Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3a4fa4d8-f1fb-4793-958d-b02d3b648d26.roa
File: 3a4fa4d8-f1fb-4793-958d-b02d3b648d26.roa (raw, json)
Hash identifier: e4ivsAkv6CeYwldedKYKt/KagZ6yLn9x43CaLvSPxOc=
Subject key identifier: 9F:7A:A8:0F:C3:28:A0:2F:A4:7E:69:62:43:C6:9D:05:E4:B7:F6:9B
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 33E85F384347EAC4A7896A28D819B1A2F4C95F45
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3a4fa4d8-f1fb-4793-958d-b02d3b648d26.roa
Signing time: Wed 12 Aug 2026 20:49:21 +0000
ROA not before: Wed 12 Aug 2026 20:49:21 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 83.118.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e8:5f:38:43:47:ea:c4:a7:89:6a:28:d8:19:b1:a2:f4:c9:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 20:49:21 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=e4774aeee36bce0bf06006386c4ac28f2f57e70d32199349e81acac13790d7d3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:26:b9:21:57:05:15:e7:d4:ec:5e:96:56:
9d:03:6d:18:e5:8a:74:39:13:fd:a8:c2:84:20:02:
ea:f2:db:02:ac:9b:12:2a:08:29:49:69:58:95:f7:
3e:c6:fd:33:d0:90:24:e7:5c:c8:e5:73:1c:a7:cb:
62:c1:8e:a2:8f:a1:1b:77:d9:0c:6c:e4:12:96:39:
8e:0e:df:37:95:57:b8:ff:2d:55:bf:c8:3d:68:b9:
d6:f4:34:af:32:fb:fc:08:00:a2:7a:a3:73:57:15:
d2:63:2f:35:86:f2:12:bf:31:2d:9b:24:d0:48:d8:
56:e8:a2:13:cd:1d:2a:d4:c8:c1:2f:a8:c8:8d:d0:
2c:f9:1d:4f:d2:43:b8:a2:65:02:f3:b5:dc:e9:75:
05:c5:ad:29:71:f8:e5:9e:78:5c:6e:84:b3:88:09:
80:0d:59:b4:43:7d:58:be:42:c5:04:b8:72:82:d5:
db:8f:41:57:ea:bf:5e:bd:5a:81:77:09:30:ea:84:
04:b5:4a:1b:08:e1:da:cf:51:6c:e7:9b:ee:66:99:
90:f1:6b:a3:06:cc:22:8b:67:30:94:e3:c2:bf:55:
75:e3:db:62:e6:77:5a:de:c7:3d:e0:fe:da:71:30:
ab:aa:b6:e9:0f:9d:bc:cd:dc:0c:5f:62:a1:bf:f9:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:A8:0F:C3:28:A0:2F:A4:7E:69:62:43:C6:9D:05:E4:B7:F6:9B
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3a4fa4d8-f1fb-4793-958d-b02d3b648d26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:d3:f8:65:d6:5f:33:31:ff:5f:f4:da:00:c0:99:ed:ad:d4:
dc:25:04:69:34:cb:61:74:0a:21:6c:75:34:8e:90:c7:cd:63:
c1:9b:1e:c6:37:17:c9:0e:16:7e:a6:c7:d7:2c:7c:8f:02:77:
d0:08:63:92:20:eb:22:40:20:05:09:6c:90:a4:62:e8:54:3c:
74:7a:5a:c8:da:b8:64:af:65:bd:fe:59:6c:57:ae:84:17:da:
27:95:2c:a4:6b:fb:05:ae:f4:a8:48:93:3c:01:5c:18:ee:18:
6d:c7:6b:a3:2d:82:d5:3b:19:25:66:30:ec:f0:e3:1e:18:bc:
42:54:48:f2:ca:b8:0f:65:69:08:9a:0e:21:ef:1f:df:22:d8:
39:15:15:28:ed:16:57:76:c5:93:e8:c2:2b:da:7c:d9:ee:94:
07:1c:d9:e4:fb:f0:87:e7:5a:da:d5:91:0f:95:c5:41:5f:0c:
7e:ec:ae:86:ee:1c:30:2b:34:f3:46:92:dd:35:c4:de:2d:5f:
c5:58:3a:0f:36:a4:9c:1f:a1:46:f7:06:00:03:3e:71:bb:cb:
0b:3f:80:8e:f2:c9:15:f3:fc:1a:eb:a3:ec:1f:37:81:cb:63:
1d:5b:49:1f:71:1c:e7:5f:9b:c0:ed:9e:da:c1:40:47:9c:52:
5b:34:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:28 2026 by rpki-client