Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fadf7ea4-8934-4553-a781-e377055caeb3.roa
File: fadf7ea4-8934-4553-a781-e377055caeb3.roa (raw, json)
Hash identifier: 1GchNwuOyUSUS/9H6u7bmZG6NYFNpKigOAgKCNnwh8A=
Subject key identifier: 15:2F:16:99:B9:92:57:1C:2B:0F:DE:5A:CC:DB:5E:F3:4F:7C:6F:F6
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 173BA24217010DFE7A66E9F29C7CF6E299CE7B85
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fadf7ea4-8934-4553-a781-e377055caeb3.roa
Signing time: Wed 12 Aug 2026 21:06:51 +0000
ROA not before: Wed 12 Aug 2026 21:06:51 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc5:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3b:a2:42:17:01:0d:fe:7a:66:e9:f2:9c:7c:f6:e2:99:ce:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:06:51 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=5592e9f1e7e62201e3226f1f25ae1e8a9ab80891dd14cb078167d11db7274dd3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:f8:4f:7d:26:30:ca:3a:c8:0b:44:35:42:
ce:28:5c:57:9e:04:6e:8b:fd:da:96:bb:8b:d7:88:
f4:22:31:25:cc:43:6d:0b:14:22:a0:82:51:00:cd:
c7:a9:a8:b3:2b:6d:33:48:ff:49:41:61:d6:fa:bb:
5b:fa:36:fa:63:12:36:52:ae:fb:b2:d4:16:84:35:
7a:92:26:fa:bb:13:41:03:3e:c2:14:cc:5a:b0:0b:
0f:85:33:ac:c7:5a:aa:06:2c:ac:bb:ef:f9:b4:f1:
26:bb:4c:b6:78:5d:cc:90:51:53:b1:a4:5f:b1:7c:
cc:3c:2c:58:bd:53:b8:c2:53:5c:5a:00:76:aa:ea:
41:3a:0c:74:a5:c2:11:52:14:89:de:72:0e:e9:09:
bf:f6:56:63:c4:c4:93:89:c3:f2:b6:4f:aa:bc:fe:
b5:0d:1b:4c:ee:58:77:b8:fe:a8:d3:7a:f0:20:3a:
e8:bd:c0:75:e4:56:26:27:43:d6:e6:39:53:56:09:
52:47:38:47:56:91:c8:ef:fd:dd:0b:e5:71:f2:93:
9e:85:9a:00:fc:11:47:50:9c:9d:11:64:ee:8e:5c:
2e:79:fd:65:8e:b8:61:80:39:18:b3:8a:f2:99:00:
37:0d:c5:0d:8a:cb:da:da:ed:47:fc:ea:cd:87:98:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:16:99:B9:92:57:1C:2B:0F:DE:5A:CC:DB:5E:F3:4F:7C:6F:F6
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fadf7ea4-8934-4553-a781-e377055caeb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:2000::/36
Signature Algorithm: sha256WithRSAEncryption
cf:fc:5e:2d:5f:20:67:21:46:1f:8b:70:4b:42:c0:9e:93:43:
46:7e:e1:3a:73:63:f9:28:70:1b:90:03:0f:84:ce:9d:2e:fc:
32:97:a1:38:32:ad:a5:a0:5c:eb:15:8d:3a:53:a2:62:89:05:
f3:79:e2:d2:9d:00:62:f9:76:b9:9e:3c:f8:ca:fe:50:36:31:
6c:15:98:62:69:c0:83:8f:a6:c6:49:ed:8b:29:e5:99:03:5e:
a4:40:61:cc:4f:65:62:0e:1b:8e:62:72:ff:f3:53:8e:2b:81:
3a:17:9c:b3:58:9e:de:f0:07:f7:eb:64:55:a9:5d:8d:9e:c5:
e9:e2:52:66:1c:33:61:9e:6b:12:75:6f:c9:27:be:a1:ef:8d:
cf:e3:ef:33:01:c2:5e:51:92:9d:3e:f4:8e:54:68:9e:25:b9:
a5:13:95:c7:3a:73:87:2f:f6:f7:c6:78:cb:52:1c:98:a6:42:
cd:8d:5d:36:1d:86:c3:52:05:41:ef:24:df:aa:2d:07:8f:a7:
78:77:72:b5:1b:b9:8d:aa:b8:64:4e:93:48:63:37:c6:32:b0:
19:38:9f:41:d1:8b:92:94:5e:51:20:25:3c:e1:96:c6:47:44:
09:16:12:a4:85:6e:7e:66:6e:43:95:a5:96:b5:5a:46:cf:b1:
a2:7d:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:30:32 2026 by rpki-client