Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/751d5a0a-c925-4787-ac94-98c23675f1ba.roa
File: 751d5a0a-c925-4787-ac94-98c23675f1ba.roa (raw, json)
Hash identifier: kSqd1lKhG8rmEp+lluWSzdgKI3wycTMNuLAUTc/o9zM=
Subject key identifier: EB:E7:95:C0:56:43:CE:1B:AE:C9:35:D2:45:1F:A5:73:4E:EA:D8:8F
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 5082393C1F8495EA364CE92D58042BB8C003EC0E
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/751d5a0a-c925-4787-ac94-98c23675f1ba.roa
Signing time: Thu 30 Jul 2026 01:30:37 +0000
ROA not before: Thu 30 Jul 2026 01:30:37 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:f840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:82:39:3c:1f:84:95:ea:36:4c:e9:2d:58:04:2b:b8:c0:03:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:37 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=99e37ea6374839100091d2644c93ddf8e811f6c719ec75a05239c52971ed5fd6, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:64:13:80:e3:3e:1b:e3:61:5d:35:74:b9:
90:3b:5f:99:89:69:f6:e1:cc:fd:18:36:04:df:1a:
8a:ac:e9:20:95:38:a9:4a:fd:12:b7:e3:4f:90:9c:
aa:c8:fc:bb:6e:ef:24:dc:16:ba:01:6b:3a:64:16:
e3:68:08:94:68:00:81:d7:2c:9e:f0:d9:5b:18:4b:
33:e3:72:85:1a:43:c9:f3:37:1b:7c:77:ce:a2:36:
51:89:df:a5:3f:64:93:63:75:60:ac:97:93:0e:ab:
ad:d7:5b:9a:ee:34:67:7c:17:9f:8d:13:4c:9a:f0:
f5:62:20:88:53:34:8a:79:93:1e:31:a1:f2:9b:a5:
46:a7:78:3b:30:2f:23:c3:35:78:1e:fb:2b:d8:62:
ef:57:99:6e:64:4d:1e:8f:ee:f4:1d:f4:e9:1f:7b:
2e:1d:99:78:7e:8f:59:d5:8e:34:69:c6:08:d1:84:
fd:37:8d:20:a6:c2:12:b6:5a:07:62:1e:d9:f9:33:
f9:d5:e9:bf:12:a0:ed:03:74:e5:89:a9:85:1a:c1:
0d:9e:d9:6f:65:b5:d7:11:41:87:68:31:12:5d:c7:
f5:ad:27:79:af:bf:c8:84:f4:01:97:66:fd:60:2b:
a5:e2:15:9f:22:b1:2f:b0:0f:aa:3c:cc:2b:58:1d:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E7:95:C0:56:43:CE:1B:AE:C9:35:D2:45:1F:A5:73:4E:EA:D8:8F
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/751d5a0a-c925-4787-ac94-98c23675f1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:f840::/48
Signature Algorithm: sha256WithRSAEncryption
5e:55:2f:15:ad:2c:d3:6f:48:b8:e7:a5:2a:30:ed:d4:d4:16:
04:c6:b3:5c:90:f4:2f:c0:d4:a6:0f:df:ab:e9:ec:23:d3:8f:
aa:a4:27:f2:03:a6:2f:f5:42:21:a1:f5:b1:2a:d4:8b:d3:c9:
b1:37:60:98:63:c1:2c:72:7b:b3:dc:f0:7d:fa:e4:59:b4:00:
5f:32:10:6b:7b:be:ff:49:40:93:97:c1:7e:a6:06:e3:c1:24:
22:a1:0b:cc:b9:d1:54:c5:c1:87:30:cf:18:ea:d4:0d:54:67:
df:29:56:b7:ae:60:ce:09:7a:6a:d0:1a:c0:cd:de:44:aa:3c:
39:bf:6c:da:f6:dd:85:0c:af:6a:05:31:6b:38:bd:c9:77:0c:
67:a7:18:51:2c:68:76:9d:f8:d7:0a:72:a6:42:f8:63:c3:1f:
6b:fa:dd:a2:2e:5e:d1:ea:3c:e0:1d:95:51:b0:33:bc:3c:a6:
e0:82:79:22:dd:71:fe:90:e2:51:b2:72:d7:f9:10:40:3d:2c:
de:a5:29:16:64:2f:31:30:a3:7a:0e:01:9b:de:cb:84:50:3d:
a8:bd:c4:f5:23:14:05:02:b4:38:93:6a:4e:0c:41:12:af:ff:
c7:6d:94:22:72:0b:e8:51:01:0f:02:47:d8:18:ca:4e:0b:18:
de:9d:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:08 2026 by rpki-client