Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2cac7c7-df41-4db6-b8bd-1b27d0ffc119.roa
File: a2cac7c7-df41-4db6-b8bd-1b27d0ffc119.roa (raw, json)
Hash identifier: Xr1ofK/SOnxvhTXt3BNSmTNJAG/RWjXofW2IWy5R8PE=
Subject key identifier: 91:38:A9:EB:95:28:BB:68:7D:BF:8D:58:60:E0:91:04:83:10:61:98
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 0CF92C867A984888C06D4AC4DC4AA546998363B5
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2cac7c7-df41-4db6-b8bd-1b27d0ffc119.roa
Signing time: Thu 30 Jul 2026 01:20:05 +0000
ROA not before: Thu 30 Jul 2026 01:20:05 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 7224
IP address blocks: 2001:3fc7:d000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f9:2c:86:7a:98:48:88:c0:6d:4a:c4:dc:4a:a5:46:99:83:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:05 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=f24b4d8669ce5ab316d3465120a2c109ca345d0d457f6411ca7fd14713652c81, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:1c:31:ae:05:48:d1:9d:9d:97:2c:75:44:
53:de:7e:19:f8:94:f2:bc:80:65:df:fa:36:5e:ee:
8c:86:b1:79:0a:fa:b3:c1:c9:ad:e2:42:df:cb:11:
2f:d4:db:1f:11:80:83:1c:7e:02:24:46:30:35:a3:
5c:53:fb:5c:85:86:5c:9d:69:96:83:ca:c9:bc:79:
ea:c0:66:4f:48:15:4e:0f:18:5e:8a:bf:2c:c9:30:
82:8e:c8:2f:12:e9:cb:71:fe:1f:38:92:0f:fc:85:
f8:36:58:4f:6d:01:86:b1:de:3a:10:d2:95:66:65:
52:b7:d4:4c:54:8f:75:c0:22:f8:83:0f:88:da:2d:
f9:df:ba:a0:d2:f4:3f:b0:67:bd:70:b3:9a:45:0f:
d9:a0:80:f4:d7:a7:3c:22:a0:69:c7:33:2b:61:cf:
df:ff:5b:0f:af:26:7d:a0:cd:92:d0:77:81:9d:9f:
55:9f:c3:9d:81:92:d6:73:c1:63:39:aa:33:b9:17:
26:9b:6b:4f:8c:5c:fc:d2:fe:71:fd:7b:cb:47:64:
b1:e3:66:9c:85:65:71:ad:9a:6a:5c:ed:a1:81:2c:
bb:c7:d5:0a:cc:be:49:40:99:08:75:0f:4a:33:e7:
d0:c8:ff:93:7b:b5:f9:6c:76:e5:b7:10:cf:da:26:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:38:A9:EB:95:28:BB:68:7D:BF:8D:58:60:E0:91:04:83:10:61:98
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a2cac7c7-df41-4db6-b8bd-1b27d0ffc119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:d000::/36
Signature Algorithm: sha256WithRSAEncryption
38:87:1e:ac:35:19:13:cc:7a:69:a2:a1:8e:65:9c:68:92:da:
e9:f7:a8:9e:2e:af:70:ab:d2:56:31:a1:eb:d9:8f:40:5c:90:
d1:3f:93:d1:7c:b9:01:0b:66:05:4d:de:59:97:96:fe:12:51:
f9:f8:fd:81:54:e1:74:99:ff:bf:43:03:88:58:bf:f6:38:0e:
c4:93:5d:f4:4e:3f:3b:83:ca:2e:5b:a7:4a:c7:71:76:5b:69:
da:24:70:26:c4:1a:e9:e5:94:be:9c:5f:52:d4:03:cb:8b:53:
9e:05:f8:63:57:ea:bc:94:61:9b:e7:76:f5:e3:85:7a:dc:65:
c0:20:0a:85:25:fa:3c:c1:2a:a9:f5:56:fc:fd:ac:d7:c3:12:
33:80:a6:25:90:58:b4:2d:c4:64:13:c6:94:92:18:35:15:63:
e9:a9:97:14:b2:61:80:1b:4e:d6:64:c0:f6:d8:67:8d:9d:ba:
97:fb:63:98:82:9f:d2:7b:99:e3:84:eb:2f:dd:26:65:cf:99:
ab:40:04:e8:39:9d:ea:29:7b:19:c9:59:fd:f7:05:7c:b0:8a:
11:c5:9c:d6:8f:ad:a8:89:dd:d5:a5:55:d9:04:24:2d:07:82:
c8:1c:d5:c6:ae:74:96:97:e5:52:87:59:95:38:0e:c6:00:db:
1c:d0:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:30 2026 by rpki-client