:3f:77:8c:fe:3c:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:F1:46:BB:D4:83:CB:1A:E2:3B:51:1B:EC:77:9A:7B:34:5D:1A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b37de359-9d0b-4ee3-a610-21eaea66f42e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6800::/48
Signature Algorithm: sha256WithRSAEncryption
23:8a:c5:1c:12:55:10:fa:07:11:e8:48:de:cc:55:e6:50:7a:
d3:54:d1:7f:1f:b9:13:8e:36:26:f0:2b:81:d9:10:f4:aa:63:
45:78:75:cf:9d:71:5c:75:08:bd:80:54:d2:dd:b8:24:a9:ee:
fc:1f:69:76:c0:a9:89:40:0b:6c:aa:08:45:02:40:79:be:1e:
22:6a:0b:07:a4:83:9a:9f:23:1b:1d:3d:ee:8e:55:c3:09:f9:
b3:d1:ff:71:99:54:f7:66:fa:17:e0:ee:47:4a:9f:13:66:da:
8b:59:2d:57:d0:a7:83:29:25:02:88:25:2e:b3:d5:0b:db:be:
c6:2d:66:55:34:94:38:b8:5d:6c:0c:70:1a:8c:d5:c9:bd:a3:
91:8a:64:a4:98:54:0d:32:c7:b9:a1:78:f1:a5:e9:74:21:6b:
b0:90:d5:f7:92:6a:9b:54:46:11:bd:98:d3:ec:ba:16:18:97:
4c:08:96:bd:36:da:ae:9d:db:29:f4:87:5e:ef:82:41:59:d3:
d6:e4:a0:52:eb:22:ff:da:ff:09:eb:6f:94:2f:5c:24:dd:65:
56:10:48:0b:7e:a6:bf:81:68:31:19:86:f1:b5:00:c8:01:52:
81:9e:10:06:61:4c:af:5a:1f:21:e4:35:73:04:70:5f:f6:4e:
9b:8c:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:15 2026 by rpki-client