Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/968206a0-fb20-466e-b35d-e65f97866fa6.roa
File: 968206a0-fb20-466e-b35d-e65f97866fa6.roa (raw, json)
Hash identifier: VajbE6rWK6elOEyZbAjn5rG9AlG9+fQ5Y107F4FE/Ic=
Subject key identifier: 92:62:01:0C:59:1F:89:34:9F:E5:AD:B8:CA:57:6A:5B:C8:42:E5:BA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0A012A5766FC81C18AF86DFD1E51B1F6AB547161
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/968206a0-fb20-466e-b35d-e65f97866fa6.roa
Signing time: Wed 12 Aug 2026 21:04:19 +0000
ROA not before: Wed 12 Aug 2026 21:04:19 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:01:2a:57:66:fc:81:c1:8a:f8:6d:fd:1e:51:b1:f6:ab:54:71:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:19 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=e665ee4c1e36bf0e9878a8b0f33f7241b56625e6a729444c9a320cd8296f099c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:f4:0d:3c:06:35:ef:ad:25:8b:b7:38:92:
66:1e:44:8a:a0:6e:ea:bf:11:87:90:8f:63:c7:26:
f9:59:d5:7d:0a:4f:45:a3:be:21:ce:c4:23:04:4b:
0b:c2:88:9d:db:8a:ca:8e:08:cf:a8:22:86:ea:f0:
23:e9:c5:ff:f2:ce:e8:b7:58:ad:02:b7:bb:bd:06:
b0:fa:cf:d8:e9:c9:1b:be:3e:43:ac:9d:25:92:ac:
fe:76:fd:25:75:32:96:d3:cc:5d:ab:cd:49:b6:ca:
2c:f8:04:08:a6:f8:12:77:9d:34:e2:ee:70:b7:38:
4c:ea:68:f9:aa:1a:ce:a4:7d:52:87:ca:01:09:6b:
24:89:84:6d:6c:87:88:96:5d:a9:20:0a:f8:10:52:
67:24:54:a4:a9:87:24:bc:e8:94:bf:dd:f2:bb:4c:
18:53:4b:d1:64:88:fe:bd:a2:65:85:8b:ac:fe:18:
dd:d5:52:1f:1c:b4:b9:9f:35:bd:69:9c:3a:13:76:
9a:2e:6e:23:5c:90:88:85:fd:47:66:bd:f8:ec:4a:
73:1f:60:5b:c2:50:9f:1a:84:93:0c:2d:21:8a:9e:
a8:c5:fa:e9:45:6e:18:24:a2:65:31:8a:bc:16:02:
a2:47:ee:b2:e0:88:6b:c7:0f:85:33:52:a7:72:41:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:01:0C:59:1F:89:34:9F:E5:AD:B8:CA:57:6A:5B:C8:42:E5:BA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/968206a0-fb20-466e-b35d-e65f97866fa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:8000::/36
Signature Algorithm: sha256WithRSAEncryption
c1:5e:ad:d2:d1:e0:67:df:bc:46:eb:4f:8f:50:6b:3d:cd:fb:
a0:6a:f2:b7:f2:c0:5f:20:90:f0:5b:ff:eb:67:ba:f3:d0:2d:
50:29:ea:6a:1e:51:50:f4:87:01:f0:0a:0f:ca:e9:ce:35:5b:
c9:5b:e8:0c:1d:95:c0:b6:ce:51:30:49:11:c0:be:eb:94:12:
db:cb:41:b4:bf:95:db:cd:34:60:33:41:4c:8f:e5:a5:30:70:
59:f1:90:b1:c8:c9:17:f1:75:6e:f9:90:98:47:c4:0f:d8:61:
8b:3d:c9:65:14:e1:2a:a4:24:e6:9d:69:a4:96:de:7a:b0:55:
80:9c:d0:35:d2:86:cc:a5:95:3b:cf:6c:0a:48:ec:7c:a4:6a:
60:3f:b2:d0:28:f6:d5:3d:0e:43:c8:77:1f:7f:ea:0e:ca:c7:
8a:24:fa:8d:30:b5:32:1d:f6:1c:19:c5:2a:f7:7e:41:f9:7f:
b9:97:48:c1:9c:52:62:76:9b:a8:3f:10:41:c3:4f:73:95:39:
e1:a6:4f:4d:d1:eb:87:4b:2d:35:15:ae:a7:ba:88:fe:b5:fb:
a3:f2:80:37:0d:0f:41:70:cc:10:a1:fc:96:6c:80:9d:2b:42:
80:0f:0f:a7:ef:ed:60:84:5d:29:ed:18:19:7d:73:96:90:ae:
f7:9d:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:41 2026 by rpki-client