Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f0473587-345b-4fdd-b3ed-1e88e69fa930.roa
File: f0473587-345b-4fdd-b3ed-1e88e69fa930.roa (raw, json)
Hash identifier: c9lD8ZIa+KQJxORse5XTErQVHBBL3MyxkyD2HAKU7Jg=
Subject key identifier: A3:86:DE:9C:E4:6F:74:C4:95:D5:D1:C7:92:39:C3:FB:EF:C7:26:A3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 10DEA0F0E39175E1E31EBB8257BFEAEAA0236C1A
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f0473587-345b-4fdd-b3ed-1e88e69fa930.roa
Signing time: Sun 24 May 2026 00:00:02 +0000
ROA not before: Sun 24 May 2026 00:00:02 +0000
ROA not after: Sat 22 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:de:a0:f0:e3:91:75:e1:e3:1e:bb:82:57:bf:ea:ea:a0:23:6c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 24 00:00:02 2026 GMT
Not After : Aug 22 23:59:59 2026 GMT
Subject: serialNumber=3cf39bbeeee8eb2bbdd3f51f773d566f4586ddb73ea26e12d39cba5c2af66ec7, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:4a:2a:30:e5:5f:15:e3:cc:14:9f:b8:ab:
36:96:75:9a:63:80:59:fa:86:0d:a1:31:87:b5:31:
8d:8c:d7:0a:6a:d1:e8:de:b0:89:58:53:b6:c4:8c:
20:07:7b:da:83:05:64:16:81:d3:84:a1:8d:ed:53:
a6:d0:4d:22:7f:d7:d3:7f:97:22:98:61:8f:d6:1f:
da:cc:73:08:d0:5b:e5:f1:36:23:8b:2f:97:6c:57:
58:31:e5:76:8e:6d:f2:6a:7d:8e:2f:79:0a:f1:8b:
e1:db:6a:3b:67:2c:c5:98:41:43:94:5b:22:1b:37:
04:67:f9:31:ad:74:bb:91:ae:4a:f4:31:43:8a:35:
9e:93:4e:17:5b:d3:4a:0a:92:ef:80:bf:4a:c5:c6:
43:c3:a8:20:71:36:85:ea:0a:d7:9c:80:09:fd:8a:
d4:5b:72:de:7d:01:e7:ab:8a:73:8f:95:c4:67:dc:
3c:1f:bf:38:bd:a9:ad:00:e0:51:3a:40:6c:e5:1e:
3a:86:73:8c:86:2d:d4:f3:17:08:17:c6:56:da:02:
9b:e5:93:84:b0:21:6b:9d:a6:b9:6a:8b:60:57:ea:
45:3b:96:a4:78:af:8a:64:b5:31:4d:5c:10:8d:82:
9f:da:ea:f5:79:4d:c5:de:8f:23:6b:8d:50:57:71:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:86:DE:9C:E4:6F:74:C4:95:D5:D1:C7:92:39:C3:FB:EF:C7:26:A3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f0473587-345b-4fdd-b3ed-1e88e69fa930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3008::/48
Signature Algorithm: sha256WithRSAEncryption
cd:a2:98:88:cf:6a:12:31:b4:d1:9b:07:9b:80:c8:9a:5b:4c:
3a:76:17:68:9f:20:9a:06:c7:13:3d:55:df:62:cf:28:23:d9:
57:d1:f6:51:86:8e:ec:da:66:fc:e6:a2:ac:c2:6b:ab:c5:23:
66:5e:9e:76:ef:76:a6:40:71:38:f8:02:cb:80:45:91:71:eb:
81:a2:e9:ec:bf:1e:f5:65:f5:17:2f:9b:5c:22:69:8c:27:0a:
18:ef:46:de:36:46:57:b1:43:6b:f1:5b:33:89:65:34:32:64:
4c:71:65:1f:f9:88:0c:94:d3:cb:44:7a:5d:1f:40:b0:00:7f:
5e:42:13:fa:89:5b:06:52:89:9f:9e:83:f6:8e:64:f4:50:3e:
c4:24:f0:89:6b:e1:83:ba:a4:04:d4:c9:ea:f4:f1:f7:2d:14:
c7:f9:53:ac:a0:f6:80:8b:de:8e:7f:5d:e7:4b:e5:7c:66:82:
8a:1f:7e:0c:1a:db:49:f6:4b:0b:a9:be:b9:d3:72:04:22:3a:
4e:7a:d3:b5:48:9c:8f:1a:1e:f9:26:48:62:0d:8d:93:bb:62:
55:57:29:84:6d:4e:b1:0e:00:cc:95:01:16:f9:e0:e5:05:3c:
85:db:2d:bf:3f:b9:7e:a9:50:ff:70:69:77:af:d7:45:de:82:
21:c3:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:00 2026 by rpki-client