Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae5cc5b6-8e53-45ab-951e-6dc8fbadc917.roa
File: ae5cc5b6-8e53-45ab-951e-6dc8fbadc917.roa (raw, json)
Hash identifier: OPszRwfpqU+lP0l9WOHgGG+SgKTRnD0riZTYHM61sXo=
Subject key identifier: 64:E4:1F:8E:AA:27:C3:8C:71:79:72:F4:C2:5C:11:3A:1D:EE:5B:21
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 7390D2ABB6934DC7464051DDC596258914ADF94E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae5cc5b6-8e53-45ab-951e-6dc8fbadc917.roa
Signing time: Wed 12 Aug 2026 21:04:16 +0000
ROA not before: Wed 12 Aug 2026 21:04:16 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:90:d2:ab:b6:93:4d:c7:46:40:51:dd:c5:96:25:89:14:ad:f9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:16 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=e0230a0d0e7798b216699c9ad0c01ecfaf3602d36f7f927049a91d5b0866a855, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:c1:ef:ee:3c:e3:e2:8c:32:5d:ab:b3:1a:
45:01:6f:a0:c5:7c:b6:25:6a:dd:b5:57:56:5b:c4:
80:1d:16:35:3e:12:91:03:b3:10:1a:52:eb:eb:84:
84:29:e2:8e:db:91:59:ee:d4:fe:9b:54:12:c2:55:
f0:5a:65:9a:b6:e5:f5:8f:34:8b:28:94:c6:23:b6:
dc:f5:d5:12:d3:b2:29:6f:c0:da:ad:ea:08:d2:b7:
75:42:37:08:64:5a:87:49:04:0d:e7:e4:bd:bc:c5:
85:aa:bd:4c:47:27:56:ff:23:60:35:63:e1:8c:8a:
b0:3b:98:9c:28:22:c1:f8:9c:32:56:08:b8:ae:1c:
72:29:2b:3a:ac:c8:63:d3:b8:3b:9e:d5:31:6e:5b:
93:b4:56:0b:67:70:2d:5e:7d:d0:07:d1:c5:d3:cc:
2d:3b:09:a0:7a:e5:1a:4e:e6:fe:d6:37:bc:54:a6:
c1:4f:e8:f5:7a:59:c3:52:5d:ec:48:87:60:64:bf:
55:e9:94:5b:69:c0:88:de:b0:0c:d2:44:db:5a:0a:
dc:2e:18:bb:02:9f:a9:77:de:dc:4f:80:c5:5f:82:
e4:08:4e:06:11:a3:d5:3c:56:02:15:23:28:d7:b0:
0d:2e:cc:c4:0b:21:06:4d:10:ed:b7:1a:65:40:15:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:1F:8E:AA:27:C3:8C:71:79:72:F4:C2:5C:11:3A:1D:EE:5B:21
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ae5cc5b6-8e53-45ab-951e-6dc8fbadc917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9000::/36
Signature Algorithm: sha256WithRSAEncryption
12:cf:bd:dd:54:fb:ab:f5:cc:fa:00:a6:99:50:ec:57:ba:27:
d0:1a:dc:7d:c2:70:5b:a4:7d:ed:47:9c:1d:81:2c:73:fa:6c:
fa:8b:97:37:e7:7e:b5:73:57:ae:c7:2a:f9:c1:45:e9:19:a2:
c2:94:81:07:01:5e:17:f4:2d:7e:b9:25:e7:3a:b6:d6:65:cb:
89:f4:4e:c4:90:a1:42:3e:35:38:2c:22:13:51:a3:83:9e:59:
eb:a5:cc:ce:ca:95:15:2f:c2:45:3e:0e:fe:3d:ac:84:cc:d3:
e0:d5:a3:5f:e3:87:34:b1:35:c5:7f:96:d9:56:68:85:72:d5:
79:9b:97:33:b4:2a:d2:80:d9:f2:9b:ef:55:6b:15:55:6a:e0:
cf:1b:80:c2:fc:39:2b:6b:80:75:df:ec:18:95:ae:65:a8:bc:
7a:57:31:88:15:0b:ca:16:d0:08:ea:9a:74:52:04:d4:9e:20:
10:44:a0:95:f9:cd:9f:1c:73:a6:49:22:08:be:4d:35:53:77:
e8:ea:22:c4:1b:60:4f:e9:49:cb:68:ba:bc:f0:d8:6d:04:13:
33:ee:be:f3:ee:6a:35:5f:a4:c2:ad:38:00:df:63:fd:b1:99:
48:1b:f5:27:14:9f:3b:62:55:59:c2:81:a7:24:ee:41:b7:b2:
5d:77:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:49 2026 by rpki-client