Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa
File: b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa (raw, json)
Hash identifier: yoCiezG5+kTNfC1x8Y9bl9jIDEgKTU0oPhd9xOn7Xis=
Subject key identifier: 7D:26:29:27:57:98:1F:EF:10:C5:2B:51:E9:1A:1D:C8:37:3E:EA:4F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 45E8E638C5237900DD27295A85AD053A774D83D6
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa
Signing time: Mon 11 May 2026 01:40:56 +0000
ROA not before: Mon 11 May 2026 01:40:56 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e8:e6:38:c5:23:79:00:dd:27:29:5a:85:ad:05:3a:77:4d:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: May 11 01:40:56 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=00a5c3abefa4641ae37e195c4c732a356800151b2647afb7b2d99aacf97fa9a8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:63:32:8d:4a:74:df:c1:d9:32:e2:ff:1e:
a0:1f:21:f0:f1:61:6c:5b:aa:53:21:6e:10:0e:e4:
4c:29:02:8f:7b:d4:e2:f1:cb:67:51:17:fe:e7:39:
75:c4:e9:0b:99:7c:cf:d6:99:94:9a:ff:e3:03:51:
ce:a2:ad:7b:37:77:da:35:1d:b2:25:05:4a:c3:a0:
d3:7c:f0:46:cf:65:cc:de:bc:03:a9:e2:9f:e4:38:
1b:28:34:87:7c:8d:d7:82:00:e4:e5:da:fa:e9:e3:
41:75:e0:53:30:e1:ec:ed:c4:6f:e8:52:5a:d1:db:
6e:5d:ae:fe:c2:d3:00:7a:53:52:16:6e:12:46:2d:
47:aa:bf:36:6b:dd:49:50:1c:0d:de:47:61:cb:71:
94:ae:bc:45:d2:32:bb:fa:d2:f6:ee:36:82:8e:f4:
ea:5d:93:90:26:89:a9:62:96:60:66:17:44:40:0e:
41:9b:6e:f4:c9:bf:59:87:ca:ff:50:3a:57:97:19:
c5:33:a7:2d:a4:34:c7:bb:ce:19:a9:df:f3:69:55:
e3:1e:e4:54:1d:f1:ff:d6:db:eb:ca:1e:94:47:02:
a6:fe:b9:68:56:d2:ad:9b:ee:b5:8d:7c:e7:a8:e4:
af:41:ba:53:fe:8f:19:5d:96:53:58:db:3c:51:75:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:29:27:57:98:1F:EF:10:C5:2B:51:E9:1A:1D:C8:37:3E:EA:4F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4b:b2:17:12:cb:a2:64:bb:58:f0:14:c5:5c:1c:88:1d:cd:fe:
32:5c:c5:d2:82:a3:c9:3e:b9:ae:4b:49:3f:9e:5f:80:63:33:
93:c9:bc:8c:5b:c5:20:d2:d7:2f:ce:d5:8d:31:4c:ed:1c:b2:
af:9a:7a:74:ac:22:1c:8a:1a:0c:1b:41:eb:74:87:f2:e1:d7:
5f:a7:35:85:fb:13:3d:b6:50:3d:30:1c:2f:f6:8e:63:3c:a2:
90:0c:2f:f1:67:66:27:43:f8:17:65:4f:5a:10:f9:03:b1:b1:
6f:01:db:38:a0:ef:4a:10:fc:ba:a2:ae:4a:eb:30:62:24:17:
97:0e:47:ae:e7:0e:4b:8b:67:c0:69:f4:db:c8:b9:d9:07:ae:
5d:0d:f7:bb:aa:c6:a1:27:89:4d:a0:82:d2:ea:59:0f:78:10:
d9:a3:08:fa:47:1f:54:bc:29:ef:b5:b4:53:c7:1b:2e:67:67:
7f:52:35:85:1c:d1:82:90:06:8a:4f:fd:08:e5:33:5f:16:29:
b5:39:89:bc:0e:40:53:4a:84:b2:e4:f1:07:6e:24:59:48:6e:
6c:7d:1d:ef:68:31:5f:1c:7c:5c:90:43:37:a5:4b:52:1a:f4:
ff:58:08:fa:c4:82:ef:4a:8e:de:cc:56:09:2c:55:ab:51:c1:
60:66:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:09:39 2026 by rpki-client