Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98fa9e7f-0c78-4a49-aa51-d1085b573462.roa
File: 98fa9e7f-0c78-4a49-aa51-d1085b573462.roa (raw, json)
Hash identifier: ljuq+nkqAeYPbatDnaLQpXmKMYBY84H7JuuucfLLcF0=
Subject key identifier: 6C:6D:78:C4:CB:00:3F:BC:15:DB:D4:D9:57:F0:0D:60:9E:F2:07:8E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 42C656E149A370C3BD3211492880F0A6B6643478
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98fa9e7f-0c78-4a49-aa51-d1085b573462.roa
Signing time: Wed 12 Aug 2026 21:05:39 +0000
ROA not before: Wed 12 Aug 2026 21:05:39 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc3:2800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c6:56:e1:49:a3:70:c3:bd:32:11:49:28:80:f0:a6:b6:64:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:39 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=2a793a6b6c21fc38b47879d7f02a5d7a0fabb25234a03515ac50deebeba0bb67, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:0b:db:0f:6b:c4:49:ac:96:b6:cb:a5:7b:
7f:84:28:fe:f3:d9:b3:23:18:fd:2d:09:6f:ba:74:
29:f9:4d:3c:9b:06:40:87:b6:d8:49:81:93:00:dc:
9e:16:1a:d5:93:f3:f1:c1:c8:61:e7:75:a2:4c:52:
e0:ee:7a:81:38:21:3f:f3:12:26:17:8c:cd:84:4c:
f6:36:82:b4:08:3f:2c:bc:3b:e5:9a:03:a4:b4:8e:
d4:18:4c:3e:22:7d:c2:03:a4:23:38:99:45:b2:23:
ff:e1:0c:bc:fd:7f:fc:f7:b0:70:7f:d0:98:98:19:
52:1f:5d:97:0b:19:40:f3:ce:30:5a:6d:43:ec:dd:
2a:ca:e3:0b:d5:27:d3:b7:91:dd:64:5c:46:93:92:
3b:59:de:1b:9e:f6:09:b8:53:b0:ca:d7:96:9a:d2:
f9:82:e6:c9:f6:e6:b6:e9:ab:ad:80:b9:0a:55:63:
9b:85:03:81:5d:f1:8d:fd:81:08:86:79:05:a0:d7:
e6:7c:d6:f6:f0:eb:c1:2f:20:4a:b7:e1:d9:77:ae:
f6:d0:3d:6d:54:16:01:66:22:67:e1:db:31:c1:db:
e2:e9:30:de:27:cd:c6:b6:39:07:9d:95:d0:7f:05:
24:2f:9b:03:e8:81:b1:91:15:d6:f3:b4:d1:1b:2b:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:78:C4:CB:00:3F:BC:15:DB:D4:D9:57:F0:0D:60:9E:F2:07:8E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/98fa9e7f-0c78-4a49-aa51-d1085b573462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:2800::/40
Signature Algorithm: sha256WithRSAEncryption
c7:0a:dc:45:82:2c:8d:63:f2:34:91:eb:fd:08:d6:1c:4d:ed:
b9:aa:a3:81:e9:37:6f:96:da:f4:17:dd:c2:72:4e:54:50:e6:
54:9a:a2:b6:c0:0a:68:97:42:03:74:9d:d5:e5:df:c4:0b:f7:
4e:42:3f:8b:78:64:80:32:ee:82:b8:8d:70:2d:1f:3a:6b:6f:
10:69:bf:fe:b4:f5:4c:f8:14:90:66:2b:9e:5a:ac:3c:3a:54:
b8:2a:66:f8:6f:87:3c:64:fa:e8:62:c8:0a:f6:da:55:15:9a:
d4:99:56:0a:53:4c:20:05:cd:13:1d:14:d5:82:f8:6a:f9:24:
05:af:2e:37:5a:70:e8:41:80:37:26:4b:9b:d4:2e:2d:df:9f:
a9:2c:1a:64:35:ac:cc:28:2c:25:70:82:3c:92:08:70:1c:be:
28:6f:b1:60:79:9e:da:47:16:85:c0:93:1f:9e:71:72:a4:47:
fc:c2:55:e3:78:e0:e8:86:70:44:51:12:02:61:9a:d5:4e:f8:
97:d9:4b:c3:56:9e:4c:f7:31:60:c7:09:61:1f:a8:2c:53:02:
9b:12:4f:89:5d:1b:be:21:d0:c4:7a:c4:f3:02:ee:e9:6a:20:
65:e4:0c:1f:87:0e:b2:4b:ed:a1:65:ac:98:c1:16:c5:58:3f:
b8:22:89:c8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQsZW4UmjcMO9MhFJKIDwprZkNHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA4MTIyMTA1MzlaFw0yNjExMTAyMzU5NTlaMHoxSTBHBgNV
BAUTQDJhNzkzYTZiNmMyMWZjMzhiNDc4NzlkN2YwMmE1ZDdhMGZhYmIyNTIzNGEw
MzUxNWFjNTBkZWViZWJhMGJiNjcxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkOC9sPa8RJrJa2y6V7f4Qo/vPZsyMY/S0Jb7p0KflNPJsGQIe22EmBkwDc
nhYa1ZPz8cHIYed1okxS4O56gTghP/MSJheMzYRM9jaCtAg/LLw75ZoDpLSO1BhM
PiJ9wgOkIziZRbIj/+EMvP1//PewcH/QmJgZUh9dlwsZQPPOMFptQ+zdKsrjC9Un
07eR3WRcRpOSO1neG572CbhTsMrXlprS+YLmyfbmtumrrYC5ClVjm4UDgV3xjf2B
CIZ5BaDX5nzW9vDrwS8gSrfh2Xeu9tA9bVQWAWYiZ+HbMcHb4ukw3ifNxrY5B52V
0H8FJC+bA+iBsZEV1vO00Rsr8bsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRsbXjE
ywA/vBXb1NlX8A1gnvIHjjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
OThmYTllN2YtMGM3OC00YTQ5LWFhNTEtZDEwODViNTczNDYyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8Mo
MA0GCSqGSIb3DQEBCwUAA4IBAQDHCtxFgiyNY/I0kev9CNYcTe25qqOB6Tdvltr0
F93Cck5UUOZUmqK2wApol0IDdJ3V5d/EC/dOQj+LeGSAMu6CuI1wLR86a28Qab/+
tPVM+BSQZiueWqw8OlS4Kmb4b4c8ZProYsgK9tpVFZrUmVYKU0wgBc0THRTVgvhq
+SQFry43WnDoQYA3Jkub1C4t35+pLBpkNazMKCwlcII8kghwHL4ob7FgeZ7aRxaF
wJMfnnFypEf8wlXjeODohnBEURICYZrVTviX2UvDVp5M9zFgxwlhH6gsUwKbEk+J
XRu+IdDEesTzAu7paiBl5Awfhw6yS+2hZayYwRbFWD+4IonI
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:28 2026 by rpki-client