Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa
File: 414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa (raw, json)
Hash identifier: OdGhQZ6Zimr5q+CzBGgAuR4oNjExXG14ZS0IjW4LM64=
Subject key identifier: FD:78:30:9F:B6:BB:24:B8:CE:02:26:E5:12:59:79:A3:C7:19:94:EB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 73AA37104B9A6B29C74FF24D67BA57FC5B412E8F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa
Signing time: Wed 12 Aug 2026 21:05:34 +0000
ROA not before: Wed 12 Aug 2026 21:05:34 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:aa:37:10:4b:9a:6b:29:c7:4f:f2:4d:67:ba:57:fc:5b:41:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:34 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=d91e33213b8e300903bfe1e12a18ce0a3d22048fe3cebfd868d23c810075b9f1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:c1:3f:b4:92:7c:0a:24:f1:8c:6b:31:86:
70:74:a4:71:83:4b:32:a4:0e:03:ef:89:dc:89:17:
1f:0d:78:af:c5:b6:83:28:0d:d6:99:5b:3e:30:b6:
6f:fe:d0:1c:f7:95:8f:58:b5:2e:e7:7d:9b:be:d2:
8d:79:dd:ce:32:97:3a:15:40:5d:cf:d4:72:bf:0c:
b3:45:d5:bf:bf:8d:5c:15:9c:21:7c:5b:40:47:47:
93:1e:d2:d5:e6:89:72:3e:e0:24:f9:f1:77:46:9f:
2f:7d:30:fe:31:a2:f9:c2:52:e0:7c:fa:36:c6:8a:
59:05:d5:63:6a:df:71:39:be:e2:5b:79:91:82:8b:
49:6b:cc:bc:8a:f7:99:71:de:8f:3f:f8:18:27:28:
5f:5a:ba:a7:70:2b:cb:74:e0:46:4c:67:91:67:ba:
26:3f:19:ed:25:e2:50:37:1e:aa:8c:41:60:75:33:
83:e5:99:59:62:1c:9b:40:00:d8:7e:62:22:56:50:
a3:4b:3c:56:2c:c7:18:b3:4d:d7:85:56:ca:2a:f1:
a1:29:60:54:ff:9b:3b:e5:6c:9d:f8:bf:f0:69:73:
93:2f:18:9d:86:91:d1:67:65:36:08:88:50:f6:c7:
ad:6a:b5:14:8c:41:74:98:79:c6:12:7a:c3:5f:55:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:30:9F:B6:BB:24:B8:CE:02:26:E5:12:59:79:A3:C7:19:94:EB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/414f8b3d-a47b-4b6f-9a24-e99cd78a951b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f440::/48
Signature Algorithm: sha256WithRSAEncryption
c0:a1:9b:e8:90:c8:dd:64:2a:79:42:d9:f3:5b:c8:dd:6b:fb:
23:28:4f:a7:3c:25:88:6b:d7:ff:17:51:fa:e5:92:4c:ce:7d:
c9:67:52:83:ee:30:7e:bc:dd:8e:c2:28:d3:95:9a:7a:96:b0:
17:fa:76:0d:d4:ec:4a:69:5c:74:d1:9a:e3:7c:ee:b0:d9:38:
56:7f:e5:73:6f:b1:eb:70:3c:37:79:66:e3:0c:d4:de:ce:50:
0e:66:d4:c5:a4:70:3f:75:fd:76:a9:da:43:4d:fb:6b:f9:e0:
05:87:d4:90:64:ff:de:74:48:d8:35:1d:62:ab:f2:6d:c2:ed:
c0:c1:41:00:9f:3b:4c:57:f1:0a:09:61:c0:9c:10:03:21:ed:
36:bb:2a:86:46:6b:13:a0:08:5f:94:77:16:74:c8:63:70:95:
59:71:34:74:3c:be:69:af:40:00:c8:39:08:ef:41:8c:92:6f:
2d:f6:d1:64:36:6b:21:76:a9:c9:ba:37:72:99:8c:93:ef:2f:
76:a4:88:c0:ee:14:cb:56:13:24:31:e6:d4:b6:0e:33:f7:18:
81:56:5c:fc:6e:3e:ce:1b:91:4a:55:ce:70:92:f8:5e:68:22:
7a:d6:20:03:2d:59:6a:01:81:ae:62:36:0e:85:a0:a8:5f:d2:
05:6f:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:32 2026 by rpki-client