Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ce5b31b-8d42-403f-b519-f240e7958f0e.roa
File: 4ce5b31b-8d42-403f-b519-f240e7958f0e.roa (raw, json)
Hash identifier: jvBqUh40MoJJqeCKs3vizRMAAYm/ukf7YehaWVUau4k=
Subject key identifier: 63:36:8E:A0:1D:BC:00:FF:12:B2:C3:C4:D3:89:CB:AB:49:9D:88:2B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 20889BB59C18A181D15586BEFC5501E856E123E5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ce5b31b-8d42-403f-b519-f240e7958f0e.roa
Signing time: Mon 11 May 2026 01:40:57 +0000
ROA not before: Mon 11 May 2026 01:40:57 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:88:9b:b5:9c:18:a1:81:d1:55:86:be:fc:55:01:e8:56:e1:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:57 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=f222466bbf64a18f9608295677935c3c9bc9cd193d833de5e66d030819591922, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:2a:c2:aa:58:9d:50:bc:9b:50:97:a5:4a:
1e:13:a3:5f:82:01:7f:58:67:cd:a3:89:d5:ec:a1:
13:72:bf:1b:6f:3f:16:ae:1f:ab:f4:95:03:70:b4:
09:1c:a9:5d:b6:af:b2:dd:b0:ba:30:73:63:36:0f:
41:c9:83:af:2f:21:66:91:33:6b:2e:20:49:51:fa:
bc:91:c1:08:97:69:65:76:5b:44:74:b2:45:f6:8f:
82:d7:9f:9c:38:e2:fc:65:72:80:19:4c:61:82:58:
58:f7:c2:01:18:57:79:52:f0:19:1f:f1:be:7c:e3:
74:5c:38:40:23:cb:45:1a:21:19:6f:73:db:fa:c5:
75:a3:08:48:d8:19:9b:77:01:1b:22:c8:3e:ea:29:
bd:08:e4:75:be:c6:08:ac:a0:a6:a2:e2:f1:b1:89:
10:0b:00:48:44:10:54:5c:56:9d:fa:73:57:c9:88:
0a:ae:6c:2a:ee:21:74:33:6f:59:1c:70:4d:a1:bc:
cf:1d:1b:13:ed:d2:55:2a:6a:19:6d:8f:ba:91:08:
f8:5e:3d:00:40:26:50:6a:60:a0:c2:69:78:a2:9c:
2b:91:b4:ea:cc:98:3a:3d:d3:bc:cd:21:d7:82:3c:
65:42:3c:39:cc:f3:4b:bd:81:d8:17:7b:0e:eb:8f:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:8E:A0:1D:BC:00:FF:12:B2:C3:C4:D3:89:CB:AB:49:9D:88:2B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ce5b31b-8d42-403f-b519-f240e7958f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:1800::/40
Signature Algorithm: sha256WithRSAEncryption
4e:fc:15:8b:5f:b9:e6:e1:e8:de:69:84:af:d4:ee:5c:06:c1:
8f:21:23:b6:36:2d:52:b3:90:97:07:32:20:3a:ff:81:f0:57:
91:b5:8d:18:8a:99:9b:7e:68:c6:8a:64:d0:2e:71:ff:3b:a2:
53:ad:53:1a:7b:b7:42:54:12:2e:f9:76:b4:5e:a8:2c:9d:43:
c1:a1:2f:5c:c2:56:d9:8b:0f:d0:4c:d6:c8:6d:ba:c6:9d:a0:
e0:46:a8:a7:63:20:8e:47:7f:0a:0e:c9:07:9d:63:30:71:5f:
44:4c:94:02:39:53:ea:20:fe:7d:fe:39:f2:1b:09:0b:fa:6f:
a8:54:cc:ed:0f:c3:c6:6c:5e:94:80:ab:a7:b6:ad:f2:36:6a:
82:ad:47:83:64:d1:57:09:a6:d4:9f:2a:2f:f8:e9:cc:a3:0a:
9c:94:bd:88:70:8c:60:b8:74:3c:ab:6c:22:89:42:c9:27:4c:
1a:e0:27:a3:7d:0f:0e:77:ae:65:7d:f9:31:d6:05:c3:c5:36:
95:30:1b:99:db:11:61:4b:ae:f6:54:be:64:2b:1e:dc:e8:0c:
b9:6a:69:4e:52:b2:e7:c7:24:df:54:9d:f8:b8:2a:d2:4a:b6:
92:d1:f0:ef:d8:55:d3:61:ab:d0:68:df:f3:59:03:7e:bf:ea:
14:77:a8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:08 2026 by rpki-client