Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe570437-a8f1-4132-80fd-0ba0af95c2b3.roa
File: fe570437-a8f1-4132-80fd-0ba0af95c2b3.roa (raw, json)
Hash identifier: MMq4r2P52njlWWxaByAFaE10FIfTHtkItOzMKCUTko4=
Subject key identifier: 55:AB:AB:23:8D:ED:F3:E7:5C:FD:48:06:8E:3A:7A:CD:20:9F:E3:52
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 3AEBE9119AEC8614D7C575E137EE83326751127F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe570437-a8f1-4132-80fd-0ba0af95c2b3.roa
Signing time: Wed 12 Aug 2026 21:04:19 +0000
ROA not before: Wed 12 Aug 2026 21:04:19 +0000
ROA not after: Tue 10 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc7:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:eb:e9:11:9a:ec:86:14:d7:c5:75:e1:37:ee:83:32:67:51:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 12 21:04:19 2026 GMT
Not After : Nov 10 23:59:59 2026 GMT
Subject: serialNumber=04c362c053769803a1981bfcc7d1e8cbc62a930df2e52d1c2e1ca48be4d76dde, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:58:63:7e:a6:c8:a8:d2:43:e0:e1:a3:63:6f:
8d:a3:49:36:2f:51:82:dc:ef:53:7c:85:6a:2c:a6:
2e:2a:f2:7b:0c:13:87:f5:c9:31:86:85:2e:22:88:
c6:af:19:08:3f:49:31:fb:63:af:d3:7f:0e:ca:f8:
0b:e9:04:72:90:43:55:33:2c:96:b6:88:c7:e6:93:
dd:9c:35:b6:59:31:0a:89:57:e8:1b:6f:f8:dd:6b:
a2:e6:2d:c2:98:1a:8d:d5:a6:c8:a6:f3:d0:0f:1b:
00:28:81:f5:bf:20:a0:14:a0:d4:28:6d:0c:dd:ca:
2d:ff:02:91:44:77:cb:15:d1:c4:d8:3b:0c:2a:93:
63:d4:3b:da:a5:a4:bb:9e:ff:99:1c:1b:8d:82:28:
12:d1:49:0a:18:39:fc:a7:db:45:35:ba:3b:96:7d:
2f:c7:96:69:75:65:77:d9:a5:79:0b:9e:a3:21:d7:
7c:25:1e:5f:f6:47:c6:81:59:3f:82:01:ce:a0:9f:
6d:92:3d:be:f6:fa:13:12:ff:b7:a3:85:79:44:4a:
32:b5:13:9a:d6:78:f3:a7:7c:89:c6:6e:e2:33:aa:
5b:d1:49:21:ac:a6:32:93:1f:c1:1d:e5:7d:a0:ed:
80:22:c4:91:51:90:08:e8:0d:e5:f8:90:ca:fd:38:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:AB:23:8D:ED:F3:E7:5C:FD:48:06:8E:3A:7A:CD:20:9F:E3:52
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe570437-a8f1-4132-80fd-0ba0af95c2b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:7000::/36
Signature Algorithm: sha256WithRSAEncryption
01:ca:e0:61:04:2f:d8:53:c7:d7:17:0c:68:9b:18:39:72:cb:
e9:ed:0f:be:9f:2a:69:b5:58:30:dc:2b:7a:21:e0:ed:60:4c:
a6:64:10:40:d5:f1:cd:38:d4:bf:ef:a0:f4:bd:9a:14:cd:1b:
58:fa:21:86:a0:1c:a2:d5:a4:ee:9b:4f:33:71:36:be:5d:6a:
46:b7:3e:13:b0:db:ab:a7:34:a1:c0:f6:b4:98:1f:b9:60:77:
75:db:b4:f4:eb:6f:ee:d9:21:d9:ea:6e:98:6a:9c:d3:65:08:
cf:0b:af:d2:58:ec:06:a6:e6:46:ca:6a:90:e9:52:48:43:97:
80:78:fd:67:af:59:e8:1a:b9:21:34:5f:f2:9e:5b:3e:99:c4:
f8:30:f9:d3:01:1f:b3:c1:ae:9a:6f:d8:1a:8c:fa:29:05:79:
e7:be:54:ca:d4:7b:4d:e8:d6:cd:04:0a:e9:54:8a:62:dc:2b:
86:36:85:9b:9e:8c:45:14:bc:ab:a0:a1:6b:4c:1c:46:63:8d:
ec:18:e2:84:56:23:09:ec:36:16:6e:b9:f3:69:92:5f:8b:d9:
0f:3f:e2:67:de:cf:86:11:5a:a7:3e:30:45:e5:ed:74:94:99:
be:e5:29:79:b7:2f:58:bf:b3:45:fa:c3:45:79:57:82:c4:66:
00:a7:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:34:12 2026 by rpki-client