Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa
File: e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa (raw, json)
Hash identifier: n0kV4/LQd6U9+imABulQQY/ZFnm1DRb6T02DInHY8og=
Subject key identifier: B1:80:A8:A2:6B:C9:42:57:22:0C:C1:6F:FC:16:D2:C5:E8:AB:AB:16
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 793458BD2569C85F97C135374478BC7F5582FC95
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa
Signing time: Wed 12 Aug 2026 21:05:31 +0000
ROA not before: Wed 12 Aug 2026 21:05:31 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:34:58:bd:25:69:c8:5f:97:c1:35:37:44:78:bc:7f:55:82:fc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:05:31 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=258da0441da37205ba0d42e6e17fa6728185688fa5675b29794b6b6644f1478e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:5e:10:d4:46:e0:ea:78:f4:b6:39:e8:b1:
e0:35:5e:67:aa:1c:31:3b:45:e9:1a:a7:79:33:cb:
36:65:60:a9:91:90:91:7c:49:97:72:b5:03:32:f1:
8f:b6:48:12:eb:05:6a:d3:4f:16:6a:55:6c:f4:6b:
89:e0:09:c9:b3:01:23:14:b3:35:ef:56:54:98:06:
b8:c0:7b:e1:9f:d0:44:93:fa:6c:18:b5:88:3d:5f:
20:27:be:fa:a8:b8:ce:ed:b7:83:3b:49:8a:a5:dc:
e4:5c:3c:fd:af:fd:77:a8:89:f4:ab:3e:3c:dc:0e:
2a:a0:0c:02:cf:ac:d4:3a:af:8c:6c:8a:5a:0d:7f:
70:42:85:a1:69:6b:fc:d0:47:67:28:b3:47:e9:7d:
72:d5:f2:8c:3e:ca:a2:d7:3c:34:bb:9a:82:98:76:
e0:43:8b:6a:03:40:aa:c6:08:b1:9f:cf:58:d4:48:
b3:fd:b6:c7:16:cd:16:0a:1d:2f:1d:59:81:11:05:
ab:4b:e7:57:c9:16:0e:a0:6c:a3:1e:03:bc:e4:8b:
7e:ea:94:7f:bf:d6:ae:9c:0b:b0:7a:3c:98:d4:0a:
9b:a7:30:6b:0c:89:2e:bc:fb:54:08:24:5c:da:b2:
a4:c9:d3:fa:99:bd:2b:17:da:89:b5:39:5e:74:ac:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:A8:A2:6B:C9:42:57:22:0C:C1:6F:FC:16:D2:C5:E8:AB:AB:16
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:1::/48
Signature Algorithm: sha256WithRSAEncryption
0c:00:89:0e:8e:67:08:30:78:6a:a2:a1:69:43:73:c7:84:99:
b7:5c:f1:73:f0:22:1f:1f:86:10:30:68:93:bc:09:ae:00:73:
c5:d6:55:eb:8e:4e:1a:b1:9b:7d:ae:45:8b:79:8a:05:4b:ff:
f1:e2:ab:07:5b:38:11:51:e3:e2:15:43:6a:b3:4b:05:9c:65:
07:09:dc:a4:d0:ae:98:f9:45:e6:66:5c:ed:e7:52:f5:ce:93:
43:2f:fa:72:21:f8:13:b6:cc:8c:d7:01:4e:8e:cf:53:df:69:
36:57:ab:39:14:ea:0a:39:75:04:28:e3:ab:bc:cc:ce:77:6e:
2f:e5:3e:8d:2d:41:0c:c9:f9:38:cd:65:6d:58:c4:02:38:b1:
3c:41:7c:8b:df:17:c0:ba:10:dd:72:f3:95:b2:1e:93:62:22:
6d:60:9f:b8:ba:08:58:a6:18:5b:c7:4c:59:eb:00:52:f4:b6:
b1:e0:97:0b:0f:fc:1d:47:79:07:1e:81:72:10:d4:96:c7:02:
80:23:c5:79:85:00:bf:a6:04:96:02:cd:a9:3e:a0:1e:7c:fe:
4d:20:67:51:48:50:2f:83:63:9c:4e:73:c8:d1:c8:f2:eb:99:
cb:36:24:55:58:a3:6d:ae:18:7a:4d:5c:a8:ba:f2:30:6f:e4:
75:d1:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:32:45 2026 by rpki-client