Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/713a22fc-9451-4d48-9d05-5cdf9c1aa161.roa
File: 713a22fc-9451-4d48-9d05-5cdf9c1aa161.roa (raw, json)
Hash identifier: lJ8pqntJ+Ptb5vRVoMC7j8BOl/tmgOVB+s/9mME5+o0=
Subject key identifier: AD:53:8C:AE:07:C7:DC:C0:D1:0B:D3:08:C2:88:B4:F1:3C:D1:B0:20
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 62B41CE774B24083E05444C5F6E84DF598FAA5B9
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/713a22fc-9451-4d48-9d05-5cdf9c1aa161.roa
Signing time: Thu 30 Jul 2026 01:20:02 +0000
ROA not before: Thu 30 Jul 2026 01:20:02 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b4:1c:e7:74:b2:40:83:e0:54:44:c5:f6:e8:4d:f5:98:fa:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:02 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=43c5375fec28d5c39a44dca2163ee42a02591fa7da569f008aff8c0682ec145c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:77:86:b0:ce:ae:8d:4b:01:42:ce:1b:9d:
ad:e2:89:2c:ef:b5:fe:9b:e5:23:1e:e9:04:28:e4:
e0:52:d3:69:9d:27:56:f4:59:2d:22:2d:ad:cb:e1:
85:1c:c7:d3:aa:76:8e:06:4b:74:9b:14:7d:3b:f8:
53:e5:a1:bd:1e:0c:d1:6f:f6:3f:bb:f9:6b:78:8b:
b8:46:b0:3a:e9:b6:51:7e:48:73:73:f2:72:a1:58:
3f:8a:38:50:d9:31:c8:3e:86:b2:c7:46:e4:8a:8a:
6c:d0:2e:42:a0:0b:de:94:5e:55:ef:8a:e0:b7:3f:
9b:54:5c:db:f8:f1:91:cc:03:6a:cd:11:f4:62:87:
5c:dd:e0:c9:0b:50:08:c5:34:8a:43:08:34:0b:32:
0f:a3:2f:4a:91:dc:47:10:64:59:aa:12:2a:68:b8:
e7:1b:81:6c:56:f1:2f:41:3a:3f:e2:e5:86:38:e9:
80:d6:e8:46:11:97:4c:79:81:77:e4:73:b9:c3:1e:
23:f8:71:d1:25:d8:10:93:cb:25:28:d9:34:0c:42:
a4:c3:de:9b:af:c3:b2:4c:a3:8f:d2:8b:b2:90:d3:
e3:4f:f0:f9:12:b8:df:76:72:7a:63:76:f1:0e:29:
41:2e:c1:68:f7:b9:74:d8:51:c2:4f:ef:48:ac:e2:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:53:8C:AE:07:C7:DC:C0:D1:0B:D3:08:C2:88:B4:F1:3C:D1:B0:20
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/713a22fc-9451-4d48-9d05-5cdf9c1aa161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:8000::/36
Signature Algorithm: sha256WithRSAEncryption
6a:96:a5:b0:42:df:b2:2d:b3:86:a5:fd:49:c5:ad:22:90:ba:
e8:8a:79:15:d8:b7:c7:f2:68:19:33:46:05:2e:d9:97:cc:bb:
bb:24:a9:87:7c:03:77:20:b0:67:60:45:c9:cd:f2:71:f4:b6:
70:6b:c0:8d:94:84:95:19:16:57:65:77:5b:78:79:de:40:c2:
f0:ec:79:87:34:41:14:89:32:08:7c:a3:e6:c2:17:dc:fe:9f:
c8:0a:a4:56:6f:f1:0d:b2:2e:a2:9e:2b:e8:91:a9:da:aa:cb:
42:46:cd:ee:42:ee:fe:33:3d:86:04:2c:8a:19:63:61:d3:92:
9a:13:2e:85:1f:0a:23:5c:a0:f3:9d:42:41:66:9e:74:b5:9b:
14:4c:3c:dd:db:7f:17:7d:3c:a5:fb:3e:a4:7e:04:6c:90:62:
51:5c:1e:da:90:fe:f7:97:f4:1b:8c:72:70:ab:1b:9c:a5:0c:
69:03:7c:dc:ba:39:a1:bb:41:c2:64:30:ab:2a:c6:d8:ab:49:
18:59:5d:a6:9e:14:d2:15:4e:11:9b:08:2c:8c:35:08:21:ab:
ce:c8:37:72:8d:9b:c9:98:f6:33:49:f5:eb:a8:ed:df:b5:c0:
56:5f:7e:96:c7:56:03:37:dd:c4:b8:28:bc:b6:aa:44:3a:63:
4c:44:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:24 2026 by rpki-client