Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa
File: 7cf0ad47-8bb3-480b-be13-5f3302af8307.roa (raw, json)
Hash identifier: 0v25SRTlc7Opbj6rQdgM3NK78z4FPZkRgeQ3FDeVE4Q=
Subject key identifier: 23:FF:76:52:B8:84:1E:92:8C:27:C4:62:66:56:50:FC:0C:E6:D3:F5
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 33F3E616BD33E04ECB48174E14BD4E0BD3BD1712
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa
Signing time: Thu 30 Jul 2026 01:30:33 +0000
ROA not before: Thu 30 Jul 2026 01:30:33 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f3:e6:16:bd:33:e0:4e:cb:48:17:4e:14:bd:4e:0b:d3:bd:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:33 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=16c404c4fcbb8e9ef3aafe99270c402699c4746af9167971f05263f7e1d6b0bd, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:7e:de:64:2b:4a:4b:a0:f0:3c:8f:67:7d:
a0:f8:c8:ec:fc:61:83:a3:54:a5:33:63:eb:e2:6e:
d3:9f:f3:22:f1:d7:8f:81:07:a9:d1:ab:2c:08:c4:
e0:91:19:16:9f:27:28:7d:cd:c3:f6:01:d4:cf:37:
a5:49:82:7c:87:ff:8a:cd:ef:82:80:5c:9b:75:29:
de:59:ae:6e:49:c0:a9:f7:11:77:49:75:5c:bc:62:
06:14:30:e2:02:c5:8b:4f:8c:58:40:bf:be:78:ca:
ec:40:ed:87:a4:03:25:19:cb:a5:fb:28:c6:d6:45:
4b:66:d1:2d:22:1e:b3:07:a4:0c:bb:87:a3:f1:fe:
f4:02:df:89:bd:24:6d:f2:40:1e:99:5c:bd:38:c9:
8f:b7:b5:6c:8a:41:f9:35:45:cd:16:9d:a5:ba:eb:
0a:f8:03:0b:e2:31:6f:08:ed:a1:a6:df:2c:58:ca:
2c:45:fc:2b:4a:4e:52:0a:ab:78:34:72:d9:88:e9:
04:2a:74:ba:27:e2:cd:70:14:6b:29:e0:4c:9c:d8:
e6:ea:be:18:c9:b0:ee:55:6b:fc:45:89:e2:7f:06:
d0:0c:26:da:f5:29:22:ed:d7:fb:31:32:a8:fa:68:
70:7e:13:d4:fe:f6:a4:f6:e5:fa:29:86:e3:47:ab:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FF:76:52:B8:84:1E:92:8C:27:C4:62:66:56:50:FC:0C:E6:D3:F5
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:e000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:ca:ef:48:3e:a4:49:73:a6:03:04:30:fe:57:61:d7:d1:79:
d9:b4:d2:90:1c:2d:99:86:cd:31:38:c3:da:6a:4a:83:7f:2b:
58:e9:35:17:2f:4b:cd:7f:40:5b:44:7e:26:41:09:c0:ab:2a:
e4:99:c6:43:a6:d5:54:72:be:67:53:1b:88:cc:2b:c1:fa:51:
b2:f4:6d:05:61:84:cd:23:48:ca:7e:9d:4c:ca:9f:cd:ec:4e:
a9:77:58:6c:2f:e0:a1:d8:f0:92:54:30:66:6f:83:ad:5a:9a:
7c:41:86:a9:2c:31:a3:13:17:c9:ef:33:4f:cf:9a:3e:d6:55:
11:2d:63:52:dc:49:41:4e:ec:a9:6c:58:1b:27:6c:55:24:fc:
2f:70:c9:6f:5d:9f:98:b2:08:04:cb:83:c9:5d:e5:ca:53:c2:
b6:0d:ad:97:80:23:a8:10:5f:cd:7b:45:98:e5:3c:ea:83:3f:
96:e3:42:5f:52:80:55:c0:5b:27:80:68:69:c5:c7:7a:3a:22:
cb:25:ae:5e:66:ad:5b:25:98:76:0b:8b:57:57:3e:38:66:c7:
91:6e:27:a0:ee:02:31:4c:3e:5f:33:93:6a:bb:66:bd:ac:4e:
54:2b:5d:d7:75:a3:24:73:6d:48:ad:09:73:84:ff:c8:eb:e0:
39:49:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client