Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0582d0d5-4d6b-43e7-869e-df722bf70a81.roa
File: 0582d0d5-4d6b-43e7-869e-df722bf70a81.roa (raw, json)
Hash identifier: HXMH4wzOihCmnJ46OrlPKj9vTvScmUFd1Gp8PfxwTOg=
Subject key identifier: E5:F4:E5:71:4B:CB:D8:14:29:78:C7:05:3B:4F:63:20:49:65:AB:0D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 6E28FB20B84F717E0BA5DD459E31B24C3C1DEA53
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0582d0d5-4d6b-43e7-869e-df722bf70a81.roa
Signing time: Thu 30 Jul 2026 01:30:59 +0000
ROA not before: Thu 30 Jul 2026 01:30:59 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:2880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:28:fb:20:b8:4f:71:7e:0b:a5:dd:45:9e:31:b2:4c:3c:1d:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:59 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=0ffb47842c6d7a58e51ce822b047ee5a63388c81931d4009a3f3691e18c66e6b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:9c:68:30:69:66:3c:5e:9c:5f:ff:b4:a7:
09:55:99:54:17:0d:dc:b1:ae:9b:38:68:6f:76:29:
fd:b8:11:84:6d:44:2c:36:a3:f8:18:79:f8:a5:06:
b9:3f:c9:55:f7:18:90:c3:5e:20:92:83:b9:0a:a5:
63:16:51:c0:1d:45:79:5e:8d:cf:8d:c3:a5:50:73:
8f:ff:3e:ae:6e:bb:44:53:5c:d7:f0:27:21:85:9d:
42:d3:05:7a:91:b8:40:a1:01:76:a8:97:9b:c7:34:
3f:2f:12:e0:46:3d:d5:91:ec:67:1b:60:63:ab:6b:
3f:30:f7:8c:1a:d4:f1:99:38:ea:e0:1a:9f:a4:05:
c5:3f:9e:d2:55:c6:cf:97:5d:b4:f9:b6:6c:63:96:
c1:86:dd:9f:f6:8b:25:6c:15:89:20:de:2f:a4:86:
14:c0:f0:6f:0d:2b:35:2a:33:d3:e0:c0:ae:61:96:
5f:3e:ea:b7:d5:47:69:aa:dd:d3:2f:d2:dc:ed:52:
16:68:ac:98:ef:4f:c1:e8:ce:10:dd:87:87:cf:2b:
fc:7c:bc:22:3a:01:5b:b0:ec:b3:a0:f3:44:b3:0d:
f8:0e:36:66:f9:f2:f6:31:58:d3:aa:d3:8b:48:33:
fc:5b:60:24:6c:4e:f3:0a:ce:df:7e:5d:1b:dc:9b:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:E5:71:4B:CB:D8:14:29:78:C7:05:3B:4F:63:20:49:65:AB:0D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0582d0d5-4d6b-43e7-869e-df722bf70a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:2880::/48
Signature Algorithm: sha256WithRSAEncryption
03:0c:6e:5c:7e:1d:76:3b:fa:6c:9c:10:21:58:43:c3:0c:25:
76:67:ba:58:25:c9:c6:3e:0e:f2:fd:1e:96:08:13:ca:cb:ef:
9c:6f:eb:44:f3:e4:fc:d6:53:e6:3d:3a:30:76:dc:d0:72:5b:
e2:a4:63:af:71:c0:6c:9e:10:65:a2:21:3a:d5:bf:4e:44:df:
bc:54:9c:5f:ef:b4:bf:8c:a0:03:ff:fd:9f:ce:b1:32:41:f1:
82:37:62:ff:74:b5:dd:cb:3b:fb:4d:df:dc:98:50:56:d8:03:
69:0b:76:9a:6d:b0:f6:79:29:6d:bf:c2:bf:76:59:be:c2:a5:
48:b5:6b:64:47:6a:ae:97:9e:0c:a4:ce:72:60:2c:7b:0f:27:
16:5e:ab:a1:b9:96:28:b6:b2:d2:75:bc:e4:54:24:f6:9f:4e:
9c:72:92:71:49:d2:62:6f:a5:89:9d:2a:01:7c:c2:13:80:77:
8e:0e:4d:7e:11:99:75:b4:1f:83:c6:ac:32:32:82:9a:a5:85:
5f:c5:db:19:1e:59:06:6b:30:31:c4:c8:f5:6e:5a:5d:8e:26:
5e:68:a2:d5:c0:da:b4:aa:9f:09:77:b4:50:b2:19:98:6c:3a:
10:f1:f6:c7:a8:b0:75:7a:3b:ac:d3:dd:92:d8:48:c2:1c:02:
57:25:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:22 2026 by rpki-client