Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9004ec19-a16c-4e91-861c-3c961b28f3b8.roa
File: 9004ec19-a16c-4e91-861c-3c961b28f3b8.roa (raw, json)
Hash identifier: Bi5ngw/WX7h8M22/Q+xVvoY3n7rIVq82+qFvmcICPos=
Subject key identifier: 41:BC:33:AD:30:82:EE:1D:72:DA:D8:28:AB:93:BB:C9:14:3D:97:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7B01F0D95B18C8B19AA9BF8AE16878123C639A8D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9004ec19-a16c-4e91-861c-3c961b28f3b8.roa
Signing time: Wed 12 Aug 2026 21:04:15 +0000
ROA not before: Wed 12 Aug 2026 21:04:15 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:01:f0:d9:5b:18:c8:b1:9a:a9:bf:8a:e1:68:78:12:3c:63:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:15 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=27d65ddcbedd8499f7bcb7dda715f8d37ffcefc1f43bcc15cabacfe84fc4ce42, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:ab:fa:23:96:31:fe:d4:a9:67:c0:1f:a1:
8a:85:e3:13:fe:7b:94:2e:02:db:ac:73:12:ac:de:
6e:d9:dc:2e:ec:4b:02:f5:c3:70:d6:4c:a7:28:fc:
5e:0e:6c:a1:a5:13:75:8b:d6:63:8b:3f:85:3a:7d:
4a:ab:72:05:c4:16:05:44:fb:00:b9:c1:21:40:61:
08:3a:50:b1:3c:bd:16:3c:3a:bc:ac:c6:53:d6:d5:
b2:cf:b1:04:90:c0:fc:7b:bc:d0:3f:21:3f:b0:26:
e3:38:03:66:07:0d:97:47:5e:e7:f0:54:7d:75:92:
76:17:50:52:1d:b4:ac:ef:96:7f:59:28:ba:fa:c3:
71:44:ab:d0:af:ec:95:f7:d4:01:3d:db:49:a7:a8:
96:39:d6:e5:40:35:93:d6:63:3c:45:07:b9:b6:1f:
49:db:76:f6:4b:a3:0d:e4:b9:68:a5:fe:5c:14:7b:
f4:b1:68:be:96:20:ad:3b:2e:4b:ae:84:0f:95:1e:
1d:67:9c:5c:48:cc:ba:18:ec:aa:30:1b:44:9b:3f:
4d:7c:e0:11:77:26:53:8d:e7:d1:be:12:6e:90:8b:
21:9c:04:77:65:5a:c5:3b:c8:ce:e4:d2:28:86:a9:
ed:99:a3:8c:2b:e4:3f:51:ca:bb:f4:fa:73:94:34:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BC:33:AD:30:82:EE:1D:72:DA:D8:28:AB:93:BB:C9:14:3D:97:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9004ec19-a16c-4e91-861c-3c961b28f3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:5000::/36
Signature Algorithm: sha256WithRSAEncryption
52:ba:60:9a:b2:11:48:cd:1e:2e:3b:7d:97:34:f0:4a:0b:b8:
c7:f5:38:22:97:8b:fb:a2:72:19:17:d6:07:aa:e0:79:70:e4:
84:fa:e2:6b:b5:1f:73:41:b8:22:a6:aa:9c:3b:aa:78:eb:a5:
5c:37:4b:a2:fc:71:52:d5:d2:34:9d:dc:e0:2e:36:ec:51:e8:
36:d3:d7:5f:9a:22:1d:19:06:87:c8:ad:7e:13:f1:e4:33:25:
7e:d2:a2:ba:c1:1e:5a:f7:bb:09:22:13:75:c0:a6:79:bf:02:
a8:1b:78:ca:0e:36:ed:bb:50:2c:48:4e:e0:8c:0b:2f:be:bc:
28:ff:ee:55:61:df:c4:46:fd:51:fa:bd:2d:3d:24:58:02:9f:
81:d3:33:0c:f4:a3:27:49:f0:78:83:a8:75:3c:5b:58:3a:09:
33:00:37:16:c8:1c:89:32:98:38:45:fd:72:3e:ae:fb:b3:d2:
9e:0f:40:29:1e:5b:8a:35:d5:40:2c:5b:8d:85:f5:19:b2:93:
25:17:aa:62:bb:c6:b9:0a:d1:6f:0e:92:f8:40:b0:03:33:d8:
e7:bd:37:77:ff:34:44:26:ae:87:c2:7e:39:2e:27:79:58:36:
f6:36:7d:3b:3a:70:7e:26:a3:59:fb:a4:6f:26:aa:f9:87:01:
e4:71:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:25 2026 by rpki-client