Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa
File: e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa (raw, json)
Hash identifier: mNmx2ZAbFR87bishBZHAnUpX2egtKvQmuYblJTcIWG8=
Subject key identifier: 58:64:12:4C:99:BA:59:EA:8F:44:2B:55:12:0D:E5:69:2D:1E:65:BB
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 720BEF17450F87EAAEE40AC5DC149488DF85C6B2
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa
Signing time: Sun 20 Sep 2026 00:00:10 +0000
ROA not before: Sun 20 Sep 2026 00:00:10 +0000
ROA not after: Sat 19 Dec 2026 23:59:59 +0000
asID: 214101
IP address blocks: 2001:3fc6:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0b:ef:17:45:0f:87:ea:ae:e4:0a:c5:dc:14:94:88:df:85:c6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Sep 20 00:00:10 2026 GMT
Not After : Dec 19 23:59:59 2026 GMT
Subject: serialNumber=ba7f666b2d1a60cc8330d37cc4254e259d441a27c750b323abd98fc73268829e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:ad:45:fc:a4:35:1e:6c:d0:34:64:c1:2e:
4d:1d:73:4a:13:8d:d4:f2:21:f5:e0:02:04:be:60:
8f:0a:5b:82:54:2a:43:12:96:87:52:42:11:78:9d:
1f:38:a5:28:a1:12:4b:32:23:b0:27:82:d7:63:33:
99:d0:a1:01:94:04:6d:73:af:69:23:9a:b1:d4:d9:
4e:59:a4:77:c5:b2:b2:19:27:9f:0a:0b:3e:95:23:
62:de:ce:c9:45:53:9a:c3:3d:f0:3c:d2:1e:7d:7e:
0c:33:1d:4e:80:f3:d1:80:76:b2:77:9b:f3:da:ee:
06:70:62:52:32:77:dd:df:30:06:1f:21:9b:4a:d3:
d8:4e:43:d5:b1:84:20:6a:39:a5:f9:67:cd:82:92:
2b:af:11:66:9c:86:3a:a0:b1:cf:58:d4:29:f5:1b:
8f:d1:6a:3f:6c:9b:1d:58:21:81:bd:3d:30:10:cd:
9b:eb:29:7d:75:f5:85:fd:c1:62:ac:06:61:c5:3d:
e1:05:2e:87:ee:a0:b7:ff:a4:b8:ff:07:59:ad:6f:
c0:f2:2a:e0:f7:6d:7b:ca:54:98:8c:c1:e0:57:cf:
37:f4:e1:8a:19:68:a4:55:60:84:08:1e:ca:82:13:
7e:5d:d7:42:94:b5:51:c9:0c:0b:2f:fb:51:77:a4:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:64:12:4C:99:BA:59:EA:8F:44:2B:55:12:0D:E5:69:2D:1E:65:BB
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e8fb3468-4b6a-461c-ba52-abd6a8c00d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:1::/48
Signature Algorithm: sha256WithRSAEncryption
a2:bb:9d:fb:35:fd:b0:8e:59:99:0c:be:3b:0a:ed:df:7e:68:
cd:b1:a0:4f:15:b2:71:76:da:0a:91:33:d7:a2:d7:46:c9:f8:
ef:e9:60:a0:0c:08:a0:11:41:1c:56:cb:ae:86:39:3a:19:0d:
5a:94:26:66:cf:38:36:87:75:c9:bc:27:13:a3:27:40:78:8b:
4e:46:6b:0f:79:a9:95:1a:0e:cc:d2:f0:18:a8:f9:97:6b:91:
98:1d:0e:35:7e:0b:32:d9:6e:c4:f7:8a:7a:b4:fc:b3:1b:a1:
bd:55:c2:85:72:02:d6:e6:20:a3:b6:d2:61:3f:0e:69:71:75:
62:42:a3:f2:73:36:06:9b:98:52:3b:a5:01:d0:6b:07:cd:7b:
32:cb:8b:4c:a1:e7:ed:ce:1e:01:7e:05:06:b3:a8:42:40:7c:
72:96:10:6b:28:53:8c:99:73:de:1e:a5:33:b8:f8:33:ad:eb:
45:60:c8:fd:94:1a:b4:28:90:43:62:0b:48:66:39:d4:b8:a1:
b3:d9:48:a9:d4:ee:cc:8b:f3:b7:82:ee:9c:43:28:f5:f9:96:
8a:ec:c4:de:4f:c4:6e:4b:ac:f4:76:d8:78:d7:66:87:85:f2:
95:b6:4d:e1:bf:a7:47:25:40:f6:d9:b7:dd:42:6d:6a:27:f1:
c9:36:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:55:34 2026 by rpki-client