Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
File: f1ac118e-e6d3-4c1a-be43-c76f57238339.roa (raw, json)
Hash identifier: 8ZJAtYYwqBSWTbP7xBGon1UvulJLn93uJ8DLbDSdcjA=
Subject key identifier: E1:71:4E:01:1E:AC:5F:A7:AD:9C:96:EB:FC:CE:D3:C6:A5:9D:8D:D0
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1C609FCE9D58F439B5112428B7A44EF3BDFF44FC
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
Signing time: Thu 30 Jul 2026 01:20:10 +0000
ROA not before: Thu 30 Jul 2026 01:20:10 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2001:3fc5:9800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:60:9f:ce:9d:58:f4:39:b5:11:24:28:b7:a4:4e:f3:bd:ff:44:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:10 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=12db8d8b3c25128db890e2231708c95515904d6b9b0739e5d32d96d79e4e245e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:77:a0:07:f6:4f:4c:06:9c:ca:9b:43:40:
0a:d7:2f:e3:fb:0c:f4:1a:86:a7:4b:77:7a:0e:7a:
57:1e:7c:1d:cb:86:94:29:5a:a9:a3:ea:21:97:af:
89:6d:2c:78:d4:cb:31:d9:91:32:76:26:55:08:c5:
8b:12:5a:fe:e7:e5:17:4f:65:2a:88:c7:6d:60:49:
8f:73:9a:95:81:57:79:14:92:51:60:3b:56:98:84:
1c:09:cc:ff:dc:6e:91:b7:c8:73:54:3d:6a:91:bd:
3b:e2:28:48:9b:8e:15:1b:8e:9a:ec:0d:4d:13:4a:
6d:05:6a:5c:27:d3:be:cb:f8:e1:04:a6:c8:58:dd:
8c:9e:70:b6:1f:95:21:0c:3a:1e:bf:90:ad:a2:9f:
85:b1:53:b1:71:f1:89:5f:ff:35:fe:e9:7e:5b:3a:
23:4a:88:6f:2d:a9:57:41:ff:cb:6f:91:e3:57:8f:
59:87:b3:78:77:4c:58:61:28:3b:1f:66:6a:b4:83:
b9:96:79:2b:ac:6e:a8:5a:81:58:cf:e2:5e:59:f1:
cc:e7:e7:6d:6d:56:6e:df:c1:0c:bb:de:39:77:20:
67:31:50:4f:20:d7:db:7d:ec:4f:dd:27:7b:c5:05:
af:d6:9a:36:ed:7c:15:44:e5:72:2c:c3:bb:39:f2:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:71:4E:01:1E:AC:5F:A7:AD:9C:96:EB:FC:CE:D3:C6:A5:9D:8D:D0
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f1ac118e-e6d3-4c1a-be43-c76f57238339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:9800::/40
Signature Algorithm: sha256WithRSAEncryption
76:7a:1e:90:3e:d0:f7:6d:ed:fb:92:53:35:31:95:b6:ba:75:
fd:40:94:b1:38:2c:bf:30:d7:2d:42:cc:f8:1e:7e:10:59:bd:
2d:b2:c2:1d:6b:92:3b:a1:d4:be:be:69:94:6a:57:6c:ba:7f:
e4:6f:33:e7:01:51:0b:4d:27:cc:6b:5f:75:ea:78:f4:72:29:
e2:b1:f2:44:86:f7:c5:fa:f1:d0:56:d9:64:0a:65:f7:1b:1f:
9d:02:77:98:56:a8:b7:d7:46:30:f8:37:2d:7f:fe:7c:fb:c4:
11:30:62:9b:11:67:cd:d6:ca:dd:24:49:dd:cf:ce:b2:6c:b7:
31:8e:04:45:39:62:92:4a:29:d2:81:67:9f:16:1d:70:2c:50:
c7:70:fa:55:a7:d5:98:5e:4c:e4:a0:c7:90:8d:a3:26:a1:4c:
d1:83:9b:18:0d:bd:15:f1:97:b7:92:2b:31:71:ed:d4:e3:d9:
97:9f:0c:4b:b1:a8:e8:8b:e8:fa:b9:63:e7:31:71:14:dd:f1:
19:41:95:4d:7c:da:e9:f8:74:6d:37:e6:43:dc:ea:bb:59:6f:
fb:42:34:4a:c3:88:89:20:89:de:c9:38:2d:31:b0:6c:4a:70:
1f:64:aa:03:92:af:2e:35:95:3e:f2:7a:d7:a6:b2:08:73:20:
15:22:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:30 2026 by rpki-client