Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0db0efa7-dcf3-4300-bb78-6e8d644bcabf.roa
File: 0db0efa7-dcf3-4300-bb78-6e8d644bcabf.roa (raw, json)
Hash identifier: BSvb7rWBsMTcsLSrk4k1v0lrgHWXv0CxMF5ueGaGrhE=
Subject key identifier: 12:76:6E:02:6D:2C:35:6F:C0:C5:DA:E0:40:B2:65:7A:4C:5E:6E:96
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 117B89623B101F53AFD525E4EB9FCC94725D05DD
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0db0efa7-dcf3-4300-bb78-6e8d644bcabf.roa
Signing time: Wed 12 Aug 2026 21:05:38 +0000
ROA not before: Wed 12 Aug 2026 21:05:38 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc0:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7b:89:62:3b:10:1f:53:af:d5:25:e4:eb:9f:cc:94:72:5d:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:38 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=33a2c91c2e89a726681df37d65741872a77a50a63dcf2c8acbc4d6dc55ee0d08, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:68:ae:9a:25:58:7e:d5:05:54:6c:98:1a:
cb:3b:58:c9:51:b0:5d:73:4a:63:bf:f1:d5:0b:f4:
96:d1:8e:91:3d:2e:33:f9:63:c2:32:ce:0e:78:00:
04:92:8d:97:78:f4:26:5c:d2:e9:f7:72:b6:c5:e6:
64:ac:3c:7d:0f:32:7c:a9:80:73:42:06:dc:75:4b:
9c:9e:3e:8a:db:3b:91:f9:c1:ce:d2:dc:3d:14:45:
0d:81:6e:5b:1d:73:c7:92:5d:ef:39:b6:e3:cd:c1:
13:9d:85:77:2b:07:1f:b1:f5:13:99:e2:9f:03:bc:
82:d2:e7:3f:fc:02:64:5a:f2:a4:74:16:13:8b:c4:
d2:94:3d:67:aa:13:85:df:b4:ed:33:00:40:08:89:
4e:a4:e9:cb:72:51:c7:50:d7:50:3a:e9:8d:8d:8e:
86:32:ec:50:b7:d6:d5:db:1e:96:8f:44:d1:8d:14:
f9:0e:d8:13:fc:67:d9:7e:f5:7c:9e:6a:d5:b9:75:
12:f6:a2:c3:8f:7a:3b:39:2a:c6:24:11:d7:96:90:
c1:7c:1b:9f:58:b4:04:ac:b3:77:33:7c:19:92:ef:
2b:75:48:b4:68:b7:18:1c:c3:d2:89:1e:d8:ab:ed:
86:49:f1:7c:2d:9a:2e:b7:fd:cb:35:4d:1d:64:fa:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:6E:02:6D:2C:35:6F:C0:C5:DA:E0:40:B2:65:7A:4C:5E:6E:96
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0db0efa7-dcf3-4300-bb78-6e8d644bcabf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:800::/40
Signature Algorithm: sha256WithRSAEncryption
12:8f:c7:66:c7:e6:d9:e6:b3:cf:59:f2:cf:71:11:c2:69:be:
d5:9e:e5:53:29:1e:d6:56:b7:b1:24:fa:ad:f9:39:0a:66:cd:
c4:23:88:9a:e9:16:4c:bb:07:c1:c7:33:fb:6d:ad:85:20:96:
91:df:e6:07:c0:f5:8f:2c:96:ef:32:41:0c:a4:33:34:19:bb:
98:5d:cb:91:60:eb:27:6f:b8:dd:b5:51:f9:f0:4f:f4:e1:0d:
45:7c:c7:a0:d7:62:c8:79:ea:82:71:5b:5d:70:88:68:d6:4a:
cd:79:e1:61:30:33:12:59:cf:e7:18:0a:04:c2:48:dc:8f:bd:
37:1c:2a:ba:38:bc:d6:82:4b:d8:57:4c:6e:8b:74:c5:e5:b3:
aa:19:0a:0d:8c:a6:ef:47:f2:d6:4b:9e:31:83:4a:d4:e6:10:
17:22:a8:16:cc:7a:57:fa:04:5c:f0:58:cd:d0:13:e0:a8:58:
fc:3e:b7:fa:33:38:68:e3:bc:26:e1:46:51:e6:a1:f7:25:02:
2b:93:3d:0c:ba:a7:bb:53:09:c8:17:31:c2:b3:7f:05:fb:26:
19:1a:2a:52:c1:39:f5:95:39:04:56:3d:0c:2d:37:01:82:e5:
0e:c2:92:ea:84:29:77:64:cb:d9:91:68:ce:52:a0:81:e2:28:
93:9d:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:01 2026 by rpki-client