Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/adbca2ac-082c-42c9-9838-359a055949c6.roa
File: adbca2ac-082c-42c9-9838-359a055949c6.roa (raw, json)
Hash identifier: pHmibQtCBoHsoOF5pHSga88Wo2UOKvxtlwTzoyncvd0=
Subject key identifier: A3:FE:94:E7:31:0B:CE:46:3A:02:FC:0C:51:77:2E:DA:1A:26:53:0E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 464B51C43183D3B4A8B57C1F9AC0CDF60B85C9CA
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/adbca2ac-082c-42c9-9838-359a055949c6.roa
Signing time: Wed 12 Aug 2026 21:05:35 +0000
ROA not before: Wed 12 Aug 2026 21:05:35 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:f840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4b:51:c4:31:83:d3:b4:a8:b5:7c:1f:9a:c0:cd:f6:0b:85:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:35 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=8a207d0837c0c7fdfb6dbbc0ef8ba5b2aaf21b01dc86a5dc99ac00e394309e4d, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:7d:c3:58:9e:8c:94:8b:ab:c2:c1:41:77:
54:1c:f9:93:6d:02:b0:94:02:be:09:15:87:05:2c:
4a:db:54:29:47:1e:af:ac:cb:20:00:99:20:7e:bd:
c1:83:52:a8:09:e6:56:28:24:02:19:8c:0c:d9:0a:
92:c5:03:80:ff:fa:67:5e:d7:ce:32:b2:a3:fb:61:
ab:45:b1:25:1b:3d:76:82:c6:ea:4d:17:8d:a5:b5:
65:4e:a0:49:59:fa:07:c6:08:93:bd:1c:54:69:b2:
7a:ce:83:b0:a6:66:36:f8:3b:26:65:93:bd:27:6a:
1c:51:49:76:01:e2:93:0f:10:e0:46:65:af:67:55:
58:28:e6:ce:de:89:3c:e5:11:95:79:16:d4:18:00:
03:91:27:45:4d:2a:62:7c:19:71:d2:dd:88:0a:6a:
bf:ef:14:14:a7:7b:50:b9:94:8e:bf:a2:75:31:8d:
6e:3b:39:98:a6:ea:ee:ca:cb:22:d4:bb:c4:51:33:
a1:f8:db:5f:dd:6b:cb:12:76:f8:bb:03:19:ff:34:
45:88:96:13:bc:3f:9f:ed:18:49:a4:6a:5b:35:b3:
2a:6b:f1:fb:74:0c:80:c2:f2:5c:09:15:e5:05:28:
8f:e8:40:52:27:fa:5d:aa:30:f2:26:d0:45:8b:3f:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:94:E7:31:0B:CE:46:3A:02:FC:0C:51:77:2E:DA:1A:26:53:0E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/adbca2ac-082c-42c9-9838-359a055949c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f840::/48
Signature Algorithm: sha256WithRSAEncryption
3b:08:78:3c:5a:17:66:38:91:de:d9:42:13:2b:41:e4:66:7c:
13:8e:8f:be:8c:b4:64:c2:db:bc:fa:ef:bc:52:d6:ef:82:75:
d9:12:77:e1:bb:61:dd:8a:c3:36:a7:2f:73:76:83:68:28:41:
cc:1c:66:f2:32:e7:61:cb:7b:57:10:8d:eb:cd:c4:47:62:36:
21:fe:52:cb:3e:bb:bb:73:e0:d9:47:e7:d7:7a:ec:4b:8a:84:
17:a2:c4:53:14:0f:bc:b7:e1:2d:dc:68:d0:72:c1:94:5d:1c:
67:44:53:e7:c3:97:6e:0c:31:73:df:59:76:d0:8f:98:e4:0b:
3e:22:2f:bf:f7:3c:94:d7:8d:dd:31:df:ea:43:ee:5d:5e:ce:
75:20:ea:2a:6f:91:82:e6:c0:ca:05:af:f0:67:30:91:e6:ef:
b8:4d:59:14:9b:07:dc:a0:2f:c2:30:12:dc:b5:2d:4f:f9:7e:
0a:d1:10:12:75:a4:f9:9d:1d:e0:c3:13:28:36:d7:95:6a:a3:
53:3a:86:8e:64:f0:fe:0d:ea:aa:c8:56:55:30:a1:47:67:65:
bd:8f:48:09:97:f1:91:06:74:32:8b:41:94:ea:79:96:88:d8:
d2:21:1d:93:d8:3e:86:14:ee:36:cb:82:b9:8b:89:68:9d:55:
96:27:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:35:28 2026 by rpki-client