Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7e48b28f-50c5-4191-84a7-4feb8b186046.roa
File: 7e48b28f-50c5-4191-84a7-4feb8b186046.roa (raw, json)
Hash identifier: 8mJKcMlxMO6cW1R8BgypEAtrO+ZEvgUR1EIw4ymupnI=
Subject key identifier: D8:A3:E4:DA:95:0D:46:B9:C1:39:D7:08:46:9E:DE:14:C6:E9:90:6A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3F08DAB1C257C49600BB2FF7753AD9B276431E85
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7e48b28f-50c5-4191-84a7-4feb8b186046.roa
Signing time: Wed 12 Aug 2026 21:05:42 +0000
ROA not before: Wed 12 Aug 2026 21:05:42 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:08:da:b1:c2:57:c4:96:00:bb:2f:f7:75:3a:d9:b2:76:43:1e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:42 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=2fd42246e7d1a9d56150447f855389409833c1408af5dc6f1b28bc5c3e83322a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:b8:0d:8d:b5:cb:5d:b0:75:3e:60:54:c5:
a5:2f:32:d7:87:0d:42:a9:a0:aa:d2:d4:bd:a2:ee:
88:1a:b0:8d:6b:c1:6b:c1:51:00:f1:09:32:c2:9e:
83:d0:5b:27:3c:18:fe:dd:33:6b:a0:f9:f2:58:30:
e3:05:2f:88:49:f9:0d:82:e7:4a:c7:70:e8:d0:ba:
cc:94:cf:95:0e:94:c5:4c:f7:f3:23:2b:75:3b:80:
fd:74:06:87:2e:57:fd:06:6e:09:37:30:22:06:3a:
bf:0a:86:15:2a:d5:3a:3a:4c:3a:5d:f1:d9:93:a0:
29:11:12:ac:bf:1d:d9:86:45:22:9e:86:66:cb:c7:
d4:37:cb:e0:fd:51:fb:e7:f5:1f:9f:c7:ff:c7:5a:
93:71:9e:87:88:c9:e2:c1:1a:49:24:a2:7a:c6:4e:
d2:c4:ee:f6:78:f2:24:a8:7b:64:d5:44:0c:2b:41:
c8:5a:c4:58:a3:84:90:58:43:b6:c0:bb:0e:1e:b7:
b6:43:a6:28:e5:15:f2:8e:4b:3c:1b:bb:86:bf:e4:
46:48:93:0e:78:9a:9c:96:4f:c3:ab:5b:75:a2:b7:
61:1d:54:7b:f1:dc:85:41:65:56:ef:f5:e5:cb:10:
27:de:63:5d:04:59:bb:3e:cb:3b:13:ff:13:a9:0f:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:E4:DA:95:0D:46:B9:C1:39:D7:08:46:9E:DE:14:C6:E9:90:6A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7e48b28f-50c5-4191-84a7-4feb8b186046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:8800::/40
Signature Algorithm: sha256WithRSAEncryption
3c:7f:f7:8d:27:e8:ed:0a:f5:7f:5d:d1:c0:2f:e4:c0:95:12:
0c:26:85:4f:0e:56:10:51:b9:89:0a:06:fa:d8:40:b5:94:1d:
ad:18:44:3b:e2:36:62:be:3c:84:be:de:91:0e:ad:0b:8e:cf:
33:18:cd:71:eb:6b:01:57:10:0b:0a:ee:ff:d4:ba:2b:cf:11:
a5:2a:68:c7:f7:5c:67:b7:b9:63:60:76:29:90:87:9b:e5:c4:
42:5d:3b:6f:37:b0:16:c9:75:9a:44:46:56:d5:6e:9b:0b:72:
30:d3:b2:dd:d2:cc:69:b5:b8:01:0f:a3:e5:d8:06:a8:bc:02:
a2:d0:c2:b0:e1:83:73:f9:8d:e0:c8:0f:f2:57:e9:33:7a:4b:
e5:e0:b4:ae:9f:c3:c1:ad:26:82:20:15:fb:f0:1b:7f:18:d2:
de:49:10:ed:e4:77:97:e1:d2:73:a8:86:2a:78:c1:12:2b:73:
0c:c3:36:c9:71:88:a1:64:76:37:b2:60:23:f2:ef:16:39:51:
d0:76:39:83:53:d3:b5:3e:77:b0:98:11:ae:b9:07:53:19:6e:
99:8f:4b:e7:5d:b3:57:f3:3d:c1:fb:b9:4d:b2:44:1f:92:b1:
d7:65:f3:c1:9f:6f:8a:45:ae:c2:25:07:b5:94:83:ca:e2:b0:
c9:e4:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:07 2026 by rpki-client