Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0c759323-5c1d-41d0-a9cb-1893ba4ebdd1.roa
File: 0c759323-5c1d-41d0-a9cb-1893ba4ebdd1.roa (raw, json)
Hash identifier: sgt9AfvLLDWk/o/scrjJMVC8awsOd/h9FPfpWS1fta0=
Subject key identifier: 6A:97:09:FD:AC:DD:24:81:2F:83:6F:CF:56:33:BA:B8:F5:A1:80:F0
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 233E91A2FD4D30F136EDA349F76DC14398AFCC02
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0c759323-5c1d-41d0-a9cb-1893ba4ebdd1.roa
Signing time: Wed 12 Aug 2026 21:04:24 +0000
ROA not before: Wed 12 Aug 2026 21:04:24 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:c::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3e:91:a2:fd:4d:30:f1:36:ed:a3:49:f7:6d:c1:43:98:af:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:24 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=eb6076345d39149d20aa87557b1b70f53a46feec0205f8424b113f73ed61dcda, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:6a:ef:26:e9:08:05:54:5f:56:87:f0:af:
07:0d:14:79:65:fa:68:41:f0:b4:5e:a2:3b:41:2d:
e1:56:d9:cb:7a:fe:d8:ad:cd:14:6f:bf:f6:a0:08:
4a:fb:8b:6a:ef:75:1f:4c:17:c6:10:d8:a4:60:b0:
cf:b6:03:69:98:3a:cf:33:e6:18:78:d9:9e:4c:71:
28:82:53:66:3f:84:0d:ed:89:70:d0:2a:37:6e:2e:
0b:a1:43:9e:44:75:77:b4:9c:2d:d0:99:a1:bf:47:
79:e2:9a:4f:01:ad:c9:8d:e7:75:ca:0d:db:fe:13:
02:f7:2e:66:ad:26:47:93:37:e5:87:b3:ac:f3:80:
10:19:19:a6:67:48:88:b5:9b:02:27:8e:ea:6a:b0:
cf:b0:00:e3:72:7a:60:8b:38:33:e3:c1:7a:6f:05:
b8:22:04:ea:e9:2f:b1:9d:90:bc:40:59:d6:f8:69:
91:35:3a:2e:9c:e7:e3:94:6d:e0:f8:b3:db:6b:da:
30:6a:54:5e:34:59:7d:38:be:b1:4f:b5:ea:c7:b9:
dc:6f:34:8f:24:fd:7c:37:58:31:43:c6:49:a1:18:
0d:c7:7a:74:34:1f:ef:7e:ea:2d:f3:1b:c7:fd:cd:
4d:94:03:78:48:a9:6f:d2:fc:9c:87:e0:b4:70:59:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:09:FD:AC:DD:24:81:2F:83:6F:CF:56:33:BA:B8:F5:A1:80:F0
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0c759323-5c1d-41d0-a9cb-1893ba4ebdd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:c::/47
Signature Algorithm: sha256WithRSAEncryption
77:83:01:ad:b1:83:06:03:19:d5:1a:57:c0:bd:83:33:ff:66:
9e:16:32:43:ed:d5:04:fd:38:0b:8a:dc:4a:73:60:7f:cb:2c:
60:d5:7d:31:08:9b:77:46:4c:e2:e5:f8:ba:52:18:7b:e7:cd:
fb:3f:26:dd:f9:65:d1:f4:a8:4d:21:06:0c:76:8b:f9:31:8c:
3f:56:bf:42:e7:6a:12:92:54:9a:02:f8:19:62:13:dc:4e:48:
6e:b0:2b:50:ba:cd:ec:d5:d7:a0:8c:18:61:cc:2e:33:61:5b:
81:72:05:c5:ad:ba:a0:44:28:9a:55:4e:8e:a9:92:98:cc:2b:
07:06:e8:27:f3:66:d6:bf:51:a3:6e:ac:21:74:eb:e6:09:e9:
98:d3:76:43:05:3c:4d:87:aa:e4:a4:78:42:c7:05:91:29:c7:
6b:95:71:53:d7:2f:8b:a7:00:4d:10:42:6d:a7:78:2d:e4:c0:
41:fe:bc:39:bd:6a:2f:8e:ca:f0:5c:ca:d5:14:90:e1:c5:61:
4b:65:e2:13:4d:81:06:2d:e0:72:56:33:35:8b:c7:47:4e:f1:
57:a3:ff:c8:17:ea:ef:c1:55:45:9b:db:f4:29:4b:a1:9b:11:
e8:c3:8c:f7:9c:e8:38:43:97:00:14:ed:7b:25:47:0e:3e:49:
22:ff:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:24 2026 by rpki-client