Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa
File: 7cf0ad47-8bb3-480b-be13-5f3302af8307.roa (raw, json)
Hash identifier: e7+G8/og94EYV3PRnUkr/x2eUWL95eGNNLLsTDMVxlA=
Subject key identifier: DF:FB:F1:66:4E:AA:AF:E4:AA:DA:08:9E:AD:CC:92:1E:58:C3:EC:04
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1AB1CE77040097C05FAB11BAEA4FE1F26C59C026
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa
Signing time: Mon 11 May 2026 01:40:57 +0000
ROA not before: Mon 11 May 2026 01:40:57 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b1:ce:77:04:00:97:c0:5f:ab:11:ba:ea:4f:e1:f2:6c:59:c0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:57 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=98133f8e205dcd26de833bd1b2febbae65bd3f8d9f7a5b48aa12149ffb888f70, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:8d:79:c9:77:5c:24:80:98:e9:d8:04:74:
df:ae:70:7a:a7:ca:a2:20:f7:38:91:69:49:9d:f3:
4c:c4:70:bd:fe:d8:99:36:6f:9e:46:ee:2e:2f:77:
2f:12:8e:00:02:7e:7e:3e:d0:88:12:ee:8b:06:d0:
dd:30:85:d0:10:93:74:0e:8c:af:d1:46:c5:53:87:
2c:92:aa:48:2e:9a:42:3a:75:d3:aa:2e:05:92:b6:
25:bd:df:19:b9:a4:9b:60:1c:ba:ac:70:6c:46:b0:
91:f5:65:48:28:0e:14:18:fa:5e:58:0f:76:89:66:
5b:91:66:d9:f0:c5:6b:8c:77:c4:2d:db:a0:7a:fd:
5e:77:f9:67:a7:68:33:b3:f8:7c:bd:fa:0c:4d:c4:
e2:0f:c8:93:f0:67:16:50:ab:a6:68:85:0b:3c:15:
66:96:62:58:93:84:ff:9b:7a:68:a8:43:08:d2:6a:
ad:2e:9d:b3:0c:0c:a0:fc:0c:76:30:c6:6e:04:24:
06:10:7e:fa:4a:3e:2e:13:1a:fa:59:71:a9:31:91:
e1:52:0c:88:c8:78:33:19:de:1f:1f:29:55:7a:49:
fe:5e:65:26:9b:1a:f8:33:c2:f3:ae:9a:47:1b:02:
bc:a5:79:d0:a4:ec:35:32:d3:91:83:54:0e:6e:bf:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:F1:66:4E:AA:AF:E4:AA:DA:08:9E:AD:CC:92:1E:58:C3:EC:04
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:e000::/36
Signature Algorithm: sha256WithRSAEncryption
46:f1:87:f1:d4:60:a0:6b:ee:99:f5:78:ef:1a:60:ba:77:28:
d3:a9:ac:ac:6a:57:d0:a5:84:07:d0:90:b4:78:48:40:45:4e:
6f:fd:3e:e1:e4:25:60:1a:fc:7a:a5:30:86:21:73:86:1c:5a:
4a:0a:95:c0:47:36:72:3e:6b:5f:65:7b:40:13:3b:a7:a1:fa:
55:39:cc:66:7a:2a:25:03:db:c0:71:b1:a1:8b:b2:8d:7f:74:
e5:4f:86:b8:fb:25:d3:e6:e5:90:1c:cd:0f:63:a5:f3:02:44:
66:44:20:8b:72:06:85:e1:66:23:fa:99:56:1d:0a:ca:50:d8:
ee:9d:9b:e6:11:2b:3d:89:23:cb:5f:6f:c1:eb:32:b1:cd:90:
eb:2e:ed:d2:88:ae:58:61:1c:4f:86:57:b7:2e:40:9c:a5:1d:
79:e2:b3:16:a1:af:b9:3a:e6:11:ea:1e:29:4a:0f:0e:f7:c9:
a6:5d:ff:da:13:30:b5:6a:e5:76:7b:fe:35:01:95:9d:3e:28:
7b:49:9f:d8:b2:75:57:96:55:65:90:66:e3:7d:31:40:3e:98:
95:b7:b1:60:0e:60:15:83:35:95:fa:9c:e5:7d:1e:76:0a:6a:
ee:0b:3b:7c:dc:59:68:dc:27:0e:8e:f7:d7:31:38:85:e3:67:
1e:a1:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:01:19 2026 by rpki-client