Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa
File: 20a0941e-97e6-476c-adec-4755830b9511.roa (raw, json)
Hash identifier: b70wC4VniApUb7KSpitP9Is4gYV+Tuxoy31vyUs0jyo=
Subject key identifier: D9:EE:20:F4:64:2D:41:AA:5D:B9:3F:87:EE:7A:E5:BA:E1:DC:70:8F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3C5A275D7BF19DD980612B72800E76F0C1620CA2
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa
Signing time: Mon 11 May 2026 01:30:24 +0000
ROA not before: Mon 11 May 2026 01:30:24 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc7:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5a:27:5d:7b:f1:9d:d9:80:61:2b:72:80:0e:76:f0:c1:62:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:30:24 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=6a1876c2228d1ffd8b1f6c85797944e1e7b648f90217d7018668ab96cda7ba17, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:56:d7:d3:d1:63:8c:e7:29:67:3d:33:c6:
bc:a1:5c:0a:fb:8f:cb:2a:ef:e8:fd:69:2b:a7:50:
03:38:c8:60:ba:77:c4:19:33:a3:e6:59:d2:3c:2d:
19:9f:38:4a:67:c5:40:27:26:af:3f:c5:9b:8c:55:
79:1e:20:c4:9d:12:fe:8e:68:b5:15:2c:5c:2f:35:
c2:77:5d:3d:40:db:e0:17:3d:b9:50:7a:c5:36:d4:
94:25:72:26:60:16:4e:b9:19:6a:cb:c8:01:65:e3:
05:9c:67:bf:44:ee:7e:d0:11:22:94:c8:f1:fc:c5:
47:78:57:73:ae:2b:99:d5:9f:d8:6b:7d:94:c2:a7:
27:c1:b8:09:dc:7d:c7:3e:d1:3d:7b:a3:e7:a1:97:
8a:f5:f3:3b:11:41:67:df:af:b7:be:00:a5:3a:79:
ea:d9:ac:4b:08:e8:99:ed:ab:ad:33:3a:07:60:b3:
f5:5f:d4:2d:69:35:12:ce:9c:e7:53:2a:84:e3:ce:
63:b6:d8:8b:1e:6f:3f:ce:1b:35:88:6a:9f:c9:a7:
17:75:e1:0d:e5:fa:9d:0c:19:59:62:b4:06:61:46:
11:6c:bd:ad:a4:3a:f7:24:4c:ee:8f:01:58:f7:2e:
fb:5c:0a:3f:8d:9b:b5:57:70:70:88:ab:cb:9f:41:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EE:20:F4:64:2D:41:AA:5D:B9:3F:87:EE:7A:E5:BA:E1:DC:70:8F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
8a:01:f5:fc:89:39:69:75:51:5c:c0:6b:3c:a7:8b:dd:67:da:
7a:51:5e:b7:a9:75:99:a8:8a:cb:84:f3:3e:c2:9b:47:08:d7:
29:a6:3b:8c:35:88:ab:ec:6f:9f:f3:00:38:96:33:fb:04:f1:
19:56:80:a9:e1:e3:f7:52:06:6b:52:75:17:ea:d8:a7:47:e3:
05:f1:8c:c6:02:b1:05:9e:d4:94:d7:dc:69:5d:c1:08:fb:d4:
6e:70:5c:7d:d4:79:52:7a:12:85:48:e2:a1:93:9e:2c:71:66:
5e:01:f3:66:32:7a:5c:c2:9f:7a:e6:31:09:04:b8:e9:6c:bc:
d3:2d:c1:64:43:18:d4:ac:4e:2f:cc:07:24:f1:4c:d0:c9:dc:
24:55:54:27:0c:6b:c8:33:cf:95:a8:b2:6a:0f:41:df:8c:92:
00:6b:d4:67:d5:50:6c:6f:c1:89:be:50:e9:32:55:44:5b:4e:
32:60:74:f5:93:dd:2c:38:d9:c9:bd:e4:d6:3a:e4:bb:90:4f:
b1:9a:44:4b:27:15:36:b8:8b:dc:5a:7a:26:4c:6e:cc:7e:4f:
cf:d8:ac:22:58:0a:0c:49:a5:6f:08:9d:77:66:b2:91:7e:99:
cf:0b:0e:b9:c1:eb:50:39:2b:33:b8:58:ea:cd:2e:8a:18:41:
03:89:32:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:47 2026 by rpki-client