Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c864a1cd-83b4-45f0-a9e6-6cdcdf8f93fd.roa
File: c864a1cd-83b4-45f0-a9e6-6cdcdf8f93fd.roa (raw, json)
Hash identifier: 9xTr+8YlIbTFevdBXvtfdWr74Av9zMExRnpe6Zn2vGk=
Subject key identifier: AE:C6:07:0A:20:08:F9:AF:B0:9D:41:7F:B1:CA:B4:DF:4D:DA:ED:BC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 14C0A7182F51C661D642A283E49E7CA0927AB940
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c864a1cd-83b4-45f0-a9e6-6cdcdf8f93fd.roa
Signing time: Wed 12 Aug 2026 21:05:37 +0000
ROA not before: Wed 12 Aug 2026 21:05:37 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c0:a7:18:2f:51:c6:61:d6:42:a2:83:e4:9e:7c:a0:92:7a:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:37 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=3ed4e255498966f9926913b6e6b97cd4507eee9eba91935226a24861a1309419, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:94:2d:f0:dc:63:4a:ae:11:f1:0a:70:77:
33:d4:7a:50:c0:80:a9:60:24:56:7b:57:f7:18:84:
0e:06:bb:a3:b7:12:fc:42:b9:38:8a:3e:de:3b:c8:
d6:be:c8:3b:29:3e:59:4b:00:4b:69:d5:74:1b:c3:
69:3b:05:93:02:60:df:cd:71:46:22:63:29:25:5a:
7f:20:9b:df:1e:1b:96:f9:e4:87:e8:c7:e1:13:7b:
37:d3:fc:fc:c4:44:f8:dd:a4:79:9d:39:18:d0:33:
e4:63:ce:eb:e9:b9:4b:f3:b7:69:d9:ad:34:b5:b1:
f3:01:5e:4d:ae:18:75:f6:0b:45:df:d6:b5:0a:14:
96:9a:93:62:5b:db:82:16:c4:af:0b:30:94:70:19:
64:1f:9a:38:65:3b:dd:a5:9a:96:b3:54:a6:7a:d6:
39:da:2e:6a:b1:75:d3:f0:45:c6:94:ec:27:c5:c9:
33:a7:eb:c4:3c:53:6e:fa:02:9d:d3:16:e5:28:1b:
b1:24:1b:db:07:9d:5e:5d:e9:ef:f1:fe:6a:22:84:
db:0c:f2:d0:c9:e2:94:a8:0a:66:a6:1e:00:f2:0a:
c7:26:97:0d:51:14:06:1d:e0:b9:11:d4:7c:42:2b:
a0:d7:37:5a:25:2e:f4:1f:73:75:e1:39:cb:d0:3b:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:07:0A:20:08:F9:AF:B0:9D:41:7F:B1:CA:B4:DF:4D:DA:ED:BC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c864a1cd-83b4-45f0-a9e6-6cdcdf8f93fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:100::/48
Signature Algorithm: sha256WithRSAEncryption
af:df:a5:a0:87:af:4a:90:a1:5f:72:66:1b:92:3f:1a:c2:e7:
38:cc:cf:3c:01:d8:03:ec:6c:22:bd:7c:1d:dd:9e:93:3a:9b:
90:7c:e5:11:a2:84:9c:83:ba:bb:ee:24:04:49:54:d6:69:ea:
67:30:8e:d6:44:3c:32:47:e4:b8:d6:2b:60:0f:bc:ff:59:81:
5c:10:1a:f2:b3:4d:37:12:2b:d0:b2:13:a1:d6:bd:39:33:6b:
ed:60:7a:79:9c:8e:be:a5:e3:0c:bf:08:f2:b0:31:2e:47:96:
e2:49:31:3b:eb:cb:db:05:30:9b:50:89:98:d3:b0:d8:14:32:
29:86:82:e5:b5:ce:c5:49:7f:8e:a4:53:24:94:5b:0f:f8:be:
51:5b:1c:af:f9:50:65:07:cf:62:5b:5d:5b:26:36:45:67:79:
c2:f6:bf:c2:d4:12:9b:40:4c:44:bf:f8:04:6e:63:3b:d6:fb:
b4:74:32:2d:29:61:74:81:72:11:ed:e9:85:a7:ae:82:c3:e5:
63:70:bf:66:87:4c:d1:51:c4:62:b2:8d:b4:46:b8:0c:09:f2:
cc:a6:77:86:cd:58:ed:17:73:2d:34:a8:c9:ac:e8:8c:47:f6:
34:29:bb:b7:3b:c6:49:a2:10:8f:de:8f:41:df:39:62:d9:1c:
fc:f3:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:31:53 2026 by rpki-client