Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7f4cc1ad-3163-439e-86e1-14a5e4af4dc7.roa
File: 7f4cc1ad-3163-439e-86e1-14a5e4af4dc7.roa (raw, json)
Hash identifier: l0SKOdJPs72ajg86/2b2K3EzIskniGx6QQmXNUwyQcA=
Subject key identifier: F7:A6:C2:B2:F7:90:F9:74:D0:C5:08:21:12:BC:AF:B5:7C:87:DB:B4
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 39A3016CB760F0DD6132D5AC31B872BAEC9237A5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7f4cc1ad-3163-439e-86e1-14a5e4af4dc7.roa
Signing time: Wed 12 Aug 2026 21:04:25 +0000
ROA not before: Wed 12 Aug 2026 21:04:25 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc0:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a3:01:6c:b7:60:f0:dd:61:32:d5:ac:31:b8:72:ba:ec:92:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:25 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=8e33d4d18080593a0d247d24573e0c3c61dd9d1b2967fd29aec8afa00d471e6e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:29:b7:66:91:44:89:56:15:4e:92:27:61:
a6:00:f2:df:f1:ce:6e:a4:53:17:0f:1b:93:85:f7:
a4:86:10:3d:d8:6c:9e:55:24:76:37:4e:6c:46:c2:
18:32:13:67:5d:45:83:57:d9:6c:1f:5c:fc:3e:d3:
37:8b:d3:8a:f6:6a:d5:32:55:16:05:39:1f:d8:50:
80:00:9d:0e:b5:2e:6e:00:ef:0d:04:7e:7d:f7:02:
e1:0e:c8:e4:d5:70:8a:80:c8:2c:9e:19:e5:c2:a9:
02:04:0f:30:85:e8:28:ff:03:57:6d:bc:48:11:10:
22:49:68:02:bc:1e:33:f4:01:8f:88:c9:06:b1:b6:
d6:bd:b2:92:bc:95:37:17:e8:88:04:ac:00:a6:7d:
ba:2e:27:33:33:54:84:cc:4c:3d:a9:e1:1c:7b:a6:
bd:7b:ec:e8:33:50:46:6a:b2:20:65:59:6c:9d:f4:
90:71:b6:80:9c:48:8c:fb:f5:79:22:fd:09:e4:fc:
25:ff:0e:bc:34:fe:b1:d2:98:a1:8a:9a:36:71:58:
13:9b:4a:2a:d0:c8:65:3e:72:b2:35:32:52:47:0e:
18:b4:d6:f1:1f:37:81:68:f3:e9:29:71:c4:68:b8:
a3:f5:dc:fd:5f:f9:ac:cc:aa:51:dc:1b:c4:9f:3b:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:C2:B2:F7:90:F9:74:D0:C5:08:21:12:BC:AF:B5:7C:87:DB:B4
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7f4cc1ad-3163-439e-86e1-14a5e4af4dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc0:840::/48
Signature Algorithm: sha256WithRSAEncryption
9a:96:49:48:7c:20:a5:8c:3a:75:04:cc:9d:ad:93:5c:a5:5b:
5e:de:e1:7e:b3:da:77:f0:34:c2:d7:9c:2f:e2:36:fc:97:9b:
f0:e6:fc:f9:a4:c9:fe:75:36:a9:ec:33:fe:c1:9c:37:20:aa:
82:90:db:38:85:69:d7:e5:94:dc:29:ab:7a:f9:67:37:ab:ca:
99:4f:06:40:67:16:00:51:b9:04:29:4a:6d:80:69:68:56:e7:
ee:a5:7c:91:3c:ed:ac:d7:96:88:b9:d6:a2:96:18:97:70:83:
89:68:01:d6:62:2c:bb:32:ad:fe:c8:b6:1d:7f:21:2c:0e:eb:
bc:e3:5e:45:04:3c:a0:7b:b0:65:8e:ee:0e:cf:bc:a8:e0:d8:
1a:29:04:35:5b:65:a6:ad:78:a1:9a:99:0e:ec:bd:b6:18:bf:
ff:d5:95:5d:6b:0b:82:8d:72:12:7c:fc:78:d6:22:ad:b8:24:
0d:76:76:9a:02:ea:20:2a:47:f0:b8:5d:18:23:e4:be:c6:50:
cb:21:99:cd:3b:f4:b9:54:b6:7c:e9:04:7f:2a:fe:f9:d1:d4:
08:70:13:23:8e:9d:75:16:7e:c9:15:9e:4f:ba:8c:ca:02:d6:
7e:9b:00:10:41:a1:4f:87:2e:22:e7:9c:5b:ea:2b:0c:39:8b:
b6:81:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:47 2026 by rpki-client