Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa
File: a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa (raw, json)
Hash identifier: JGL5ISM3ZkmstNNa/rUkPoOfvRhMzU8BIIzyqi1qJTk=
Subject key identifier: 76:13:DA:AD:31:63:9C:3B:17:42:6D:58:D4:28:9E:CF:84:A6:32:77
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 72849EB47E07BB6734E7F99EEC2CFFD7C85F70C3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa
Signing time: Mon 11 May 2026 01:30:08 +0000
ROA not before: Mon 11 May 2026 01:30:08 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:84:9e:b4:7e:07:bb:67:34:e7:f9:9e:ec:2c:ff:d7:c8:5f:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:30:08 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=01a7bb48ba77ed93108fa1519d5f5f168da35b0d0d452072cf083d4485df328b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:a9:07:63:ef:b8:58:af:a1:07:c8:ec:e0:
01:9b:81:5a:ff:59:6d:de:f0:1f:98:9d:b8:45:e0:
64:8d:b7:75:8b:39:39:bd:a3:f6:7d:c0:33:da:f9:
e9:84:55:dc:e0:16:f3:95:14:ec:ff:77:d9:bf:ae:
02:fc:dd:e9:cb:2b:36:98:d8:9f:40:a2:3d:15:6c:
46:cf:d9:82:02:a6:60:76:2e:93:65:fe:55:1c:7f:
22:b3:e6:d2:6e:6e:70:2c:3f:26:ad:03:e2:05:e4:
e5:e0:16:b8:20:dd:83:2b:0b:7c:00:26:0d:2a:58:
7d:39:1d:1d:56:e6:f4:1a:4f:bd:ff:cc:ba:4a:0a:
9b:ff:bf:f7:4c:89:d9:46:fd:2e:b9:04:0e:49:48:
3e:ed:b6:5a:15:cb:11:22:d4:3d:27:0d:50:45:8f:
87:64:5d:8f:1b:e9:68:74:50:fb:b7:8c:7f:7e:40:
91:5d:84:8b:71:88:6f:bb:e2:f7:8a:cf:36:53:f2:
a4:dd:ad:35:bb:a3:6a:e9:13:a4:f9:7e:16:22:8b:
8e:ba:76:b8:6b:e7:2c:2f:ab:57:19:3e:a2:48:d5:
f2:13:ff:91:6c:b8:3e:b2:3c:e5:0f:68:63:38:e7:
75:17:da:94:e3:86:7c:cf:08:1a:9d:8e:81:43:72:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:DA:AD:31:63:9C:3B:17:42:6D:58:D4:28:9E:CF:84:A6:32:77
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8400::/38
Signature Algorithm: sha256WithRSAEncryption
2e:9e:95:7f:e0:3c:90:fd:64:11:92:5d:ee:d2:e3:02:c5:9b:
23:52:dc:fe:be:a4:62:db:8a:d5:b2:be:35:3d:71:63:f4:86:
32:55:b6:e2:d5:7c:9f:38:1e:89:16:1b:47:da:a9:05:5a:32:
2e:6d:f9:46:5a:3c:3b:86:75:2a:81:db:06:6f:cb:18:84:5a:
8a:cb:65:06:40:2e:b5:b9:e1:45:fc:99:2d:03:c8:d7:24:96:
ee:3f:38:66:dc:42:30:73:c8:9e:37:e0:8d:bb:5b:d0:20:e0:
eb:cb:22:f0:f4:7f:f2:11:5f:e2:90:6c:81:de:c3:97:89:fd:
b0:d1:4b:1d:b7:1c:0f:ca:e1:58:62:56:15:17:90:8f:f9:2e:
00:49:fa:4d:1e:ea:0d:24:44:1e:df:42:0e:c5:86:66:c2:29:
68:96:2c:bf:4f:5c:39:c5:cb:48:e6:2a:90:3a:f2:1c:ab:55:
40:18:ae:bf:b0:2f:da:7e:03:85:ed:ee:f0:85:c3:4d:ef:0f:
ca:cb:92:21:a5:af:d7:3f:22:ba:db:9a:25:25:74:c6:0f:0c:
39:e9:af:0e:fe:e1:8e:9a:cf:9f:e3:0d:0f:79:15:5f:3e:46:
3f:95:3a:8e:23:d0:32:d6:ea:5a:f7:f3:19:8a:ac:58:67:ee:
44:af:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:37 2026 by rpki-client