Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
File: 3ad06e7c-7473-4104-a394-28daf30bc72f.roa (raw, json)
Hash identifier: Kxli1xCdLKIjoPZADbCWhLucFMnvKRyIEO2mm5B/aqM=
Subject key identifier: 35:C3:9B:5B:EC:44:4E:0E:1F:B2:CA:1A:05:66:EB:5E:08:D3:AE:3A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3780ECB9CB341380714772CF37FD454319BD111C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
Signing time: Mon 11 May 2026 01:30:08 +0000
ROA not before: Mon 11 May 2026 01:30:08 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:80:ec:b9:cb:34:13:80:71:47:72:cf:37:fd:45:43:19:bd:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:30:08 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=e5dbb96cb6606b79a0f2c0e986a39301474236443dacc9b7b7924581ca2a1b43, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:41:15:89:02:89:07:0a:d4:1e:e3:36:af:
94:8b:6e:7d:1c:c6:70:5e:73:1f:37:ba:a7:30:06:
63:49:bc:19:02:62:a2:72:8c:5f:8b:00:99:5d:d6:
89:06:f4:35:b7:7c:e9:5a:b6:c5:fc:ca:36:84:23:
bc:e2:4c:de:4a:90:ef:dc:8d:f2:73:d8:3b:6c:a5:
f9:64:fb:48:ca:20:f3:22:6a:86:00:1a:7d:d1:ef:
67:a5:a1:b3:48:a2:b3:d0:47:d2:d1:ca:e1:73:42:
92:6e:cc:f5:45:30:2f:81:ad:02:63:93:1f:0a:46:
af:4e:d6:16:8d:c1:f6:f4:f1:6d:99:5d:09:64:4e:
0e:78:b7:f8:5a:72:0a:1b:90:66:7f:fe:cd:57:8a:
4f:a0:27:f0:52:50:b9:98:fb:6f:87:48:aa:19:ff:
3d:37:4e:48:24:a3:96:1f:39:63:79:22:d0:d2:c8:
11:49:58:7d:06:be:57:ed:cc:f8:85:5d:66:b0:d3:
af:69:86:2d:5c:46:df:05:99:b2:ff:57:12:cd:10:
a5:bb:f1:f3:f7:80:e5:52:fa:7a:83:ed:d0:e7:3a:
cf:7e:af:50:ba:24:2b:eb:1e:4d:d0:1e:4a:98:37:
50:cf:72:02:09:d8:ab:1e:0b:f4:ca:91:42:63:cd:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:9B:5B:EC:44:4E:0E:1F:B2:CA:1A:05:66:EB:5E:08:D3:AE:3A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5800::/40
Signature Algorithm: sha256WithRSAEncryption
75:d9:86:bd:a4:14:c5:c3:ef:c7:19:04:c6:f8:1c:1f:7b:56:
e4:56:42:2f:0d:99:15:70:fc:30:80:da:c0:cd:53:61:73:b7:
d8:0e:6b:f1:a8:d4:36:3f:9d:71:d0:00:33:ad:81:9e:d9:a5:
c8:5c:74:97:be:d0:3c:f9:06:70:73:48:f9:df:f0:17:f2:ee:
0c:5b:82:15:c1:0f:41:df:bb:0d:b4:07:11:41:b9:04:dc:6d:
26:07:8f:0c:fb:41:a6:58:53:76:9e:94:05:3c:48:83:0a:d6:
70:2d:20:5a:2a:97:26:00:f6:08:9b:0b:2a:99:7b:8a:23:b9:
00:16:ae:8c:79:c6:8d:25:14:e1:5d:be:f1:95:cf:e0:01:6d:
94:4d:32:09:3d:7f:78:61:48:56:bb:51:d7:aa:22:87:3e:66:
26:e1:68:83:d1:fd:0e:87:0d:bf:52:f1:32:56:d0:d7:34:85:
ff:c0:fc:05:a1:08:3b:b2:78:17:4b:ea:7d:63:fb:29:3f:37:
2d:b5:55:b4:4d:2d:0a:86:7e:f2:8f:dc:d1:8c:3d:6e:a1:c2:
31:54:61:be:7c:47:6f:d2:fe:fb:f5:44:f8:ab:cb:c3:8e:1e:
1d:91:73:9a:3e:a5:87:40:09:bf:be:54:79:f4:ea:1d:13:f3:
ce:8f:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:32 2026 by rpki-client