Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8e458492-ba3b-453a-afe0-34ba1bc794b3.roa
File: 8e458492-ba3b-453a-afe0-34ba1bc794b3.roa (raw, json)
Hash identifier: 72QV7uqytQNNyQ3vyJVCVFepl578LL2J+9B+Fx5wvdc=
Subject key identifier: B2:01:30:56:06:F9:EE:4F:8D:36:F4:4A:9F:7D:25:6A:58:7A:AB:F1
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6525CCB1E9466B6958C9C33BD49A67163C485CF1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8e458492-ba3b-453a-afe0-34ba1bc794b3.roa
Signing time: Wed 12 Aug 2026 21:04:20 +0000
ROA not before: Wed 12 Aug 2026 21:04:20 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:25:cc:b1:e9:46:6b:69:58:c9:c3:3b:d4:9a:67:16:3c:48:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:20 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=6602c7c2906c677340ee4a555a26462bbf8c4b3170cde064a3c6311b2d09f2cf, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:f1:b2:27:b0:3f:bb:ef:a6:68:bc:f7:56:
6a:03:18:a5:67:4a:06:4f:ed:dc:0f:86:8c:f4:11:
17:b6:23:0d:82:c9:92:fc:6a:f1:46:88:e3:5e:b3:
e4:a6:4c:ec:70:8c:cc:2d:93:d6:7d:50:d4:32:8b:
10:eb:6a:02:78:04:e5:0f:d7:92:77:b1:f7:4a:d8:
dd:ed:cb:6f:88:9c:b5:96:5b:d1:ab:f0:55:ff:21:
15:9e:27:10:93:36:89:a3:26:60:00:54:a9:7c:73:
94:46:17:31:67:1a:ff:c7:4e:d1:c6:8f:b1:57:fc:
cd:51:f5:70:d1:f7:fc:87:4b:be:fe:d5:d0:8f:ff:
85:05:b8:bc:bf:99:57:ad:7e:6b:f4:e6:9a:73:5c:
47:42:d0:5c:06:01:cf:cf:44:5c:85:08:12:25:9d:
e0:e8:95:d3:55:73:ad:30:7b:5a:c0:75:b0:ed:a9:
d3:81:cf:7b:af:70:23:d3:73:80:94:9d:57:da:e7:
7e:a0:81:91:e4:a1:68:82:7d:8d:a9:cb:87:f5:7a:
e6:1c:82:b1:13:d4:0e:c8:6f:6d:b4:fa:01:08:79:
3d:4b:b6:98:a4:f4:ac:d6:9f:92:27:fe:a0:3e:25:
8b:a2:0a:f4:d5:1e:4a:f0:de:e2:38:be:5b:52:36:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:01:30:56:06:F9:EE:4F:8D:36:F4:4A:9F:7D:25:6A:58:7A:AB:F1
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8e458492-ba3b-453a-afe0-34ba1bc794b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:9000::/36
Signature Algorithm: sha256WithRSAEncryption
48:4b:b0:45:2c:26:c7:a9:b6:10:d2:34:79:f3:78:45:7f:d6:
7f:f2:dc:28:69:fd:e9:8f:b6:4d:fe:16:ce:8d:c8:ec:cc:10:
60:09:96:b2:8e:72:09:1b:e7:18:5f:6c:c0:be:00:3a:63:aa:
2b:18:f3:1a:0f:ce:3c:f1:9d:43:b8:1f:6b:11:f1:24:9c:58:
ec:66:fe:37:81:35:a8:e3:fc:14:1e:77:aa:9b:17:95:b6:d2:
10:9f:a4:c8:90:39:49:b5:fe:6c:5e:6a:37:80:ef:c2:bd:bf:
ce:2f:f6:41:ab:87:62:fb:d2:cd:0a:ca:d0:fb:ef:d1:80:32:
81:d4:f0:d8:2c:a9:54:93:07:1f:41:14:5b:c1:14:41:48:41:
07:17:2f:a5:39:af:e9:d6:d1:7b:86:cd:ce:b5:8a:69:6b:82:
31:17:ac:05:81:4b:5f:c9:75:a9:0f:5a:01:c8:5b:3b:6e:e0:
0a:c7:07:df:74:6b:2e:d6:35:47:85:b0:a2:40:a3:79:e6:a0:
9f:04:99:86:02:9e:81:52:3a:52:90:3a:60:24:7c:9d:a0:3c:
ae:c1:31:53:2f:1c:22:6a:62:d6:52:c9:b9:b3:35:04:e6:55:
a8:d9:fb:a5:66:a5:4e:42:7a:ca:1a:d1:c9:92:7c:71:43:dc:
7d:8d:a9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:49 2026 by rpki-client