Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa
File: c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa (raw, json)
Hash identifier: l/+H97km13xKupz5Oc7521Zc+2gglq2zA1Vy9BjUK2w=
Subject key identifier: 3B:52:D3:F4:69:39:AF:EA:5E:F8:08:9E:13:27:CB:A8:C4:F5:2C:63
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3636ED9B6D55E730396B7EF15D80943ADA1CBFFD
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa
Signing time: Sun 06 Sep 2026 00:00:08 +0000
ROA not before: Sun 06 Sep 2026 00:00:08 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:36:ed:9b:6d:55:e7:30:39:6b:7e:f1:5d:80:94:3a:da:1c:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 6 00:00:08 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=1234d2a4a85a07d9a42b86111e02b42fff9c41ac211914a6affedb91b38c5a9d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:bd:51:e8:4b:1a:db:1f:34:c9:05:b2:9f:
cd:92:b5:a7:09:dd:4c:d0:58:aa:57:ca:19:73:dd:
5a:13:39:fb:4c:15:c3:aa:4b:ac:f7:61:0d:b2:58:
f5:c2:5c:f6:88:64:ba:8f:74:73:9a:e2:22:b5:5e:
2e:b9:19:e0:43:34:5b:f7:e2:e4:ea:9a:03:c6:8c:
b1:84:90:58:69:5f:ce:86:a8:13:0f:9a:72:b9:4d:
ae:ad:27:9a:88:18:62:67:1f:a0:75:45:86:b0:25:
75:0d:9c:c0:d0:2b:76:0e:69:c4:b6:db:c4:77:a3:
64:74:5a:50:33:05:3f:b3:06:39:33:86:98:e2:07:
40:b8:c0:40:1e:1b:d2:b7:b6:d2:6b:08:40:c3:2a:
f7:13:4d:12:ec:04:da:df:d9:1f:8f:9e:5b:87:60:
1f:a7:73:83:84:48:d1:18:09:c2:0a:4b:96:54:02:
c9:18:24:e3:dd:6a:09:47:fc:b7:28:97:29:3d:aa:
f7:33:bc:bc:a4:c9:c6:8e:6b:e7:43:71:12:bb:ad:
e2:e4:51:15:7d:da:df:a1:d2:7c:78:6a:03:3c:b2:
49:2d:7b:c5:c1:eb:52:a6:55:d5:e4:9e:6d:cd:b2:
7f:ba:40:88:bf:06:b5:5e:dd:84:44:a7:df:5e:60:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:D3:F4:69:39:AF:EA:5E:F8:08:9E:13:27:CB:A8:C4:F5:2C:63
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c7ec34db-35f1-498c-8d24-16ea3dc3850c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f400::/40
Signature Algorithm: sha256WithRSAEncryption
a7:16:22:1d:75:3d:5d:f1:74:50:46:a7:98:18:5e:44:97:ad:
22:1e:93:4b:0d:82:6b:0d:ab:77:65:27:db:05:e2:cb:9e:9d:
b9:3c:d8:61:3b:83:42:e4:dc:74:46:90:f2:2b:4d:54:0c:f6:
a0:5f:88:fe:8c:8b:36:30:27:8b:ef:db:70:48:37:e5:ed:2a:
95:9a:2d:cd:0f:96:71:1d:43:ed:a6:d9:ab:06:db:f3:21:98:
03:ab:97:6e:24:4f:b3:6b:9c:67:70:0f:e1:12:74:f4:97:8c:
05:21:25:b7:89:cf:04:c5:3b:bc:b3:d8:c4:33:fc:e5:b0:de:
d7:a0:02:c5:01:a4:97:b0:8f:a4:ca:44:70:da:45:3e:7d:02:
e8:d9:ae:cc:55:e4:c1:af:11:01:ad:7e:9d:07:7f:ec:c7:a2:
89:aa:99:9e:74:18:8c:18:87:e1:50:91:d4:36:c6:46:81:41:
db:bf:e0:3f:a5:64:f0:ba:c9:b1:d4:b4:2e:73:7a:5e:58:3b:
ab:b9:dd:cd:2d:59:58:de:23:78:20:c1:b7:8a:79:f5:0f:41:
93:5e:09:14:d0:de:05:29:d8:36:a9:f2:26:b1:f9:cc:ef:10:
60:a4:ba:a2:60:13:0c:cc:ab:4a:ef:57:32:ae:4f:27:3d:2a:
85:d0:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:32 2026 by rpki-client