Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ff9e4552-088f-489c-a911-2cebe51a2644.roa
File: ff9e4552-088f-489c-a911-2cebe51a2644.roa (raw, json)
Hash identifier: 90n9edhReaexGfWSFDUsQLUgXxVGWRbvp1ZBDX+Jm18=
Subject key identifier: 13:B3:7A:3D:28:F8:55:85:49:D0:91:DE:5B:A9:2B:E7:5A:AE:78:8A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 54869212EE15C5F492FBCC7DE6897AF4EE1C55CF
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ff9e4552-088f-489c-a911-2cebe51a2644.roa
Signing time: Tue 11 Aug 2026 20:02:47 +0000
ROA not before: Tue 11 Aug 2026 20:02:47 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc2:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:86:92:12:ee:15:c5:f4:92:fb:cc:7d:e6:89:7a:f4:ee:1c:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Aug 11 20:02:47 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=4d7b56e189ea5c38fc45fc5b279802ef6d8f144317d553265a18ca2599fe0765, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:23:e5:47:dd:e1:41:01:25:55:66:69:8f:
8f:06:f1:d8:91:54:2a:ed:53:32:4e:ad:88:a1:e7:
f4:cb:8a:c2:bd:83:f5:91:45:1b:0f:6c:b0:a6:e3:
dd:f4:80:f3:06:7b:bd:ee:6e:32:17:04:e1:3d:a8:
59:3d:fe:2b:e3:9a:e3:8e:7e:02:64:3e:a0:96:2f:
88:88:b2:cd:af:6d:87:f6:12:9e:83:10:7f:c5:a4:
10:99:b2:7a:98:de:66:a5:fc:bf:7a:93:1d:62:d7:
68:5b:f0:dd:19:3a:0f:50:5b:9c:87:95:30:3a:f3:
22:19:0e:48:2f:4b:83:72:03:4d:18:9d:8a:0e:47:
60:c9:00:4f:91:0e:66:55:1b:3d:88:01:cc:da:71:
6c:9e:56:19:66:89:30:2a:d7:8b:59:76:4d:ba:cb:
3f:4d:03:a8:6a:ea:ec:93:7e:31:03:6e:db:eb:df:
73:07:3c:33:93:03:a4:5b:6c:45:33:c6:f9:d6:c5:
38:f5:6e:02:e2:af:46:1c:94:c4:db:90:71:0e:36:
7c:00:8c:56:e1:00:ad:e6:9c:af:48:8c:8e:98:00:
fd:fd:b6:72:00:45:15:66:c7:68:e0:72:1c:d1:91:
f7:c3:a4:65:08:59:de:71:8e:85:84:93:71:21:6e:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:7A:3D:28:F8:55:85:49:D0:91:DE:5B:A9:2B:E7:5A:AE:78:8A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/ff9e4552-088f-489c-a911-2cebe51a2644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc2:8000::/36
Signature Algorithm: sha256WithRSAEncryption
aa:7b:9c:42:b7:e9:9a:e9:7f:61:17:d2:9a:33:4c:af:6a:0b:
cd:69:ed:93:72:02:1b:33:e1:9e:3f:98:a5:2d:18:9e:bd:bc:
77:a6:1e:e6:7f:24:8c:80:89:67:9c:7e:5c:d9:a7:90:6a:21:
10:d9:11:dc:d7:8d:00:e9:ef:75:e2:39:48:6f:f1:92:08:a5:
c8:c1:93:2b:90:62:65:23:fa:9b:cb:a2:d6:42:c9:2c:68:9a:
19:61:11:45:0f:5f:81:4e:46:ed:a1:22:25:44:76:be:0d:aa:
17:22:21:56:6a:60:f9:61:7b:3e:39:eb:cd:e3:7f:67:3e:f1:
86:54:29:9c:2e:c2:2f:fa:c4:7e:b4:5d:6d:5d:ad:37:79:ce:
bd:9e:27:c4:4d:61:55:82:12:46:47:22:b5:44:5c:d3:5e:3c:
91:75:2d:47:fa:be:00:1f:d7:74:ab:8b:82:80:cf:37:70:d1:
51:54:78:72:a5:45:a7:67:e8:86:3f:4d:79:7e:04:60:64:bd:
04:9a:bb:40:8e:f2:74:63:6d:c7:0c:32:a2:9a:37:94:7f:f3:
ea:12:ae:73:f0:25:f3:0d:ce:ae:23:f6:b5:fc:91:34:3e:42:
b9:0d:fb:1f:16:04:22:ba:da:e2:d6:94:5b:c4:6e:56:67:b8:
7c:64:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:33:46 2026 by rpki-client