Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58484253-8eac-4458-94db-ba86ab3690bf.roa
File: 58484253-8eac-4458-94db-ba86ab3690bf.roa (raw, json)
Hash identifier: xMo8hSEC87glPlWyMyyQvu6myx6BAh3MNLgYNxsWNnQ=
Subject key identifier: 02:DF:69:58:D2:DF:2C:1B:32:0B:E3:0B:8E:FD:82:94:D4:54:C2:68
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4E4D48704B5B889DC9E13142E662E1E4DF6D8CD4
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58484253-8eac-4458-94db-ba86ab3690bf.roa
Signing time: Wed 06 May 2026 20:17:07 +0000
ROA not before: Wed 06 May 2026 20:17:07 +0000
ROA not after: Tue 04 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4d:48:70:4b:5b:88:9d:c9:e1:31:42:e6:62:e1:e4:df:6d:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 6 20:17:07 2026 GMT
Not After : Aug 4 23:59:59 2026 GMT
Subject: serialNumber=8b4b32bca1dd901f48f1e0becd0a5595607ca11326fde3fc322b28f5887257fd, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:a9:3f:d8:85:56:09:df:54:92:dd:38:c6:
2d:b3:ad:6f:bc:48:3d:6c:36:be:35:d9:82:70:30:
1b:bb:53:95:96:ca:1b:cc:06:cc:42:bd:81:17:a7:
e3:14:29:c1:01:52:2a:49:0f:1e:3a:1a:46:f6:c6:
7a:77:26:5f:45:18:2b:e9:3a:fa:18:8e:54:b2:d9:
91:27:76:57:07:8a:13:d1:36:f1:32:e2:6e:99:3a:
b0:4d:69:53:2e:ef:f6:19:10:6d:da:7b:7e:8d:05:
ed:b7:89:76:ec:66:a5:93:4d:f1:62:a0:94:0f:07:
fb:eb:88:f8:33:a7:8e:1d:5c:1a:03:0a:96:b1:64:
6c:72:d0:ee:28:85:be:12:37:9f:9e:9b:99:80:8c:
8d:24:67:d2:78:79:a9:7e:4e:36:c4:7c:8d:3e:a9:
00:16:42:8a:b9:9d:af:85:c4:25:df:99:61:55:9a:
d9:af:1e:fa:ae:5f:cc:ae:5d:56:e5:03:46:eb:67:
45:a0:4c:19:29:59:e7:ec:aa:74:cb:bc:41:08:83:
b1:d2:d0:51:e0:9c:17:8d:c7:36:84:4b:81:f2:c9:
8d:65:36:d7:d7:36:1d:43:ea:39:09:54:d6:c2:1c:
c6:c8:40:1c:1f:6d:58:4c:28:48:f3:cb:8f:73:21:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:69:58:D2:DF:2C:1B:32:0B:E3:0B:8E:FD:82:94:D4:54:C2:68
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/58484253-8eac-4458-94db-ba86ab3690bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1000::/36
Signature Algorithm: sha256WithRSAEncryption
57:23:c8:97:83:55:da:e6:d2:6e:df:e5:04:1d:90:3a:f2:a7:
63:dc:d6:9b:bb:16:d2:76:cb:e8:7c:8f:cd:b0:f4:6f:d9:46:
89:d8:df:a5:0e:bc:3d:52:52:6b:b6:57:3d:c2:e5:84:9e:c6:
43:10:93:51:0b:8e:bb:d3:76:a0:3e:b2:f8:5f:e1:7a:4a:d2:
e3:e1:9f:02:24:e9:ed:45:73:a7:d7:b6:5e:6a:aa:1f:5a:b8:
56:d8:fc:7a:9f:09:7c:98:ce:ad:88:80:a3:fa:03:19:e6:ab:
bd:0c:9a:0c:2e:e7:0d:33:c0:b1:2e:fc:f8:6c:59:21:2e:a1:
b0:b8:48:8b:84:07:26:51:1d:6c:05:1b:39:e4:60:36:76:d0:
80:91:dd:9d:eb:9d:d4:3d:3e:4f:db:dc:51:7d:a4:3c:99:e7:
ee:50:84:68:4d:f7:4e:9b:f9:a2:91:81:f4:0a:ef:38:bd:f8:
ce:76:6b:33:3a:18:c6:92:00:53:98:4f:bf:39:75:f9:75:c7:
4b:e0:21:96:36:63:bc:0b:e1:a7:cd:d5:9c:6b:f7:d5:21:5e:
44:b3:19:31:d9:0d:1b:ea:8a:fe:75:a3:5a:fb:97:67:38:63:
f2:e3:f0:11:52:1b:04:e0:47:c3:e9:e0:90:2b:2e:38:4a:eb:
20:29:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:43 2026 by rpki-client