Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/35febdbc-0173-4bc7-beff-4e52aa0f9683.roa
File: 35febdbc-0173-4bc7-beff-4e52aa0f9683.roa (raw, json)
Hash identifier: 12EF8EnmiZdwqZY2Zp/biPMFOO1E/K0Pk75NjTkTbxY=
Subject key identifier: DA:6A:63:70:5F:76:F5:6D:71:36:07:90:C2:A0:DF:DE:7F:8A:62:A7
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5AFBA25984D41E03F94698B837A8ED6457FCB9C1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/35febdbc-0173-4bc7-beff-4e52aa0f9683.roa
Signing time: Wed 12 Aug 2026 21:04:23 +0000
ROA not before: Wed 12 Aug 2026 21:04:23 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fb:a2:59:84:d4:1e:03:f9:46:98:b8:37:a8:ed:64:57:fc:b9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:23 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=b3e8a52fc073d3704289f443838a2eafcd548896380b018e5590da2545dd6c6a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:98:23:ee:69:41:2b:56:6c:a7:05:bf:3f:
ee:9d:58:73:3f:f6:55:56:01:ba:67:75:3c:da:4f:
46:4e:9f:e7:dd:13:9c:a4:75:2c:87:82:84:9d:93:
55:43:50:dc:62:cd:b3:91:d4:7b:c3:d6:20:f3:c1:
41:7a:f9:af:4a:1f:11:7d:d6:af:e0:57:c4:b9:f4:
08:68:43:e8:be:fc:37:fc:1b:76:d4:8f:be:b5:d4:
92:0d:80:26:00:d8:65:cd:7f:82:07:f1:d1:5a:d5:
c2:16:60:5c:2c:c1:59:9e:21:30:ad:2c:e5:89:67:
87:17:cf:26:da:c6:d7:b5:ac:70:09:3f:4d:b7:66:
24:48:f1:10:18:2a:b8:dd:ab:6d:c4:47:14:08:8d:
d3:d9:be:29:28:2d:a4:ea:86:3b:24:e2:28:d9:11:
a9:40:a6:2c:c5:3a:e9:d2:c4:aa:78:9f:df:24:5d:
6e:d3:64:73:b0:8b:45:31:7c:c7:ce:72:4b:9b:3b:
e4:69:05:4b:5a:5d:74:07:15:31:05:43:d5:1d:87:
1d:3b:ad:3c:fe:1e:3d:e2:48:05:d0:0d:45:2a:f7:
3f:66:d2:c0:48:29:52:ac:75:51:84:d2:25:e8:84:
70:0d:77:86:62:9d:55:f5:41:99:dd:6c:9a:54:f7:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:63:70:5F:76:F5:6D:71:36:07:90:C2:A0:DF:DE:7F:8A:62:A7
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/35febdbc-0173-4bc7-beff-4e52aa0f9683.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:8::/47
Signature Algorithm: sha256WithRSAEncryption
c6:d7:02:54:20:ab:36:4f:d4:ba:d7:92:5b:87:16:ed:5b:83:
bf:bc:f1:2d:ad:35:73:53:c9:1e:b4:56:89:ef:c6:37:42:69:
9c:a8:91:13:f7:e6:c9:46:37:66:ee:13:30:42:01:f2:a6:87:
45:e6:50:d9:4e:d7:ca:ce:41:42:3e:a4:63:e8:ca:ff:e8:65:
ad:42:c4:0d:6f:c3:ed:46:df:c6:88:e1:c4:25:c7:ba:99:0f:
d6:5e:5b:6c:cd:df:67:cc:60:14:5b:c8:46:3c:50:95:96:eb:
21:06:5a:c5:d9:04:cc:44:9a:cf:75:4e:0e:0c:36:9e:8d:2e:
dd:ec:0d:76:a1:d4:7e:1b:3c:94:0c:2b:b5:ac:e2:5d:b4:cb:
c5:5a:95:ec:9a:73:17:54:e4:9b:b6:3c:76:51:44:45:ee:08:
ac:6e:9a:7f:64:64:57:8d:17:78:b2:86:80:3a:b4:53:35:35:
51:1c:43:2b:6a:e3:e7:b5:3f:e1:62:ec:19:f3:6e:1c:55:da:
4d:6c:07:ab:72:50:49:06:6e:9c:e3:9f:3d:64:25:20:19:77:
84:4d:8a:ed:d1:a2:b0:f8:1c:c7:ac:49:23:f7:0b:1b:c1:75:
81:b0:50:5f:83:1e:f1:d9:91:ce:ad:84:02:cc:80:9f:b9:cd:
a1:ca:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:31 2026 by rpki-client