Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/698aa0c9-36c3-4a47-847c-0c241221ba32.roa
File: 698aa0c9-36c3-4a47-847c-0c241221ba32.roa (raw, json)
Hash identifier: I9qC53TBZ2i6zmJBDE6QQ08oiBWIUDs+VvY+Xa+vJMg=
Subject key identifier: 1B:BC:4A:F2:CB:46:34:E0:63:01:99:64:FD:2F:91:49:13:B3:C1:5A
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 714D169FC54005AFEF50FAD6C542C89AD9BA1AD3
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/698aa0c9-36c3-4a47-847c-0c241221ba32.roa
Signing time: Thu 02 Jul 2026 00:00:35 +0000
ROA not before: Thu 02 Jul 2026 00:00:35 +0000
ROA not after: Wed 30 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc6:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:4d:16:9f:c5:40:05:af:ef:50:fa:d6:c5:42:c8:9a:d9:ba:1a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 2 00:00:35 2026 GMT
Not After : Sep 30 23:59:59 2026 GMT
Subject: serialNumber=381e73b87c965ce1094d3f42e252ceda46976c3a607c9a3766ef7eef7d487e2c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:e3:36:f0:36:cd:61:8f:bc:56:dc:31:18:
f4:0f:ed:a9:2b:cc:18:2f:02:92:3f:2c:36:97:d5:
4c:51:3c:fe:64:b2:c6:c6:fa:a5:6c:57:d0:2e:91:
0f:38:63:e5:06:e1:06:cf:83:29:40:40:ad:20:2c:
fc:6b:13:b9:73:c0:64:59:a9:4e:92:f9:05:79:2a:
50:5e:db:5a:de:70:5f:cc:97:ef:b3:db:de:37:10:
ee:c4:20:9c:08:3a:d0:7c:9f:66:e6:f7:04:ee:50:
a4:b7:37:3c:a4:cd:ea:3e:42:f2:3d:98:99:ef:5e:
52:ec:1e:ac:39:96:f8:5b:da:e9:73:11:1e:d7:ee:
7e:8a:14:62:78:46:15:d1:be:1b:67:50:ad:96:14:
b2:60:67:4f:a1:f4:fd:3d:b9:fc:45:8e:8b:f9:8d:
89:5b:36:65:0b:58:0c:7c:48:67:2e:b2:a4:e6:16:
57:3d:a7:76:a0:31:4d:a6:c7:ee:b0:c9:1d:10:53:
50:b2:4b:d6:4e:eb:8a:d9:3a:43:d0:4b:a2:4d:f3:
62:27:fe:71:b0:e6:ba:a3:83:3c:58:1b:0f:8d:98:
4a:26:5a:c8:9a:40:1e:96:b3:8d:7a:db:b2:5e:77:
82:f6:2e:67:4e:b0:58:30:0c:e6:c1:5c:99:e3:42:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:4A:F2:CB:46:34:E0:63:01:99:64:FD:2F:91:49:13:B3:C1:5A
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/698aa0c9-36c3-4a47-847c-0c241221ba32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc6:1::/48
Signature Algorithm: sha256WithRSAEncryption
0d:d0:d8:44:54:bb:45:3e:05:43:5e:68:75:2f:e1:c5:bd:42:
ae:c3:79:98:66:70:4e:33:74:6f:6b:e2:15:63:34:8d:db:d4:
3a:2d:95:b8:81:de:ab:85:66:76:8f:27:4e:f1:2d:51:64:20:
2d:34:21:9f:c5:da:91:ff:2a:d1:87:f2:7b:a1:be:5a:09:cc:
2b:35:52:8f:61:34:fc:8d:45:96:de:d2:ed:90:a6:16:8b:53:
84:01:ec:b7:28:b2:27:a4:3a:6d:3b:3b:f0:31:8e:b5:d8:f1:
af:8f:fd:57:b4:06:29:82:90:9d:01:4a:c7:26:b6:6e:6e:7e:
0b:ee:13:8f:de:2f:a4:44:75:2d:20:88:64:9e:ad:22:56:7f:
d2:80:7b:25:cb:a9:7b:b8:95:f4:2d:db:53:d6:3d:5d:e8:68:
7f:d6:d9:d1:0f:73:3b:94:f8:c8:df:a7:47:13:d3:b8:f5:61:
0f:f4:b0:bf:96:e9:0a:43:6c:44:2b:bf:39:f0:5c:e8:d3:03:
6f:38:1e:cc:f1:73:e1:d6:dd:c2:52:8c:ef:34:c4:1b:c8:6a:
e3:01:ea:cc:13:0d:da:97:87:35:38:c3:b2:47:7d:09:48:89:
a7:ff:4c:97:3b:d2:ac:76:32:be:8a:ad:ae:03:b4:ae:1d:42:
5e:f6:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:02 2026 by rpki-client