Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
File: 296c0259-01c8-4923-9577-44db7a2ae85b.roa (raw, json)
Hash identifier: TTUa3xdgoHE15O/J+aqgqDZaW5Dz5KhWyDM1ivh3JD4=
Subject key identifier: 76:1C:D1:1B:D7:96:01:52:DA:C7:AD:5E:3F:06:2B:57:E1:E4:F8:CA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5595C581A68E2B535322FCDA24E0409DCC677BA5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
Signing time: Mon 11 May 2026 01:40:09 +0000
ROA not before: Mon 11 May 2026 01:40:09 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:95:c5:81:a6:8e:2b:53:53:22:fc:da:24:e0:40:9d:cc:67:7b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:09 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=0bd7d83aaf673815b4eda97f4a7435e6d6248a05351b19894cf78ce4d175d2d3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:c0:dc:96:cf:55:cf:0a:42:91:26:99:b1:
ef:ea:92:51:a4:5a:ce:7d:29:d7:f7:f7:be:11:59:
4c:ac:65:f1:e9:44:f8:e7:75:06:cf:30:51:7b:33:
1e:1b:f6:d5:d4:0c:18:7c:12:56:4b:86:2d:1c:78:
e4:ae:c7:e6:87:a1:eb:22:e4:fe:fa:85:59:23:0d:
5a:a6:d6:79:15:e2:ff:bc:f0:8a:9a:d5:c3:6c:03:
6a:ec:ab:34:b2:9e:88:1e:ba:6e:7d:d1:8e:ef:21:
15:e5:92:ae:67:c3:c5:3e:2e:28:e1:23:56:14:73:
bb:9d:ca:cd:48:3f:c0:c4:2d:48:11:46:02:e1:1a:
b0:ce:97:47:80:d8:97:9f:23:b0:1d:a0:66:4e:4a:
d5:2f:ce:27:a4:b9:7d:2b:8a:0a:f9:0a:bf:fe:de:
ef:11:28:b9:9d:81:15:12:54:90:ac:7c:bb:aa:3d:
d6:d0:9e:8d:aa:ca:a4:13:e0:7e:ac:22:ce:fe:17:
8b:85:13:a1:fd:43:76:fc:77:27:60:e9:69:8e:2f:
de:80:e1:90:3d:40:d8:cd:5c:d8:2b:15:b2:dd:8e:
51:b1:3f:c6:3d:4f:bd:f9:ce:d7:f8:10:78:05:91:
83:b0:61:25:69:3e:e9:93:59:d6:5e:f7:bf:e8:83:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:D1:1B:D7:96:01:52:DA:C7:AD:5E:3F:06:2B:57:E1:E4:F8:CA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5::/36
Signature Algorithm: sha256WithRSAEncryption
ab:b2:e1:c0:87:63:a2:08:f7:34:4d:42:20:32:31:17:92:f0:
f0:1d:27:00:c6:33:53:98:9b:07:6f:fb:28:ea:32:38:63:85:
26:57:b7:ed:60:72:1c:06:78:5c:32:91:7f:f5:d6:4a:d7:08:
1e:cc:24:74:a6:94:0a:c1:b4:9b:9e:19:2d:a1:55:33:c2:07:
8d:29:7e:b7:f3:fb:b6:c9:a4:86:a0:8d:1e:19:21:01:62:47:
92:7d:80:36:fc:d3:87:25:a4:b7:42:1f:c6:22:e7:78:5c:9c:
f6:6d:4e:97:ba:68:eb:bf:4c:1b:3e:44:bd:0e:12:b4:8b:1c:
29:2a:a0:34:66:52:b4:d7:78:ec:0e:8d:a9:1e:98:48:b3:00:
87:5a:22:59:49:ce:a9:bb:e9:1f:9d:91:35:e5:89:d8:1e:b1:
ff:4d:24:24:bc:0e:57:01:5b:cc:b7:84:d2:1e:32:0a:07:e6:
fb:25:be:92:3f:9a:ea:a9:4a:a0:b6:08:f6:1c:c5:5f:8e:24:
44:03:39:38:8c:9b:a3:b4:d3:e4:ff:cf:f5:b5:bd:62:89:74:
5b:0a:b2:70:d5:83:34:d1:6e:d6:b2:4e:88:9e:78:48:66:e0:
f8:a0:37:3b:85:6e:70:02:39:3d:74:fa:7e:2f:ab:97:44:85:
74:9f:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:11 2026 by rpki-client