Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/76596d4d-5093-4468-a590-5fe51a279b6f.roa
File: 76596d4d-5093-4468-a590-5fe51a279b6f.roa (raw, json)
Hash identifier: +OgvXB8BpXl2BQCGheaBGJXFfSN8LLeY7A/32c/GMlI=
Subject key identifier: 4E:1E:EE:3E:6B:90:89:55:3B:09:59:90:45:E7:F4:57:43:A3:1F:9C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 19E74414987ACECAF58F3C00B13D35DF6CA27386
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/76596d4d-5093-4468-a590-5fe51a279b6f.roa
Signing time: Thu 30 Jul 2026 01:30:13 +0000
ROA not before: Thu 30 Jul 2026 01:30:13 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:8800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e7:44:14:98:7a:ce:ca:f5:8f:3c:00:b1:3d:35:df:6c:a2:73:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:13 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=949948ca83670143aa2fa6adc58fd10a389d10e7bf9a415240bc68b3b288796a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:d5:cc:05:bc:b6:96:bd:08:b8:68:bb:02:
86:51:a3:a1:59:10:78:a0:ec:63:c3:87:4b:c0:7f:
3b:c2:4e:35:75:53:0c:78:26:3a:57:b8:c4:0f:95:
23:33:a9:9b:c4:2e:07:98:0c:68:08:f6:bf:fb:7c:
26:34:b8:de:62:6a:ba:07:12:54:83:e9:69:ed:13:
2a:c6:aa:66:5f:72:55:ad:cb:ce:29:e5:28:cc:ac:
d6:c2:5b:cd:44:53:c0:02:5c:60:32:7c:38:05:17:
6e:eb:04:b1:c6:4b:75:8d:f9:1a:63:83:82:58:67:
d5:d3:c3:db:3d:2f:db:72:50:66:e0:69:fb:55:c7:
ca:3b:16:73:4c:a8:36:b3:e7:57:8c:f1:3b:d6:71:
b7:e1:7e:23:da:a1:76:5e:7a:b1:4b:c3:3f:14:16:
26:aa:1c:c9:00:1c:97:61:f4:51:ad:34:b3:38:b5:
fc:f0:96:5c:ee:e4:ec:02:60:46:1e:c3:d5:20:38:
33:7c:0c:16:b7:c0:3f:b1:a4:2d:01:a7:f2:2d:a6:
88:ae:ed:60:ec:43:c9:62:a4:0c:a4:6a:65:3d:a0:
2b:6d:18:cb:10:30:62:60:e5:29:0f:06:6b:8f:61:
4a:50:61:62:47:26:c3:12:2b:61:49:ac:e1:47:14:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1E:EE:3E:6B:90:89:55:3B:09:59:90:45:E7:F4:57:43:A3:1F:9C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/76596d4d-5093-4468-a590-5fe51a279b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:8800::/40
Signature Algorithm: sha256WithRSAEncryption
5b:02:e0:5b:11:e1:b3:2e:27:6a:bc:c4:24:5c:46:86:96:5e:
73:b7:52:16:05:73:df:71:76:e3:5d:aa:d9:86:71:2b:f2:ba:
8a:61:e4:07:0c:da:e7:42:51:a5:8a:8c:e7:18:b5:b9:2a:10:
c6:e4:f1:8a:c7:1f:2d:a8:c5:e3:e7:84:3c:49:36:69:dc:03:
52:33:0c:52:30:65:4d:e2:cc:38:9f:89:ee:92:ab:5e:77:83:
01:33:56:55:0a:3a:79:9b:1e:3c:a4:5f:09:57:55:e9:2a:b8:
0c:fe:99:37:1e:79:35:8a:fa:73:f3:41:06:3f:ce:fa:bd:91:
26:34:ae:ea:a1:4e:41:09:5a:2e:39:a0:3e:8b:cb:d9:6a:75:
5a:8b:8b:50:e9:67:60:20:44:2c:79:09:44:32:d3:a2:1f:89:
25:86:65:5c:a4:15:58:99:03:35:5c:97:38:f5:05:b4:36:d3:
00:98:6c:6f:81:a7:5f:73:b0:82:51:16:36:5c:c5:4b:01:b9:
bc:9d:bc:e0:56:53:e8:63:0b:ec:9b:35:c5:5a:f1:6e:4c:1b:
c7:ae:e5:dc:ad:0d:c0:b2:9d:42:49:11:05:48:ca:53:f2:21:
ba:85:b7:e2:35:58:98:10:7f:52:96:07:f9:ce:77:36:7b:00:
dd:d7:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:02:56 2026 by rpki-client