Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5f688ea0-e1e2-4295-a384-29e5b66b23fb.roa
File: 5f688ea0-e1e2-4295-a384-29e5b66b23fb.roa (raw, json)
Hash identifier: lSs+gq2b9aQh1gW9a0I5JWSt5K/TOWaw+cZkHcDt1/I=
Subject key identifier: F9:34:DA:CA:4E:8A:7A:B4:27:40:F1:46:75:BF:61:7D:8C:36:DF:D9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 37A1D4932B8C05CB731965ABAAC231F7826F2E7D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5f688ea0-e1e2-4295-a384-29e5b66b23fb.roa
Signing time: Thu 07 May 2026 13:47:12 +0000
ROA not before: Thu 07 May 2026 13:47:12 +0000
ROA not after: Wed 05 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a1:d4:93:2b:8c:05:cb:73:19:65:ab:aa:c2:31:f7:82:6f:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 7 13:47:12 2026 GMT
Not After : Aug 5 23:59:59 2026 GMT
Subject: serialNumber=6cf1b830817b1c42c955d3ebe956ec1443d660fd9a83dc4dc77f4c5ce434e6eb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:24:03:96:a3:f2:6d:e9:6d:da:ba:3e:28:
a5:48:6b:c1:f5:aa:3e:c9:8b:79:80:5d:65:16:6a:
c1:36:f3:c0:42:a9:45:35:82:60:c5:5e:51:00:94:
55:b3:f0:a0:6a:1b:f0:3a:72:ab:a0:c8:32:45:b6:
a5:31:92:8f:63:61:92:83:e5:7e:d8:25:e1:e7:53:
09:eb:17:03:f0:64:08:f3:b4:97:3b:2a:0c:c2:21:
6e:c9:5e:42:c9:fc:3b:6c:c2:89:30:76:96:f6:7a:
c4:c6:c8:50:64:6e:e3:03:92:f0:b9:f6:7c:59:c5:
d2:11:c9:ad:9f:e0:b8:68:f7:6e:46:e0:5f:78:98:
36:a1:f1:8e:76:09:f0:c7:83:c8:4f:ef:f3:0c:d3:
8f:55:8e:15:64:74:82:fa:fc:83:12:45:2c:9f:18:
9b:cc:7d:56:b6:6c:b2:7b:11:ef:1a:3f:92:ca:ee:
73:fb:89:53:68:1b:87:69:43:bd:02:7a:8c:61:32:
30:61:fd:76:22:5d:21:44:5d:13:b0:9b:d1:91:c8:
31:b6:62:b5:da:d0:71:a3:cd:12:7e:d5:0f:e1:c9:
4b:1b:42:ff:2c:00:8e:2b:a8:e9:b0:db:50:98:68:
17:3e:3d:01:57:02:d6:c9:53:4c:cd:10:4c:5b:f6:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:DA:CA:4E:8A:7A:B4:27:40:F1:46:75:BF:61:7D:8C:36:DF:D9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5f688ea0-e1e2-4295-a384-29e5b66b23fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2000::/40
Signature Algorithm: sha256WithRSAEncryption
60:cd:3b:1b:25:92:87:4a:10:dc:70:6e:0e:ec:81:dd:46:8a:
3f:65:0c:3b:58:82:10:6a:6a:80:0a:5d:63:e8:b7:d5:47:15:
ba:60:55:ee:f6:2d:e9:08:69:5f:d4:ff:2e:99:db:24:69:87:
1f:a9:8f:1e:26:6c:1f:c2:ee:62:3a:27:fb:35:1f:18:5e:8b:
59:7e:c9:8e:50:c5:0f:38:03:7f:fb:b7:b4:a0:64:ce:9f:c1:
3c:77:8f:65:57:61:7a:c6:fe:d3:a1:47:08:72:2d:ab:9c:97:
16:50:38:c9:fb:5a:0d:00:55:cd:a9:9e:8c:47:a1:d9:37:17:
9b:f7:74:5f:f4:31:b3:a0:5f:22:04:d7:3a:e7:72:fb:0b:c8:
15:4c:c7:c4:b6:4a:98:4f:57:a5:8e:64:b1:04:1a:03:ec:04:
ad:33:cb:75:00:1b:a2:6d:48:be:12:2f:50:90:c1:b3:1f:0e:
bb:60:e7:3e:fd:13:34:57:57:9d:3a:c5:bc:ac:10:2c:dd:dd:
80:b9:0f:75:59:75:c5:c0:c2:9a:44:d3:0e:e6:2b:20:a0:8f:
64:6d:5e:2b:f4:d4:f3:3c:ce:0f:ab:61:f4:58:84:73:77:96:
17:5e:43:a2:7a:ea:dd:cc:f9:c0:75:64:d8:7d:4e:34:a0:cf:
2b:d5:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:44 2026 by rpki-client