Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9a6f073c-5dd3-41d3-9553-7ace93199998.roa
File: 9a6f073c-5dd3-41d3-9553-7ace93199998.roa (raw, json)
Hash identifier: czSbBOTHeqMOuyyLHBZ/iImxrGSI7EJy8WrMt/RIFZQ=
Subject key identifier: B7:11:3E:ED:9C:C1:77:AA:44:25:81:E0:2D:93:61:36:3A:9F:5A:BA
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1085661FEDD9966DE3891B2599CE0236288F8D5D
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9a6f073c-5dd3-41d3-9553-7ace93199998.roa
Signing time: Thu 13 Aug 2026 00:00:10 +0000
ROA not before: Thu 13 Aug 2026 00:00:10 +0000
ROA not after: Wed 11 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:85:66:1f:ed:d9:96:6d:e3:89:1b:25:99:ce:02:36:28:8f:8d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 13 00:00:10 2026 GMT
Not After : Nov 11 23:59:59 2026 GMT
Subject: serialNumber=718ad0283091ed93feeeefb5d6bb405ef87b2cfb488e8736b3da85899e401cb8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:14:0b:49:28:85:89:91:c1:9d:9d:a9:cc:
ae:e9:1d:1c:34:68:1a:f9:54:cf:f8:bd:dd:be:d6:
6b:36:d5:84:28:0e:5a:25:38:47:cb:24:38:7b:e3:
f5:29:c1:8f:57:59:14:4d:1c:e5:db:9b:f7:ab:34:
67:3c:27:8f:db:d9:db:bd:a0:0b:37:32:76:b2:54:
ec:a4:cf:c9:2a:9d:51:8a:0e:ee:34:a9:96:1d:8f:
b7:27:c9:38:4a:33:20:9d:58:85:a3:5a:c7:22:c1:
3c:20:76:e8:72:5c:ca:48:5d:0a:ac:09:dd:d0:a4:
1c:28:15:02:3b:76:c4:bf:cc:c6:e9:7c:59:98:cc:
b9:18:2a:a4:48:5c:9c:6b:90:a8:de:92:d2:2f:b7:
cf:6c:4e:2a:74:2a:56:cf:6a:96:7b:92:ae:5f:c5:
22:44:63:22:c8:77:f7:7e:0a:84:0e:4b:73:49:cc:
66:e4:f9:c7:dd:e3:92:3e:b0:94:6a:16:c5:b9:f7:
f8:68:05:9f:c7:0f:19:46:9b:c4:b0:75:dd:cc:17:
34:f3:e8:55:0d:35:70:d9:02:39:69:e7:6c:48:0b:
ca:d7:20:89:74:3a:1c:b1:d3:b9:c2:01:ad:6d:2f:
c4:b0:2d:0c:97:10:0f:c0:5c:7f:2f:18:b0:79:8a:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:3E:ED:9C:C1:77:AA:44:25:81:E0:2D:93:61:36:3A:9F:5A:BA
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9a6f073c-5dd3-41d3-9553-7ace93199998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:2::/48
Signature Algorithm: sha256WithRSAEncryption
6d:eb:df:07:6a:ec:91:05:4f:e9:64:51:d2:af:86:4d:a4:93:
33:e2:f2:74:9a:bf:af:96:c9:55:a7:97:18:6b:cb:ce:b5:13:
22:2c:90:89:3e:cc:9d:95:f2:b0:0d:fa:4a:8a:29:f6:f5:a9:
64:da:64:77:92:79:d2:24:2d:b1:48:42:92:14:f0:0d:7a:79:
af:09:bc:56:01:cb:c7:19:b7:66:9a:a2:40:21:43:d4:72:4d:
df:f9:35:94:d6:6a:e0:b4:02:e6:28:7d:35:97:ba:1c:e1:56:
06:68:00:47:88:b0:2e:e9:76:ff:4a:41:3b:ac:00:a8:6e:e1:
23:4f:42:38:97:de:55:41:83:ec:59:43:e3:c3:b5:3e:57:08:
75:d1:57:c3:24:81:67:94:3a:39:07:9a:8a:07:55:09:f8:05:
ac:c7:e9:2b:3a:db:00:a5:c7:44:97:a7:78:37:88:9c:d7:14:
5c:90:7b:8f:f2:0b:ad:1a:79:07:7d:e1:54:52:1b:be:95:5b:
d6:67:da:4d:d6:ee:60:e6:4e:87:66:a9:5d:ab:13:61:32:12:
a0:d0:cd:b6:04:5d:ad:fb:ca:57:45:27:33:13:9b:46:34:d2:
c3:0d:60:a8:46:5e:3b:af:87:84:bf:2e:60:c4:ab:d9:d9:57:
34:ec:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:36:28 2026 by rpki-client