Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a23565c8-6d3f-41f9-b517-d6b52dfe8c8e.roa
File: a23565c8-6d3f-41f9-b517-d6b52dfe8c8e.roa (raw, json)
Hash identifier: TSnliXlacq3ESxloTWUvLdDmVcHB+uzoMQL5/nGp84E=
Subject key identifier: 76:20:62:5F:CD:F9:ED:0C:D3:46:F6:4F:FC:F9:9E:C1:EC:2F:C6:F3
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 58124C86F6708D0892930D4CA8BC99947465D1DD
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a23565c8-6d3f-41f9-b517-d6b52dfe8c8e.roa
Signing time: Tue 11 Aug 2026 20:32:11 +0000
ROA not before: Tue 11 Aug 2026 20:32:11 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:4800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:12:4c:86:f6:70:8d:08:92:93:0d:4c:a8:bc:99:94:74:65:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 11 20:32:11 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=b62832e54fd8bdb8333b17235ea329ebe8a88252bf22555f1d4d52689416079d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:02:7f:b8:6e:6c:37:50:d4:6e:73:3b:b5:
75:9c:e4:53:87:5d:f9:fc:ee:a4:22:89:91:85:7d:
d2:3f:4b:16:6c:fb:c4:ab:c7:87:4c:63:89:e0:63:
34:cf:64:bb:c1:54:0b:0b:2c:57:1f:c0:63:1a:13:
df:97:22:a6:e1:c2:94:5e:ec:57:f9:71:08:25:91:
73:2f:ca:dc:bb:17:ad:ac:32:6a:36:5b:39:bf:07:
0e:8a:40:70:7d:3d:12:65:b5:19:eb:45:d6:4b:7a:
24:d7:5c:18:95:ea:9d:ec:b3:e2:2f:39:3a:0a:12:
ad:d2:08:ee:7c:07:27:1b:dc:33:a5:10:12:a1:3f:
98:65:31:9c:35:ee:f4:cf:09:06:71:a9:63:ce:30:
18:82:e2:17:69:17:23:a7:5f:0f:4a:ad:37:ce:7d:
ff:1d:74:aa:f2:06:06:50:87:05:ff:fa:aa:6a:51:
10:9c:f5:3b:ec:c6:1a:f0:2d:59:a4:49:5a:a0:ba:
d8:b5:7d:cf:81:6a:22:bd:2e:65:4c:7d:45:ca:52:
5f:81:4b:00:76:f3:af:d0:2a:53:fe:ed:44:8b:78:
3a:1c:89:1d:47:19:0a:0d:26:a0:07:4a:47:74:65:
30:71:fd:d1:22:da:c4:39:44:0f:f9:85:21:6d:a8:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:62:5F:CD:F9:ED:0C:D3:46:F6:4F:FC:F9:9E:C1:EC:2F:C6:F3
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a23565c8-6d3f-41f9-b517-d6b52dfe8c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:4800::/40
Signature Algorithm: sha256WithRSAEncryption
7e:a1:ed:9e:c5:f7:8b:f2:70:89:74:4c:0c:fa:f3:ee:51:ac:
e0:d1:ba:3c:5b:99:25:ff:59:60:c0:37:6b:cd:1e:8b:87:3e:
5c:02:0a:6d:5b:5b:7f:d7:c3:70:c1:e4:67:19:a3:f5:98:37:
1e:ff:6b:3a:21:e5:1f:3a:db:d3:bc:8d:aa:e8:62:7d:6a:78:
4d:ad:1a:31:58:95:08:80:cc:c9:98:2f:9c:9b:c0:81:b1:72:
f6:71:6c:e1:46:a7:14:46:36:e3:7f:0e:36:db:6d:73:89:3c:
82:68:b2:5a:5a:46:49:ab:1a:0c:1f:05:ca:a4:e6:d9:f5:d3:
89:b6:33:61:41:9e:d0:82:7f:68:0f:be:30:56:27:35:c5:ef:
68:5d:30:89:f9:39:9c:3e:9e:b4:d8:e3:15:55:64:7b:2f:65:
47:64:e0:32:ec:2f:38:20:08:b1:6a:a2:83:58:bd:bf:8b:87:
29:5c:9c:7f:e7:83:9a:a0:bf:33:01:bf:5d:7c:75:97:48:bb:
a3:43:24:52:5a:3b:40:4f:c2:cd:13:b7:b9:24:f3:df:cc:37:
e2:8a:03:95:74:4c:ac:ac:15:ad:d6:13:2d:c4:49:b1:60:4e:
af:56:69:a9:68:2d:7e:58:22:18:ac:cb:73:1c:c8:81:7e:b8:
7a:62:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:34 2026 by rpki-client