Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c47386ff-4f1d-480a-be76-cc4ee1b3a35f.roa
File: c47386ff-4f1d-480a-be76-cc4ee1b3a35f.roa (raw, json)
Hash identifier: iNx0Wz0/Lu8zPDj3Nf7C+xMtogl2/rQa6I+z5MReJtM=
Subject key identifier: ED:91:5B:AC:FE:28:F0:26:7A:C9:94:BE:CB:19:7C:82:24:7F:C0:D9
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3FBF55B4136D7357C74B283795C1EC46564910D1
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c47386ff-4f1d-480a-be76-cc4ee1b3a35f.roa
Signing time: Thu 30 Jul 2026 01:31:02 +0000
ROA not before: Thu 30 Jul 2026 01:31:02 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bf:55:b4:13:6d:73:57:c7:4b:28:37:95:c1:ec:46:56:49:10:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:31:02 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=bd79945d932a600f9ea059252c9726ea3240791414a02d593c166b3a5285d88b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f5:f7:70:bf:20:f4:27:81:21:f8:40:38:b5:
5e:8d:20:09:9b:cc:8f:14:7d:5b:aa:68:1e:3a:d9:
4d:2d:00:c1:1f:65:30:6a:db:22:f7:aa:2c:0e:59:
12:a6:e3:e1:2d:3f:65:88:e1:fd:4f:50:71:69:cf:
e7:73:12:99:57:ac:3b:6a:2c:56:a7:ac:d5:59:4f:
cb:d3:c8:04:1e:c3:e5:8b:4c:b4:b5:68:0f:00:b2:
ad:1f:a4:62:00:d3:45:71:bb:20:86:d9:1d:84:5b:
05:b1:c7:22:a3:70:b6:d8:9d:f2:fb:d8:e5:7e:58:
3a:c9:a6:7f:a4:4f:94:49:b9:f4:5a:0c:25:a8:28:
6a:ca:42:e2:39:f0:4c:c3:cf:82:5b:61:13:40:76:
9a:8b:ac:3f:62:bb:7c:2f:18:59:95:56:a6:d5:47:
aa:b9:ff:a8:ca:ca:39:b9:33:e3:96:d2:93:31:0b:
e4:38:38:69:28:89:ac:75:c0:a1:4d:a9:a9:0f:08:
9e:fd:c0:81:00:91:b9:25:86:af:a0:6b:12:7c:1e:
5b:a2:2c:02:0d:69:4c:ee:47:ca:50:c5:8e:be:30:
27:52:d6:8c:6d:14:5b:af:eb:65:3b:80:3b:1d:14:
6f:58:ef:5b:d8:5f:3d:ea:6e:e3:a7:c0:01:b7:e9:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:5B:AC:FE:28:F0:26:7A:C9:94:BE:CB:19:7C:82:24:7F:C0:D9
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c47386ff-4f1d-480a-be76-cc4ee1b3a35f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3::/36
Signature Algorithm: sha256WithRSAEncryption
c0:41:2a:fb:4c:ff:ac:04:37:b6:d7:67:7c:46:35:cb:55:7c:
47:c0:09:fb:8b:7a:b2:8d:4e:0b:74:64:3f:50:4a:a1:a6:b7:
6e:bf:c0:37:27:35:a5:d0:26:a4:b4:ea:78:88:dc:e7:54:0d:
f9:17:83:81:fb:ab:3e:e7:95:12:b7:0f:c9:22:55:09:62:23:
39:32:5a:e6:d8:e7:16:70:af:8a:d5:0c:7a:fe:a1:19:db:9f:
09:60:ab:00:31:3e:ed:a7:3c:03:82:e4:7c:55:89:e9:cd:b2:
c3:01:e5:26:18:25:ec:38:51:77:73:bb:d8:d4:7e:ec:44:04:
11:af:a5:a9:3c:22:bc:e5:75:c4:13:85:78:7f:5f:b3:85:7a:
ca:ae:19:bb:91:84:c8:e4:24:91:73:09:c3:dc:81:bd:f8:f6:
a5:29:da:80:7f:44:86:c8:63:45:b8:d8:ea:ca:c3:67:09:2a:
8f:a8:d1:ee:45:8a:ad:c5:98:73:90:92:f6:34:37:13:95:95:
1d:74:04:58:e1:3f:d1:51:ed:a0:81:b2:eb:5c:7e:89:1b:f9:
0f:b2:56:d3:ae:d2:90:3f:1d:98:0b:08:e2:99:ec:1c:bf:8c:
0e:51:8f:ff:21:39:1d:eb:8d:4a:24:2f:ab:00:3b:73:f4:06:
35:9c:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:27 2026 by rpki-client