Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
File: 3ad06e7c-7473-4104-a394-28daf30bc72f.roa (raw, json)
Hash identifier: tmOUhBVmjIg2XK6N0xH7Ag4T/9JuWNe9RVZHF4z6uP8=
Subject key identifier: AE:8D:FE:DB:CB:13:B8:99:55:0A:87:EE:33:A3:4B:1E:69:C8:33:41
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 4EF84E245374BF174F45E2B060426270179EF350
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
Signing time: Thu 30 Jul 2026 01:20:03 +0000
ROA not before: Thu 30 Jul 2026 01:20:03 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:5800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f8:4e:24:53:74:bf:17:4f:45:e2:b0:60:42:62:70:17:9e:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:03 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=cabc2a5e09c1dfacd09485354bc28a849d89efe1061ba59e03c2de8e1be541a6, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:f5:86:a5:fb:08:f6:b4:97:86:a9:82:73:
89:ff:87:89:d6:ba:21:77:68:d6:1c:13:43:d0:38:
dd:cd:18:57:98:9c:38:11:d9:92:3f:7b:b7:fc:22:
c3:38:1d:c7:fb:35:e2:2c:8f:cc:92:b5:fd:8b:47:
fb:cb:13:64:84:2c:e1:fa:3c:8b:f5:98:38:50:fa:
f8:43:37:f1:9f:d6:41:7f:16:79:2f:9b:be:23:23:
12:5e:a3:a5:21:81:42:88:75:92:85:62:a3:7d:15:
41:eb:4d:f2:cc:15:76:4c:49:bf:98:f5:6d:95:bc:
5f:1c:40:42:ed:ee:38:0d:4c:13:d3:28:06:a6:f8:
eb:0f:55:3a:cc:e7:15:35:99:e9:cb:d3:b7:bc:bb:
00:fc:fe:2a:37:7a:df:26:c8:6a:67:17:6b:27:3d:
ff:4e:b3:9c:a0:0e:7c:cc:24:f2:47:75:81:f0:eb:
97:1a:69:2c:79:74:04:de:1a:78:5a:8b:c4:ec:89:
9d:c4:af:71:8a:3d:0e:fb:c1:08:0b:81:bf:cc:dc:
b3:cd:a4:72:02:94:c6:17:ad:03:c8:aa:49:fc:3c:
97:6b:85:86:96:46:e1:ea:6d:cb:4e:0e:b2:ac:7e:
fe:08:2e:f0:5a:48:36:28:7e:19:ca:3e:92:d2:14:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8D:FE:DB:CB:13:B8:99:55:0A:87:EE:33:A3:4B:1E:69:C8:33:41
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:5800::/40
Signature Algorithm: sha256WithRSAEncryption
cf:8e:21:8b:12:43:e4:bf:f5:9e:16:18:1d:d2:68:26:5b:e0:
97:88:c8:f0:4e:55:1c:46:44:ac:f8:94:60:20:b8:8e:4b:ac:
6e:c8:b3:f9:ed:95:46:59:11:80:30:d6:d4:b0:95:21:04:8f:
e1:b6:36:e5:d5:7a:aa:7a:ae:49:ed:48:73:03:50:e3:68:ab:
9b:4b:a2:c8:9f:a2:d1:41:79:17:a8:4c:c5:91:4c:91:41:bd:
40:35:ad:ae:6c:ca:8b:6b:13:5b:4d:04:f4:5e:26:bf:ac:f9:
d5:ae:2d:a7:30:04:48:b6:bd:f8:85:b0:e4:43:41:c1:55:5a:
6e:2a:31:6a:45:18:4a:9e:a6:d6:45:81:df:c8:ba:8a:4b:20:
b9:c8:ae:10:bb:4b:33:08:51:ae:9a:85:10:b6:9f:a7:58:85:
da:9a:49:f9:06:ea:27:42:5a:ca:80:ea:ff:71:a5:8f:de:b2:
d5:7d:c3:e9:92:99:41:f9:58:a0:4d:36:f8:b5:df:78:cf:ac:
85:3c:17:1d:f4:47:a7:4d:54:57:2c:39:4c:0d:02:c7:7b:d0:
f4:67:fc:4e:06:34:e1:c3:3e:f9:aa:70:01:0b:ed:e0:6c:5e:
d7:17:c2:98:67:0c:c6:0f:94:50:df:43:3e:5c:e8:48:4d:d0:
31:2b:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:22 2026 by rpki-client