Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/346959dd-64e1-47f4-a247-4a19fe4282cf.roa
File: 346959dd-64e1-47f4-a247-4a19fe4282cf.roa (raw, json)
Hash identifier: x1hwr/K0DWnpdExY9VGyZ1ZicMDgGcG8/SuBQJwKxFw=
Subject key identifier: 80:73:16:08:5A:65:FF:B0:15:8D:9D:2A:67:10:8F:A6:C9:83:8E:75
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 073175149B35027C1B4E55944DB41644FD5A4A32
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/346959dd-64e1-47f4-a247-4a19fe4282cf.roa
Signing time: Thu 30 Jul 2026 01:30:16 +0000
ROA not before: Thu 30 Jul 2026 01:30:16 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:31:75:14:9b:35:02:7c:1b:4e:55:94:4d:b4:16:44:fd:5a:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:16 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=2561b81295a8fa3a9a8ede7d39206e654dbcea2926b311d6bb6e964c52f9cca2, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:bc:f5:4c:14:f0:c4:c9:42:17:82:b8:26:
87:87:28:5d:74:0b:9a:90:5e:d1:30:24:fe:9b:d9:
65:d7:16:1a:c5:78:dd:8b:ee:11:a2:49:87:3f:c2:
2e:91:2d:5d:a1:b1:c9:91:97:c6:b3:23:96:20:4b:
4b:5e:bd:ed:85:e4:4b:ff:43:ea:0e:22:5e:65:0b:
6a:2c:5b:80:1f:31:e9:4b:0c:ba:53:66:9a:ae:0d:
90:66:6f:0f:02:bb:a1:14:ed:f5:68:f7:a9:94:e1:
af:f3:94:ac:0e:50:04:4d:ef:67:f2:b1:48:ff:7f:
b8:18:28:81:e6:46:f2:79:f0:5a:ff:3f:db:b6:27:
b8:59:5a:6f:55:a1:42:df:15:6a:02:9f:03:94:38:
f2:17:4c:f9:6f:b6:f8:79:14:fb:2e:80:47:ff:f9:
c0:ad:da:e3:f7:18:a8:ff:c4:bb:2f:ae:90:2a:b0:
3f:c7:e1:9a:b1:7e:6a:53:c4:db:7d:79:b9:34:db:
88:f9:e6:c0:3a:8d:c5:ee:4d:d7:5a:e1:67:ea:bb:
10:18:c3:1c:ab:a4:a8:99:f4:41:14:4c:6c:68:a5:
83:e2:3d:9f:9e:39:a2:2e:e3:cc:35:f8:0e:18:f4:
6a:52:d7:af:4c:be:6e:1a:47:bc:80:35:c6:19:be:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:16:08:5A:65:FF:B0:15:8D:9D:2A:67:10:8F:A6:C9:83:8E:75
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/346959dd-64e1-47f4-a247-4a19fe4282cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1::/32
Signature Algorithm: sha256WithRSAEncryption
35:f0:65:3c:1a:75:8a:c8:82:f8:d9:be:81:65:95:c5:77:96:
0e:fb:58:95:c2:a4:4c:66:2f:b9:e5:39:38:89:49:fc:4b:16:
ba:ce:bc:15:25:04:eb:93:bc:d8:e4:7f:69:ac:ec:88:17:3b:
3a:e7:bf:0b:ad:17:5c:23:42:9e:4b:5a:df:49:43:0b:a8:5c:
ba:25:92:69:1b:bd:8f:98:c5:da:1e:1b:0d:a4:e7:98:46:c4:
ed:74:83:63:95:8d:72:e6:5f:92:96:3c:6f:b4:a2:0a:ac:88:
19:05:3a:a4:9a:8f:07:55:20:e1:eb:53:ab:37:7a:99:15:15:
44:cf:50:8c:61:5c:26:c5:44:5b:ee:82:35:88:04:ce:66:59:
c4:d1:72:bb:70:11:13:5c:a0:8d:96:73:b7:8d:ec:8f:db:fc:
1f:5c:0b:d1:6d:9b:4b:b4:e6:35:a0:fa:90:35:22:65:e0:a1:
28:48:d9:46:c7:c5:97:14:01:b4:81:11:f8:db:f3:d0:2d:70:
f1:50:6a:c9:ff:f0:0c:74:c8:28:3c:dd:75:1d:2d:4d:67:e4:
98:44:98:a7:8e:10:6c:af:43:2f:a2:d5:98:96:56:a5:ef:bb:
7d:82:67:aa:28:27:08:cf:02:dc:7c:2e:7e:f7:86:95:a7:13:
80:8b:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:37 2026 by rpki-client