Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa
File: 222bf775-2bba-4790-943c-82c7a38f7efd.roa (raw, json)
Hash identifier: vsovvA8C9/mFBWJmW+sG8BJzk2M7ZWBtc8mDoLClH20=
Subject key identifier: 02:6C:8F:36:89:57:5C:2F:B6:CF:02:09:C8:C9:C3:FA:AB:6C:94:5F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7F972EC0750F8850B3C08E9883273768F85DA6BB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa
Signing time: Mon 11 May 2026 01:30:14 +0000
ROA not before: Mon 11 May 2026 01:30:14 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:97:2e:c0:75:0f:88:50:b3:c0:8e:98:83:27:37:68:f8:5d:a6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:30:14 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=c32281ee5c8fee33a2113f331d10251975b338270723d5332d48f8249fb5a638, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:d1:67:a5:7b:a5:df:2e:d5:f0:ae:ce:51:
8d:dd:12:13:24:fe:cf:2a:f5:4e:68:95:32:57:03:
24:5a:b3:45:65:6f:30:70:bf:47:16:6e:78:85:5d:
c3:ef:b3:bc:08:50:39:9d:fe:a0:ca:4e:dc:a7:62:
30:ef:d4:df:ae:cc:71:0b:cc:b6:c9:cb:34:0b:ee:
c2:fc:b9:ed:97:ab:74:96:5f:47:a2:84:e4:f1:7f:
23:be:e9:13:95:45:bb:3a:f0:0e:6c:f5:88:13:3b:
d0:b0:68:94:71:4b:c2:2f:ee:4e:13:21:a4:35:36:
22:18:db:40:cd:03:dd:35:e5:de:c5:00:96:21:41:
5d:4d:ad:a3:b2:2a:3f:d3:4a:90:3a:b8:ff:4d:ed:
1a:cc:2a:d3:5a:c0:05:23:c5:2b:c8:9d:84:ff:25:
fb:1d:6f:fa:97:54:9c:ea:59:9c:d1:ef:f1:0b:db:
09:46:db:18:c5:0e:5a:8e:f2:df:e3:80:c3:6f:86:
85:16:6e:98:97:52:df:f7:34:80:f0:7c:f4:56:26:
8e:88:68:7e:6f:ac:e7:3d:36:2f:5c:6e:6a:aa:77:
0e:93:2d:1d:97:c2:63:15:3d:b8:69:4d:3c:ae:71:
f5:fc:84:91:54:be:ff:3a:a2:ef:c2:19:2b:a9:fb:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:8F:36:89:57:5C:2F:B6:CF:02:09:C8:C9:C3:FA:AB:6C:94:5F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
a9:09:57:9d:d1:6b:5d:af:a6:76:80:fa:c7:f1:7a:82:91:4c:
49:79:d2:52:dd:6f:1c:f0:79:27:02:b5:31:b8:f1:29:ec:ca:
13:23:25:14:19:44:d2:7c:a7:eb:c7:a1:cb:b7:8e:74:39:bf:
f5:07:11:f2:20:54:f8:f4:5d:af:85:f0:c8:8d:97:b9:77:8e:
e4:5c:bf:b8:97:c2:04:3f:26:49:06:2e:ee:97:23:c6:62:25:
e7:e6:00:68:c3:f6:95:90:b1:e4:8d:86:86:ee:7e:bf:89:48:
85:3c:46:aa:a3:a5:ee:44:4f:49:0f:06:38:bd:13:ba:d8:d9:
46:f8:20:31:cd:47:ba:04:d6:5f:e3:a0:49:15:be:42:e1:56:
e3:53:2c:0b:cd:f8:05:1c:29:57:0f:88:07:62:b5:e4:d9:c3:
b2:b3:d2:57:85:7f:f2:94:10:f0:d9:ff:9f:c4:bb:75:af:5b:
63:80:f7:e0:a5:57:b4:0e:3a:b4:6b:75:ec:72:ee:0a:8f:b8:
90:85:4a:67:f8:7e:a9:18:49:4b:02:9f:29:bc:98:68:1f:bd:
db:d6:a5:24:97:3b:04:35:40:79:32:5a:02:0a:85:93:b7:10:
05:8e:84:9c:a1:ef:e8:03:c8:52:6f:36:18:1f:f5:d9:a5:47:
ce:5b:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:01:47 2026 by rpki-client