Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/366bf9fd-94e8-4c42-be1d-95a2dafcfa4e.roa
File: 366bf9fd-94e8-4c42-be1d-95a2dafcfa4e.roa (raw, json)
Hash identifier: uK+E+UHZ3PWaX51Es6dSN+AZiA/xSnzt8xG5s45F7yk=
Subject key identifier: BF:6D:C3:A1:17:C4:A7:BE:76:0D:8E:5E:88:A3:E2:69:38:A1:C5:DC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5FE523DE76FD10613F9990D8C90AC2A9F6895610
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/366bf9fd-94e8-4c42-be1d-95a2dafcfa4e.roa
Signing time: Wed 12 Aug 2026 21:06:50 +0000
ROA not before: Wed 12 Aug 2026 21:06:50 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e5:23:de:76:fd:10:61:3f:99:90:d8:c9:0a:c2:a9:f6:89:56:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:50 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=d1f946766462c28d1914406da074232a67b86531cfc1f3affa2e25421d92a3d0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:36:3b:ec:f1:d3:44:96:b8:a0:ee:5c:9e:
e7:d8:53:ec:de:cf:b7:39:4d:29:44:60:b7:ba:e3:
f3:56:e5:eb:0f:30:d7:ba:51:78:99:a7:a7:5f:8b:
17:a5:ce:2f:61:14:ec:ca:65:bd:0d:9d:da:6a:34:
9d:7b:46:46:22:6e:70:ab:0f:c0:73:bf:6d:c8:a2:
eb:6b:18:89:40:d0:8e:46:f5:f3:ee:16:fd:30:8e:
62:32:aa:21:a1:de:98:a4:2b:7e:58:0a:d2:54:0e:
7d:00:13:12:4d:3d:b6:2c:a1:71:a5:11:23:bc:46:
e7:cc:d9:e7:20:56:ed:fc:94:df:cf:2e:12:9b:8f:
1d:80:d5:b8:7a:77:e4:4c:d6:20:bd:29:8b:f4:1b:
b6:ff:52:5e:7d:bf:08:99:b1:72:63:d3:3a:a3:bc:
bd:3d:00:5b:3f:71:68:cc:c9:1b:91:d5:33:5b:29:
5a:af:92:e6:36:8a:f6:86:58:2a:4d:f2:65:b9:b7:
c1:d8:c6:57:05:84:d9:3f:56:ad:94:72:27:e8:83:
4b:f0:fb:df:53:77:65:11:b8:89:59:c2:ce:b1:2c:
6b:00:13:49:ae:87:b3:a1:d3:38:ad:a1:73:eb:18:
db:d2:e4:8c:5a:3e:8d:9a:59:cc:51:f9:07:9a:40:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:C3:A1:17:C4:A7:BE:76:0D:8E:5E:88:A3:E2:69:38:A1:C5:DC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/366bf9fd-94e8-4c42-be1d-95a2dafcfa4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:a000::/36
Signature Algorithm: sha256WithRSAEncryption
ad:f0:5f:e4:ee:bc:8b:a3:fe:3d:3d:9d:58:23:a9:ec:8c:de:
5b:1c:c1:e5:3d:6d:26:01:60:fe:dd:94:ed:7c:88:60:fa:ed:
f5:56:78:33:9f:b1:62:60:74:07:a6:f3:e2:73:29:14:bc:8b:
86:6a:24:0d:3b:14:e0:5e:aa:02:0c:2d:c8:c7:9e:62:de:55:
4e:bf:79:be:5c:77:89:9e:59:1c:be:7f:33:a7:87:55:13:13:
ae:bb:be:a2:cd:8c:b1:09:5c:e7:d2:18:3a:61:e3:16:24:9e:
47:f6:3f:aa:3e:52:ff:60:40:1f:85:7b:48:92:4f:16:07:31:
c8:c3:90:40:4f:06:f4:23:1d:29:f3:d1:69:bf:b2:2d:bc:8f:
5d:c6:e5:55:56:37:c3:48:53:04:d2:d7:db:a9:b3:6e:1b:02:
19:04:1f:97:c0:bf:10:af:ba:30:de:61:58:53:4a:20:0f:86:
52:6c:d1:ac:fa:c0:c6:ce:6c:79:78:2a:4f:e5:a8:d9:dc:84:
7f:32:a9:a8:77:3b:8c:c6:1c:e9:9b:67:57:12:0d:de:47:97:
66:21:1b:3a:08:36:87:0f:79:65:51:f6:0e:4b:a1:bb:b2:ec:
5c:8e:ea:33:f4:34:fe:99:2d:f2:02:b4:3c:f8:35:fe:72:9e:
6c:8f:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:06 2026 by rpki-client