Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6286334f-028e-44af-b705-126efe9cac6d.roa
File: 6286334f-028e-44af-b705-126efe9cac6d.roa (raw, json)
Hash identifier: iNF65z381RJ3liCTRk86cuRox8WEWJmXboGR76eudvg=
Subject key identifier: DC:10:6B:6D:7A:59:C7:42:30:65:AE:95:C2:26:49:5D:38:A8:11:6E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 27C72C22EE18FFE87FD2EB31DF8C6BF91D0E0753
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6286334f-028e-44af-b705-126efe9cac6d.roa
Signing time: Wed 12 Aug 2026 21:04:26 +0000
ROA not before: Wed 12 Aug 2026 21:04:26 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc0:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c7:2c:22:ee:18:ff:e8:7f:d2:eb:31:df:8c:6b:f9:1d:0e:07:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:26 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=4ad827f7971409c8451c80e37ddb9a4b37e649ab3ec849d0bcfd8bda6547f08f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:53:d7:a6:0f:d5:19:a8:55:b2:24:04:aa:
df:47:eb:44:11:59:ab:e7:e9:2b:c1:a9:e3:8f:84:
ac:c0:31:04:d2:2b:18:c3:da:35:03:83:c7:2c:27:
43:53:8f:b1:d9:ee:08:d4:6f:42:3d:6a:59:64:10:
f6:8d:32:00:b5:56:d8:d1:27:05:5f:a0:37:0b:00:
a4:7a:03:bd:03:40:e5:61:a0:62:ff:36:4d:87:90:
be:a8:32:cc:12:86:9f:31:c3:29:7d:68:cd:6a:58:
ad:d1:0c:e2:87:fd:29:2b:67:09:85:15:5d:6b:e2:
c3:ca:82:cd:2b:bd:4a:ca:d0:f4:2c:eb:60:58:58:
0d:2a:e6:69:03:1f:06:8d:4a:d8:21:32:00:6b:0c:
91:cc:03:07:8e:95:2b:0d:4a:bd:75:d8:0d:f4:35:
8b:55:2b:21:cf:dc:60:b5:11:5c:be:f2:2e:f4:5d:
41:20:a9:55:76:ea:b7:3f:13:e3:07:5f:ef:f7:c9:
b3:27:83:cb:37:db:e4:7b:7b:19:4f:4b:21:13:0f:
26:de:a9:02:98:eb:84:01:c3:36:ac:81:38:96:9b:
68:81:87:48:68:01:2c:86:53:54:2a:c3:fc:e1:09:
10:c6:c6:72:9c:3d:4f:31:ee:7a:7d:6a:88:7e:37:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:10:6B:6D:7A:59:C7:42:30:65:AE:95:C2:26:49:5D:38:A8:11:6E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6286334f-028e-44af-b705-126efe9cac6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
44:b4:f8:1a:40:03:f9:32:0f:b8:0b:f0:3f:8b:16:ae:3e:79:
c8:b5:09:cb:7c:1d:70:e5:46:38:c5:b5:3d:f8:da:09:d9:4e:
17:a0:e2:52:50:f7:ed:b1:75:81:71:93:11:d0:fe:de:d6:df:
22:d1:b9:7b:00:86:8e:0b:2a:11:3b:e2:3e:00:9b:6f:f3:ba:
fb:60:16:8e:95:11:11:22:af:8a:68:13:49:4a:ff:bb:28:0b:
f7:19:77:fd:bb:5a:a1:d2:68:6e:8e:94:63:f3:7d:9b:32:c9:
6f:fd:4b:ac:48:de:cb:50:29:1b:2f:8b:ed:d8:d7:30:41:8f:
46:5e:83:43:3d:4d:44:d7:70:f1:49:1b:b5:0f:be:b5:db:af:
f7:bd:60:2c:76:e0:4e:78:d3:44:ab:b6:e5:84:d7:ff:fb:d2:
a2:ea:a8:99:ba:19:28:ab:6f:3d:4c:07:28:a5:a0:70:40:ee:
0d:63:d3:4d:c3:16:cb:1a:ab:a7:71:38:25:8f:ab:b3:24:1a:
54:03:b8:0f:80:7c:e5:74:47:28:93:b6:3c:ec:d5:5f:62:b1:
70:fc:95:b2:50:6f:6a:51:07:52:48:40:e6:1d:6a:fc:a1:e9:
21:a0:06:6c:fc:cf:f7:cc:14:1b:e1:8f:3a:ad:c1:dd:ca:30:
09:40:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:11 2026 by rpki-client