Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/02d5464d-b1c0-4f1c-9eed-d1d7c729bcb8.roa
File: 02d5464d-b1c0-4f1c-9eed-d1d7c729bcb8.roa (raw, json)
Hash identifier: +l9wU8yCS+0xYV3cGWh7VSy4HQoilMEtf9XumUnFguQ=
Subject key identifier: AA:D1:CD:72:A8:3D:CF:DE:C1:A5:EC:FE:8F:8F:E6:E0:2B:F2:3A:CC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 499138288E07D24B3088743908B74D5E53AC0E32
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/02d5464d-b1c0-4f1c-9eed-d1d7c729bcb8.roa
Signing time: Tue 11 Aug 2026 20:32:10 +0000
ROA not before: Tue 11 Aug 2026 20:32:10 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:91:38:28:8e:07:d2:4b:30:88:74:39:08:b7:4d:5e:53:ac:0e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 11 20:32:10 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=2d5f3a973983d87e5c82a15a619628cde03a3c943964b965abf5a5f29bfd022a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:0e:f3:a7:07:86:17:48:2e:2e:e6:79:fa:
cd:17:c6:40:3a:ae:f6:2d:05:70:06:f5:ba:94:02:
7e:9a:b3:5f:cb:74:99:8a:1a:10:33:3b:61:96:f5:
34:51:dc:21:e9:d6:f2:13:44:bc:5d:94:e1:b2:3b:
e8:95:4e:87:42:c8:b3:c6:f2:3d:44:39:64:43:6b:
ba:81:0f:1c:79:91:7f:75:55:f0:00:dc:31:8b:85:
92:9b:24:45:76:1f:b7:87:a5:03:54:c3:35:10:e6:
7a:d1:90:72:a3:a8:e4:9f:e0:40:3f:12:be:2a:f1:
d4:4d:9d:08:33:8e:27:52:72:c8:21:47:44:07:60:
b3:14:8d:55:d0:12:4c:1f:b2:60:5d:9e:86:bf:9a:
f2:5a:75:d9:ad:ab:82:e5:67:9f:07:d2:d9:94:7d:
46:bc:32:93:a8:11:9d:21:a4:a9:0c:be:00:d0:6e:
83:37:71:da:c3:46:99:da:f2:8b:a0:3d:0f:ae:98:
dd:66:6d:3c:3b:58:82:88:5d:72:db:e2:ba:fb:1d:
26:c7:61:54:93:d5:a4:60:dd:25:63:6d:11:4c:46:
b3:97:0f:a9:4c:30:fb:37:0a:fe:3f:69:c3:cd:0f:
39:67:c5:88:e5:06:fd:a5:b1:4b:47:2e:69:42:4d:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:CD:72:A8:3D:CF:DE:C1:A5:EC:FE:8F:8F:E6:E0:2B:F2:3A:CC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/02d5464d-b1c0-4f1c-9eed-d1d7c729bcb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:800::/40
Signature Algorithm: sha256WithRSAEncryption
bf:11:7a:1d:00:0e:24:ec:64:7f:03:63:5c:ba:79:0d:af:6b:
42:2b:c6:5d:86:46:0d:2f:50:ff:c1:fe:8d:cb:6f:0d:b6:5f:
e4:2e:c9:5f:b0:90:6c:58:89:fb:12:3a:ca:0c:c7:29:c8:6e:
56:f2:d8:49:62:e8:4d:d6:54:24:6d:8a:20:96:bc:12:66:0c:
6a:89:ea:7c:86:c4:2e:65:9a:f0:8c:44:fc:da:45:13:a7:f9:
27:d0:6c:d5:21:f2:1f:82:a8:64:f5:5e:9e:51:1e:ab:38:ab:
24:91:e2:14:2a:df:aa:88:0c:a3:b5:50:7b:58:58:0c:4a:95:
64:86:72:a9:a0:df:16:62:1d:00:fc:26:16:e3:ec:db:ea:f9:
74:b1:2d:bf:54:40:a1:19:5e:6f:b6:54:89:f5:dd:0a:bf:0b:
42:36:ec:63:92:a7:cc:0e:2f:95:d1:b8:e9:3e:01:0b:b4:a7:
3b:47:e8:8f:31:6d:e7:7a:cf:fa:35:cd:fd:e1:5a:86:cf:51:
c6:eb:2e:b3:20:a2:84:f9:46:50:5b:89:0b:d2:a2:6c:13:bb:
43:68:9f:dc:df:34:24:52:c8:7d:83:3c:0f:d5:85:3b:0d:d4:
15:d7:c0:5e:66:5a:f1:d9:9d:a8:e6:86:bd:80:09:30:dd:9e:
0e:87:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:27 2026 by rpki-client