Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8e7191ef-ffa8-4cd3-86b5-7fb6a442355d.roa
File: 8e7191ef-ffa8-4cd3-86b5-7fb6a442355d.roa (raw, json)
Hash identifier: VC/q95H4vWp3p7c6oQd6pfYppdSH1w2MYl5OFY0j5qU=
Subject key identifier: 0A:BE:98:CF:22:35:6A:33:F1:F2:93:33:89:49:51:52:83:FB:EC:A2
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 58AA53CD83F361446E742826A553667F7DF8CEAC
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8e7191ef-ffa8-4cd3-86b5-7fb6a442355d.roa
Signing time: Sat 25 Jul 2026 00:40:08 +0000
ROA not before: Sat 25 Jul 2026 00:40:08 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc5:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:aa:53:cd:83:f3:61:44:6e:74:28:26:a5:53:66:7f:7d:f8:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 25 00:40:08 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=899dafaaa346e88bb45c05cddcd20004021761e5b8b225ba1e7bf7943a50a7ed, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:66:d9:f4:3b:ca:60:26:23:4b:e7:9d:ff:
5e:5c:e0:ff:ea:7e:8e:37:59:0b:f1:80:e1:fa:16:
dd:5b:33:9e:29:1b:e6:43:9e:cb:21:48:8a:20:55:
d9:0e:4e:4c:c4:fc:86:8f:98:1e:f7:70:68:65:6b:
7d:6d:ec:7e:62:13:a7:d8:78:e4:02:ae:c7:0f:17:
4c:07:df:7d:f8:cc:7b:c5:d8:25:0a:0d:c6:aa:88:
93:09:13:e4:1a:af:fe:a8:c4:22:33:47:ce:7a:9b:
e2:79:f6:e9:60:5e:50:bd:e7:f5:4a:26:0a:f7:c5:
51:c0:cb:d6:94:4d:7b:e3:0a:48:c7:00:34:01:26:
0c:f9:aa:b9:0f:5e:de:05:46:17:8c:2a:3c:2f:9f:
a2:13:01:32:81:60:35:28:f9:eb:5e:dd:26:f3:58:
0d:29:14:3f:27:2e:29:f3:98:e1:da:81:72:19:d9:
b4:f2:7b:2d:be:2c:83:a5:4c:cf:7b:7f:58:0e:5c:
49:dc:84:69:2f:ed:e6:dd:6c:30:b0:d8:60:3e:54:
e0:26:89:ed:df:fe:3a:c4:cb:95:ac:ca:58:7b:bd:
87:5b:7f:d0:88:28:05:3a:d2:c9:ac:f6:85:1b:69:
7c:07:27:b4:6c:3c:4e:60:bb:05:22:58:e2:51:48:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BE:98:CF:22:35:6A:33:F1:F2:93:33:89:49:51:52:83:FB:EC:A2
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/8e7191ef-ffa8-4cd3-86b5-7fb6a442355d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc5:1020::/48
Signature Algorithm: sha256WithRSAEncryption
4e:a6:29:a9:63:bf:0c:19:70:01:b4:09:7f:0f:b8:41:d7:d2:
05:c2:9c:c3:6c:20:1f:47:34:8f:09:53:f1:60:6e:f8:55:30:
a2:da:79:af:c2:3e:f7:e1:f8:1f:bf:27:c3:c5:cb:16:f2:a9:
99:70:8c:14:db:4a:e0:48:78:80:4f:49:5f:63:a1:38:36:83:
74:11:18:f6:d1:f3:72:ad:81:4f:25:6c:ba:0f:52:ab:24:b4:
2e:45:f4:01:2c:d0:e0:ea:30:62:22:77:fd:87:8d:68:71:dc:
00:fa:a2:7c:7a:ec:e2:31:b1:28:04:66:e1:a2:c0:7a:c3:fa:
7d:f0:f2:d1:1d:23:f9:e1:b4:68:54:31:ba:64:a1:38:dd:61:
eb:11:e5:97:7b:62:87:6f:9d:4c:e0:85:d9:4d:73:31:dd:49:
d4:66:b9:61:33:23:27:81:30:79:d5:95:97:1f:dd:4d:a3:0c:
f9:31:7e:d5:4a:1a:2b:4a:30:cb:5d:e3:2d:28:c4:87:c3:b7:
b8:fa:e3:14:af:10:3e:84:39:1c:17:88:0e:9a:d8:ba:cf:99:
cd:87:79:ba:3a:f3:28:ec:6b:d6:7a:3a:a8:b3:3f:1b:a4:0a:
af:26:6a:74:c2:58:8c:05:88:d4:36:65:49:a3:8e:dc:78:a7:
7f:e1:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:45 2026 by rpki-client