Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa
File: 695b2c0d-a8e0-45bc-878b-176c66a934f6.roa (raw, json)
Hash identifier: sjLCx4McV5BdueVs5wcLvga72zQNrBdNuTMkdvvvV8o=
Subject key identifier: 3D:C2:C7:3E:72:77:C1:16:3C:AC:BF:D7:75:9A:C2:07:1B:46:F4:67
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 60D25767C364C594E5CA7AA79439793DD7248474
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa
Signing time: Thu 30 Jul 2026 01:20:25 +0000
ROA not before: Thu 30 Jul 2026 01:20:25 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:28c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d2:57:67:c3:64:c5:94:e5:ca:7a:a7:94:39:79:3d:d7:24:84:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:25 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=de22b07083c8aab7a06052a14f934cdf3f0d789389fcc8ae7a44f039cdb451d5, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:6a:90:86:39:47:dd:ea:7f:cf:dd:0f:54:
68:a7:82:1c:cd:54:78:62:8a:e7:8a:bf:2e:28:8a:
84:af:ed:71:3a:b0:d3:78:dc:3e:89:f0:72:a9:82:
2d:0c:ed:31:2a:38:c3:a1:ad:6e:09:37:a3:bf:99:
c5:18:66:5e:3d:bc:27:8b:77:d1:6f:96:2f:05:76:
d6:16:d9:f2:31:2f:7a:c0:b2:78:fb:aa:f0:f1:29:
16:55:8d:0e:8f:ec:7e:bd:8d:c5:58:fa:2f:e1:dd:
51:4e:91:f2:e1:05:e4:6a:fd:6c:b0:00:d3:db:e4:
18:c6:f0:73:1b:72:f3:fb:12:f8:9a:c0:b6:a8:ef:
81:ee:66:63:03:af:3b:fc:49:6c:0a:19:b5:d4:09:
b1:c8:2b:46:42:91:05:92:d6:a7:06:16:35:4b:10:
41:9f:e8:d9:cb:39:17:0c:27:60:2f:96:00:ee:32:
cf:82:9c:21:f0:56:43:65:aa:69:1f:f3:f0:8c:58:
cf:fd:90:8b:88:9b:36:8f:dc:b6:25:72:47:3e:56:
42:18:ed:8d:38:5d:55:58:3e:03:06:f5:7a:57:31:
4d:cf:2a:1c:e7:b4:1c:0e:06:8a:3c:75:bb:87:d8:
88:a9:75:83:81:f6:65:a1:77:ab:6e:05:94:cd:d9:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C2:C7:3E:72:77:C1:16:3C:AC:BF:D7:75:9A:C2:07:1B:46:F4:67
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
85:40:ff:46:f8:47:86:27:59:9c:ee:ca:eb:f3:a6:2a:b8:72:
a4:2a:f7:26:3b:db:ff:18:3b:3f:0b:92:b6:a9:31:e8:72:fb:
ce:11:a9:34:64:ca:4c:ca:f7:84:1c:f2:8f:c8:f1:1f:a3:92:
e0:65:1b:a8:b7:05:83:97:f6:f9:12:f3:5e:5c:a2:77:2c:77:
8e:a5:3a:e9:cf:05:8b:23:db:48:f7:89:c9:f7:c2:5f:7f:a9:
c1:92:87:d1:d2:af:36:13:22:03:08:db:50:81:3f:1c:83:05:
2d:fe:a1:37:6b:f7:15:bb:8e:ea:b7:ef:c9:6f:4f:fd:84:f2:
ea:e5:a1:b5:6f:65:99:4b:c8:ab:1a:9d:56:9d:54:a5:8c:80:
d4:0a:44:95:cd:7f:06:8f:15:f7:43:e0:01:79:b7:e4:e2:f6:
af:56:ad:81:ec:3a:0a:d6:c7:cc:1a:d1:5c:74:9e:56:e6:44:
a4:a7:56:18:6d:88:f9:f6:34:c5:64:cc:3d:ef:68:d9:16:9c:
dc:8e:b2:16:9e:58:6a:71:40:a6:84:14:40:34:37:39:c6:9a:
43:d2:8b:90:77:a7:3d:ad:09:70:06:b1:52:b4:d3:54:4c:6c:
39:69:ba:fb:89:b9:c8:a5:70:35:09:2a:88:79:60:ca:44:d7:
f2:1f:a9:e7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUYNJXZ8NkxZTlynqnlDl5PdckhHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl
Nzk2NTVkMDAeFw0yNjA3MzAwMTIwMjVaFw0yNjEwMjgyMzU5NTlaMHoxSTBHBgNV
BAUTQGRlMjJiMDcwODNjOGFhYjdhMDYwNTJhMTRmOTM0Y2RmM2YwZDc4OTM4OWZj
YzhhZTdhNDRmMDM5Y2RiNDUxZDUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3
Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKsTapCGOUfd6n/P3Q9UaKeCHM1UeGKK54q/LiiKhK/tcTqw03jcPonwcqmC
LQztMSo4w6Gtbgk3o7+ZxRhmXj28J4t30W+WLwV21hbZ8jEvesCyePuq8PEpFlWN
Do/sfr2NxVj6L+HdUU6R8uEF5Gr9bLAA09vkGMbwcxty8/sS+JrAtqjvge5mYwOv
O/xJbAoZtdQJscgrRkKRBZLWpwYWNUsQQZ/o2cs5FwwnYC+WAO4yz4KcIfBWQ2Wq
aR/z8IxYz/2Qi4ibNo/ctiVyRz5WQhjtjThdVVg+Awb1elcxTc8qHOe0HA4Gijx1
u4fYiKl1g4H2ZaF3q24FlM3Zd7UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ9wsc+
cnfBFjysv9d1msIHG0b0ZzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV
0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh
Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv
Njk1YjJjMGQtYThlMC00NWJjLTg3OGItMTc2YzY2YTkzNGY2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1
NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8co
wDANBgkqhkiG9w0BAQsFAAOCAQEAhUD/RvhHhidZnO7K6/OmKrhypCr3Jjvb/xg7
PwuStqkx6HL7zhGpNGTKTMr3hBzyj8jxH6OS4GUbqLcFg5f2+RLzXlyidyx3jqU6
6c8FiyPbSPeJyffCX3+pwZKH0dKvNhMiAwjbUIE/HIMFLf6hN2v3FbuO6rfvyW9P
/YTy6uWhtW9lmUvIqxqdVp1UpYyA1ApElc1/Bo8V90PgAXm35OL2r1atgew6CtbH
zBrRXHSeVuZEpKdWGG2I+fY0xWTMPe9o2Rac3I6yFp5YanFApoQUQDQ3OcaaQ9KL
kHenPa0JcAaxUrTTVExsOWm6+4m5yKVwNQkqiHlgykTX8h+p5w==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:28 2026 by rpki-client