Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8d661aab-e6b5-4ca0-8109-f0e7f4d24c4f.roa
File: 8d661aab-e6b5-4ca0-8109-f0e7f4d24c4f.roa (raw, json)
Hash identifier: kIZjSnc4i99PzAit0+qcR3sMyXIVr0lVMk/DmRw7ZCU=
Subject key identifier: 7F:6A:B3:B8:73:7F:EA:32:E3:1A:71:CE:F5:8F:01:4F:C1:AF:17:15
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 442029529188D52FC523C49D812F81E561699189
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8d661aab-e6b5-4ca0-8109-f0e7f4d24c4f.roa
Signing time: Thu 30 Jul 2026 01:20:03 +0000
ROA not before: Thu 30 Jul 2026 01:20:03 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:20:29:52:91:88:d5:2f:c5:23:c4:9d:81:2f:81:e5:61:69:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:03 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=908ab487deaf1967a519a0a6624acc3e708aabd05a839eac40c16a47d7f500f1, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:55:f8:c0:f7:5f:be:13:22:be:d3:44:ce:
ff:9d:a8:a2:77:dc:16:54:f8:05:5c:37:34:f3:62:
98:66:f1:ff:b9:81:65:1a:ac:6b:19:8b:85:d2:43:
50:e8:14:75:55:ac:d8:67:e8:0f:1f:82:4b:ab:b5:
27:68:d5:a2:d4:c6:3a:fe:3b:a8:35:7e:92:81:6c:
5d:4c:8e:6f:91:98:32:22:66:ec:11:60:bc:ae:99:
05:f0:6e:a5:d8:d4:47:8f:c6:11:55:f8:98:56:91:
18:5b:26:61:35:0d:66:6a:5f:c8:0f:89:e3:17:97:
bb:ed:82:44:9d:e0:5d:de:26:ed:ea:13:f2:c8:a0:
74:9d:82:1f:a9:82:58:5a:ef:c3:0b:c7:42:e1:e4:
36:0b:76:52:66:a0:36:5b:5a:33:32:d8:fc:8b:c3:
6f:4e:30:35:cc:f3:ea:7b:2b:de:03:57:e6:7c:93:
88:04:67:78:94:bc:d3:29:36:2c:1e:80:26:af:d1:
b8:6b:6c:a5:2f:e8:05:5d:35:63:79:12:01:b8:42:
c9:d8:1f:62:15:f1:f9:3e:68:65:e9:35:9a:57:50:
28:4f:0a:8d:ff:3f:b6:69:61:02:3f:2e:93:35:06:
b3:9f:c3:ae:2d:a7:59:e5:91:93:1e:9d:b5:a7:59:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:B3:B8:73:7F:EA:32:E3:1A:71:CE:F5:8F:01:4F:C1:AF:17:15
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8d661aab-e6b5-4ca0-8109-f0e7f4d24c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:b000::/36
Signature Algorithm: sha256WithRSAEncryption
27:b7:ef:ef:f3:04:af:31:91:32:2e:3f:ca:f2:56:b0:04:29:
6b:9f:61:dc:c7:e6:26:bb:02:66:3a:ce:c2:bf:58:f7:70:1b:
24:66:1d:b5:fd:3f:89:fd:b0:45:8c:e4:48:9b:07:ed:0f:f3:
2c:f5:ec:b6:eb:a1:7f:4f:d9:3e:11:38:2a:dc:0e:8f:bf:e1:
e2:74:6c:cf:d8:fe:36:90:83:b6:55:3f:23:ba:45:e9:0d:5e:
3e:d8:ee:0f:92:86:d4:0d:9d:4e:78:cc:21:b9:e7:40:bd:3b:
f6:fd:62:17:4e:7c:ed:63:b7:f1:b1:7f:6e:fe:97:88:9e:5a:
7c:9a:4a:ef:7f:8a:4b:cd:1d:37:04:1a:23:a3:b2:f4:db:43:
ea:b6:b7:3c:c5:83:a9:3e:78:71:75:d8:4c:53:b9:da:3d:2b:
12:da:6a:ff:b5:d1:34:1a:d9:f5:60:0f:b6:2e:ad:76:31:2d:
0f:68:8b:0b:be:80:74:f2:85:a0:ad:9b:79:ba:96:14:20:76:
2a:33:d5:15:80:56:19:7d:69:4d:b0:86:b0:51:2b:5e:5a:84:
bd:ad:0d:1d:47:22:e4:53:8c:01:14:20:44:cc:b5:69:d7:fd:
89:fc:e3:a1:e1:60:dd:e8:20:0c:db:de:3a:b3:c5:92:cd:b7:
37:a1:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client