Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1934dc5e-8201-4fe2-b7d5-6bc5fd15f720.roa
File: 1934dc5e-8201-4fe2-b7d5-6bc5fd15f720.roa (raw, json)
Hash identifier: tTYCqNoyfMFtsqettmMWRfqAqMcGyjHuH2C0oJYJhjY=
Subject key identifier: 42:6F:36:C1:AC:32:61:D5:9F:FD:79:29:B2:3F:76:27:18:8C:75:AC
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 541B070BAC789E31E235750E76AC2A48B5809C42
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1934dc5e-8201-4fe2-b7d5-6bc5fd15f720.roa
Signing time: Thu 30 Jul 2026 01:30:57 +0000
ROA not before: Thu 30 Jul 2026 01:30:57 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1b:07:0b:ac:78:9e:31:e2:35:75:0e:76:ac:2a:48:b5:80:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:57 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=21cfa6fc8307d2f02c3cf4e4f977889d7665d0c223be89388c06f5baed3f5f53, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:6f:b2:8b:f0:c6:65:84:03:5b:78:11:a2:
43:a0:66:53:75:75:16:43:81:8a:5a:ed:9a:59:12:
13:17:35:33:d1:84:38:92:ee:6d:5b:b7:87:59:5e:
5b:4d:75:1b:01:f3:8d:a6:d8:66:4d:c9:89:da:f6:
bc:31:e5:bc:16:86:92:ca:7b:27:c0:70:e4:c8:f2:
b7:06:24:2b:2f:ff:b0:4b:d5:92:ef:1d:da:58:bb:
21:12:14:e9:af:ce:57:df:a8:0e:73:74:40:15:ea:
d6:b7:65:8f:4f:95:6b:dc:53:b7:34:bc:3c:a3:cf:
87:ae:a5:91:d4:af:a1:73:69:73:ad:2b:6a:37:74:
aa:18:f3:2c:5a:94:6c:38:a5:ce:3b:ce:50:6a:df:
12:1a:c6:78:e8:24:a3:7c:3c:d7:fb:80:54:4e:e0:
57:72:0f:50:be:b5:4c:1a:9b:75:18:b4:de:e1:15:
44:81:66:f6:c0:ed:7a:d2:84:44:3a:1c:07:ad:c4:
4a:40:a0:04:62:96:9b:97:d4:16:9b:79:e9:b9:39:
8d:bb:b6:12:cd:04:0c:d1:b4:aa:e5:26:14:ee:a5:
e8:72:9c:5d:09:c0:35:38:be:66:92:f3:19:75:50:
aa:66:5a:89:3b:01:9e:d2:a5:8e:63:29:83:65:a1:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6F:36:C1:AC:32:61:D5:9F:FD:79:29:B2:3F:76:27:18:8C:75:AC
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/1934dc5e-8201-4fe2-b7d5-6bc5fd15f720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:af:75:78:c2:b9:49:06:4e:23:db:70:fb:16:ed:6d:ff:9c:
9f:61:5b:0a:ba:d9:c0:ec:3f:58:48:70:36:1a:66:c1:21:72:
08:59:0d:e2:02:2f:73:4d:9c:c6:1a:cc:45:d9:1a:6a:9b:86:
d4:7f:8e:9f:1e:25:14:b4:a3:f8:d3:90:51:07:93:1e:c2:30:
70:9d:ed:5b:7d:1e:35:41:ef:2b:79:e7:8b:21:af:f4:76:e9:
18:92:5f:b5:73:01:0d:22:53:fd:b0:19:55:82:05:ed:9f:b8:
92:88:62:38:03:5e:0b:e5:4f:c8:ce:b7:f6:6a:03:c5:98:59:
01:4c:f1:63:27:cf:d4:35:df:06:f4:8c:d1:bb:eb:ed:b8:9a:
a4:61:8e:7b:b4:29:fe:ff:5f:f2:1f:3e:f3:f3:6f:8b:87:9b:
b1:f7:1e:9c:47:4b:05:3b:ce:62:0a:52:b3:1a:94:98:b7:4a:
b1:95:0f:fd:eb:28:64:7f:d8:d4:3d:b2:0c:3b:6b:ba:21:64:
1c:3d:6a:45:91:16:89:3d:3a:64:e5:04:dd:d1:2b:52:1a:d8:
f0:1a:8d:27:97:54:04:e6:3b:60:cd:ae:83:90:7c:76:76:17:
5e:0f:9b:d0:d6:19:cd:94:41:63:53:a0:96:d0:08:68:33:92:
43:df:5d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:26 2026 by rpki-client