Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b104617-be96-4130-b1b4-dbe8facd0109.roa
File: 6b104617-be96-4130-b1b4-dbe8facd0109.roa (raw, json)
Hash identifier: qW/tZIASCcNeiQBTU9qWiKkLgcD7Znlfh25mi145JYU=
Subject key identifier: 36:F9:7F:F0:A4:34:21:68:83:03:28:C6:2A:86:29:8A:1F:19:BC:9F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1A9A8648EB95DFFA2D3A0EF37EA3F1CBBA8C769B
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b104617-be96-4130-b1b4-dbe8facd0109.roa
Signing time: Thu 30 Jul 2026 01:20:28 +0000
ROA not before: Thu 30 Jul 2026 01:20:28 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9a:86:48:eb:95:df:fa:2d:3a:0e:f3:7e:a3:f1:cb:ba:8c:76:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:28 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=0a71c4e2ff54f17083a7b99148620ed0cdfa718bb184093f50f12cda140eea0f, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:10:d8:c5:6c:1a:56:3e:17:a9:d5:13:18:
5b:72:ab:8c:5c:36:31:11:1a:a2:e7:20:fd:11:30:
5f:71:67:98:7b:5b:a1:5e:83:7d:be:1c:97:31:8b:
83:31:cf:e2:a5:06:1d:4d:dc:e9:8c:d9:98:d3:f7:
ac:bc:bd:c5:59:5a:fd:9c:7b:7a:25:6e:70:b1:d2:
aa:dd:60:8a:9c:12:65:41:8b:6c:c7:dd:5f:59:21:
5e:12:68:16:db:e5:c5:2c:21:3b:e3:4c:ef:4b:63:
8e:7e:ac:6e:34:10:0b:b0:1e:57:3f:06:0d:98:65:
61:eb:be:71:73:00:65:93:68:e4:a3:1f:5d:40:a8:
de:50:61:f5:cc:83:73:cb:68:31:1e:c5:d2:1b:f3:
9e:ab:e5:09:e4:55:57:aa:98:70:99:2a:69:d4:6f:
bc:61:8f:a5:f1:c9:18:8f:0e:b3:f4:78:d3:31:ac:
15:b6:6c:fa:3f:e9:8e:be:aa:48:1a:45:0a:35:76:
9c:1e:d8:e9:05:2a:6f:e9:a8:51:86:1c:17:42:aa:
06:52:ac:a4:c5:0d:3c:7a:39:9f:5c:60:78:93:b7:
3e:dd:4d:23:4d:c6:40:61:c6:af:7e:35:a0:3f:17:
2a:ba:ea:96:6a:65:e4:0b:56:23:a0:67:f2:86:5c:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:7F:F0:A4:34:21:68:83:03:28:C6:2A:86:29:8A:1F:19:BC:9F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b104617-be96-4130-b1b4-dbe8facd0109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:c000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:dc:5c:61:4f:10:54:d0:e9:49:2a:59:4c:57:5b:e4:40:80:
f7:6a:91:58:bf:48:b0:78:40:e3:62:7b:1a:fd:f5:f9:74:fc:
2a:ad:6d:8c:9d:fe:12:a9:8b:e5:2a:e4:fd:77:4b:2a:43:21:
97:61:16:09:5f:6b:39:49:8f:14:19:84:1e:7e:e2:88:59:9e:
69:87:b9:df:71:91:a2:8b:a6:fa:3c:75:65:cb:ee:e3:aa:c5:
bc:d7:e2:53:4a:c0:33:3c:8b:9e:67:9d:99:e7:59:95:35:37:
34:e0:fa:a3:52:e8:0f:60:65:43:2c:c8:6f:c3:6b:23:96:70:
27:03:20:ab:6b:e1:e9:45:0e:98:f4:a7:76:a3:63:93:6a:ee:
be:3d:cc:b6:5e:eb:cd:a5:0b:ce:7b:4e:87:d2:65:64:f0:09:
6f:7c:bc:15:4f:d4:5d:a1:a6:cb:fc:e8:a1:fd:d8:b4:87:e6:
5e:d9:0f:12:db:cf:bf:78:92:8e:b5:08:34:47:b5:6e:97:f7:
44:71:15:66:f7:4f:39:36:24:90:b7:1e:5f:70:e7:3a:13:3d:
d9:a7:b9:72:a4:29:ec:25:9a:78:b6:98:21:0f:f3:70:c6:5c:
86:0a:ba:d0:65:09:eb:46:fa:72:ca:1f:cb:c3:3a:f3:a6:6c:
4a:32:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:23 2026 by rpki-client