Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/97251ca9-5e93-45ea-800e-3a9dd00427df.roa
File: 97251ca9-5e93-45ea-800e-3a9dd00427df.roa (raw, json)
Hash identifier: FKQPk/KqMH9qdINv6vEprUwYUEhrMq0eHiXGNXp6MUc=
Subject key identifier: 45:2B:04:23:27:C2:45:45:8A:DB:08:A3:7D:CD:B6:34:52:F0:D8:F6
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 083CFF4E57CE1543B1F2AC68B4AE2D598D616249
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/97251ca9-5e93-45ea-800e-3a9dd00427df.roa
Signing time: Wed 12 Aug 2026 21:06:46 +0000
ROA not before: Wed 12 Aug 2026 21:06:46 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc1:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3c:ff:4e:57:ce:15:43:b1:f2:ac:68:b4:ae:2d:59:8d:61:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:46 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=355a9127e3bb292759a704d8d882bee9d8b2f57c10a620e385fcc4d7931917eb, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:ae:76:fe:1f:ef:4f:44:0c:b6:5c:7c:25:
44:6b:5e:b9:57:fa:9f:4f:f0:a1:93:d7:61:9f:ba:
da:59:7c:3f:a4:f3:29:74:27:e7:5f:36:90:ac:48:
c3:f9:92:48:81:8b:21:1a:b1:a7:b5:8d:50:54:7f:
c3:e3:14:c1:82:80:05:8f:41:07:a0:a7:9c:8f:96:
17:05:09:e5:8d:45:33:9a:6a:0b:87:a4:5d:a4:5a:
b3:eb:9e:52:86:4e:e6:5e:d5:21:d0:f8:2d:f5:1b:
3f:3d:22:bd:ee:c0:a4:7c:6e:5d:53:e8:d8:35:47:
cc:5f:ad:48:04:91:3a:b5:ec:f7:ab:85:9d:ab:9c:
5c:8f:6d:f9:7e:ba:a4:f7:d8:6e:b6:30:5f:fc:90:
17:bd:d8:e5:33:32:b1:4b:ce:f1:6c:16:db:a8:44:
33:ca:43:23:4c:bd:f6:cd:34:85:80:21:50:60:67:
46:b3:b5:f9:92:98:86:60:64:5d:f8:3f:da:da:28:
17:2a:bd:d6:ae:8d:da:53:fd:a2:35:00:21:5e:61:
bc:0b:f4:c0:ad:46:0e:5b:37:20:d7:48:4c:45:f0:
8c:61:f4:c2:f7:4c:fc:d2:fc:87:1a:e1:bc:10:1a:
c4:3a:47:6f:1f:08:93:f3:93:32:6a:dc:c2:c3:df:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:04:23:27:C2:45:45:8A:DB:08:A3:7D:CD:B6:34:52:F0:D8:F6
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/97251ca9-5e93-45ea-800e-3a9dd00427df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
37:ff:c6:ce:a4:b2:41:41:21:d4:84:6e:fa:74:0e:49:be:83:
92:da:ae:23:32:0e:2b:77:0e:5e:26:a0:a3:a7:58:dd:eb:98:
0c:e5:0b:dc:c8:2f:e4:f4:a1:17:e5:ea:d1:3f:17:ee:20:d7:
bb:0e:ba:7e:c5:9c:50:8b:56:43:36:8b:60:b1:55:5e:e7:70:
75:78:cd:3d:1f:c5:d0:24:ce:90:e3:16:23:40:93:ff:43:40:
bd:b2:f3:a5:ef:6b:da:d3:f4:34:50:7f:60:c4:63:d9:6e:ec:
68:26:84:d3:9b:06:4b:b8:fe:fa:c4:ef:1e:a5:e9:c6:6d:f3:
04:7c:72:bf:82:40:3b:f7:59:ae:63:74:77:b3:98:72:0b:82:
28:72:48:1f:db:c4:d8:e0:e4:a0:ab:81:42:36:a9:a4:9e:4a:
ea:3a:a7:14:41:bf:ff:f2:19:ed:86:e6:60:7f:3c:54:f0:21:
f0:fb:fe:cf:3e:a2:b0:fe:99:24:e7:d1:a8:90:25:53:cc:4a:
37:09:f2:6d:39:53:12:43:27:e7:02:f6:bd:bd:63:a5:37:1e:
42:3c:cf:74:35:78:69:2f:04:7b:06:09:19:1c:f1:ef:9f:07:
10:be:88:cc:ad:4d:03:07:df:f7:59:90:2e:a5:52:36:24:8e:
ec:27:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:42 2026 by rpki-client