Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a1207c4e-1126-4533-b592-2728c2d9bad8.roa
File: a1207c4e-1126-4533-b592-2728c2d9bad8.roa (raw, json)
Hash identifier: Vmy9IOaUlV99lfg4ctv5byaznxYxX2UhAx4oWTjMA0Q=
Subject key identifier: 7C:A3:4A:D0:BF:90:60:7B:8C:30:15:18:B9:06:E3:18:FC:B4:E7:D0
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3F493FFF171636236742AE282C0BEF13D09083E0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a1207c4e-1126-4533-b592-2728c2d9bad8.roa
Signing time: Wed 12 Aug 2026 21:06:44 +0000
ROA not before: Wed 12 Aug 2026 21:06:44 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:49:3f:ff:17:16:36:23:67:42:ae:28:2c:0b:ef:13:d0:90:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:44 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=d8e9585da76edab891e04f6b173884ce80f1bbc7095812495c7b71e762293547, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:22:fb:ee:ad:e4:49:de:7b:a4:38:88:8a:
fa:aa:02:64:e7:f6:ed:21:fd:28:e0:cd:0d:e3:42:
01:f8:c4:3c:a7:88:96:e1:d9:cd:ec:fb:f8:0e:c5:
3f:8b:9b:cf:5a:0e:c5:f5:eb:f4:d1:6a:0a:f4:b0:
bb:a9:b9:61:95:11:c5:fa:65:64:a5:11:11:a0:d0:
ab:89:bb:3e:4e:40:24:92:30:2a:f1:ea:a5:c0:e0:
da:32:cf:a3:3c:6f:df:f8:5b:a5:4f:01:7b:ac:50:
16:a0:09:7b:99:61:15:93:05:85:bf:1b:84:90:eb:
da:aa:f6:fa:b9:11:36:81:3a:8d:12:32:3c:02:07:
0e:ae:77:7b:2e:96:60:77:87:ed:73:3e:9b:88:32:
ce:ea:4d:9d:ac:0e:78:91:70:dc:ae:b7:43:b7:57:
f4:ba:ed:d7:e3:50:0c:21:bf:91:14:f7:0e:e1:09:
13:bd:5d:d4:cf:e3:28:c3:a7:dc:62:30:e0:3d:57:
55:ef:1b:bf:ef:0d:e9:e1:de:c6:2b:d7:8c:f0:ef:
fe:81:e7:d3:c5:4d:a7:b7:14:06:dc:96:cc:30:17:
b6:57:1a:d4:54:df:7f:db:20:8c:a6:2f:92:6a:ad:
be:94:c0:ba:70:8b:a3:95:28:88:90:62:97:b2:96:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A3:4A:D0:BF:90:60:7B:8C:30:15:18:B9:06:E3:18:FC:B4:E7:D0
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a1207c4e-1126-4533-b592-2728c2d9bad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f800::/40
Signature Algorithm: sha256WithRSAEncryption
9f:99:2e:20:47:ce:3d:ac:e0:1a:4e:e3:a0:73:3f:24:9a:ec:
66:df:3d:16:bb:ed:b8:aa:41:3b:18:2e:43:52:14:db:09:49:
fb:05:92:11:a7:4c:00:46:2a:92:40:5a:03:43:c8:e6:93:95:
6d:65:57:e4:57:bc:67:37:88:52:36:76:79:d2:e4:8d:4f:c1:
d6:10:e5:cd:a1:a9:32:86:d3:fd:e2:6b:24:c2:49:bf:ff:d8:
63:1b:33:df:21:cb:c8:87:68:29:85:6f:2f:70:55:83:3e:69:
1d:ec:62:ed:ae:5b:cd:25:35:ed:58:89:fa:44:f0:97:0e:3a:
6c:65:b6:57:cb:51:5e:2d:81:67:97:55:7b:0b:25:fa:24:3d:
3d:e9:99:2f:c4:69:3e:01:61:c8:35:17:6e:5d:d9:68:f4:50:
31:aa:6a:b2:c1:8f:31:2e:3d:40:ce:e9:38:be:32:83:02:16:
d7:df:34:68:c0:51:31:f8:ea:03:e2:6b:30:fe:e1:0e:ba:78:
e7:39:73:6e:a1:73:67:49:d3:c4:24:04:18:14:20:93:4a:fc:
21:52:f7:85:47:38:c7:1d:4b:fc:0c:93:7a:86:14:12:f6:c3:
61:56:98:52:19:89:c4:f9:a2:3e:39:35:2c:c0:89:3e:4d:5a:
9e:f6:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:09 2026 by rpki-client