Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa
File: 54519fcd-4655-4148-9d7d-913b0c0cfe03.roa (raw, json)
Hash identifier: XZZ6PTBm8oohq8rly9/qE6WBIuaZeRUEMBVoFvkHVBQ=
Subject key identifier: 27:C4:66:91:5F:21:31:DB:70:54:59:0E:C8:7E:D3:38:AA:61:17:9F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 37C497D611B29B0EAA69593272FF89D97626D58C
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa
Signing time: Mon 11 May 2026 01:40:11 +0000
ROA not before: Mon 11 May 2026 01:40:11 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c4:97:d6:11:b2:9b:0e:aa:69:59:32:72:ff:89:d9:76:26:d5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:11 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=d75caf8a32e954872d2b73c9d3efe1a3bf98ecd464b974ddcae7c8b109968742, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:b8:49:9b:c8:b9:f1:d5:44:51:71:8e:85:
9a:55:6c:a8:2b:f3:87:d7:49:26:09:0f:62:12:c8:
49:1a:b9:c0:5d:d4:77:93:a2:17:89:47:58:6f:e7:
9e:39:13:34:63:55:be:62:f7:4a:4d:3a:1b:4c:e1:
f9:83:19:45:8e:1e:c4:99:b0:18:5d:fa:0c:32:69:
a9:89:12:89:da:25:a6:35:57:75:f3:14:82:b4:b7:
28:c3:d1:85:2d:84:71:1e:5e:34:ff:d9:a7:ee:8f:
70:ed:e7:3d:89:5f:1f:42:f2:27:f6:c2:40:0d:3e:
d0:55:fb:23:bb:93:94:a6:b0:eb:25:91:0a:85:d2:
87:b9:82:22:0b:c7:51:65:df:9e:68:c7:3f:73:f2:
62:7c:1d:be:75:f2:fb:3d:cd:23:39:27:79:17:04:
a5:3b:cd:97:49:07:3e:36:a7:7f:02:59:2d:32:dc:
8c:91:20:38:e8:42:7e:df:b7:28:3b:9c:2b:a0:70:
fb:bd:8e:c8:69:7d:4b:ff:ca:a3:71:5e:0f:7a:08:
0c:4d:68:e0:30:ea:f0:bd:18:ea:d3:d2:9d:fc:b2:
d4:e5:8f:92:be:b5:c1:63:f8:cc:a4:d0:4c:f4:91:
43:03:13:97:af:1d:7b:29:d2:54:bf:3e:75:03:eb:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:66:91:5F:21:31:DB:70:54:59:0E:C8:7E:D3:38:AA:61:17:9F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:9000::/36
Signature Algorithm: sha256WithRSAEncryption
73:5e:0b:95:fb:42:f6:5d:00:0f:39:92:08:0e:93:5b:ff:8c:
5d:ba:43:0c:7e:47:62:fc:16:00:94:21:ef:98:bb:3c:b0:75:
76:30:c5:3f:d3:9e:94:a2:cf:0c:8c:4b:3e:0c:bb:6b:38:74:
7f:d6:f2:c8:b7:6e:6f:d4:6f:c5:c6:ae:4c:09:07:22:fd:6d:
35:c0:8c:7a:e0:05:ea:74:04:17:e3:39:a9:b6:60:37:66:6c:
59:d1:a4:be:1e:6f:e1:c4:a2:57:ee:a1:a1:3b:27:f3:17:1e:
cf:96:a0:b7:a9:8a:b7:bf:17:d3:2b:44:d3:f6:a3:68:97:c2:
12:7a:c2:ad:60:85:de:4b:2b:ed:6c:e6:37:b2:71:70:7d:9a:
04:14:69:b8:d2:8b:87:7b:2a:ac:af:03:27:2c:5e:83:6f:73:
3f:c0:28:39:4f:3c:75:d5:c6:d0:44:49:24:04:f2:ce:4a:f4:
d9:6f:a1:53:b5:90:5c:d6:62:63:61:3f:37:dc:8c:f5:81:14:
bb:cf:84:88:dd:66:c3:84:58:ff:ed:c0:e8:48:ee:49:e7:f7:
31:65:9f:6c:6b:c8:11:bd:6d:ca:a6:2c:3e:83:8e:9f:07:65:
ba:35:6d:f6:23:fe:89:92:24:2e:10:69:28:dc:89:dc:4d:fd:
d8:4b:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:22:24 2026 by rpki-client