Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9a1e6435-6342-4b18-94d7-27beb2ce0519.roa
File: 9a1e6435-6342-4b18-94d7-27beb2ce0519.roa (raw, json)
Hash identifier: 7SQdzp9GAbdq7s/sDNb/qYMjMS1lNm2bCJhUCmmqXjA=
Subject key identifier: 45:10:2F:0A:77:E5:14:BA:2C:FA:7E:87:95:E4:28:A2:A3:FF:AA:9C
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 1658BC0742B6D7A999BB1C99AC4CFE04522E0F19
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9a1e6435-6342-4b18-94d7-27beb2ce0519.roa
Signing time: Thu 30 Jul 2026 01:30:55 +0000
ROA not before: Thu 30 Jul 2026 01:30:55 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:a000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:58:bc:07:42:b6:d7:a9:99:bb:1c:99:ac:4c:fe:04:52:2e:0f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:30:55 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=f6e28b5c2d8efa176d9e4f72c34a1cdd476b1e26ee5e198e77a87c1f91e637c4, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:2c:47:d2:76:61:38:30:11:be:2c:d4:c3:
9c:bf:1e:f4:12:5f:07:ae:8c:48:9b:47:72:4c:66:
c6:a5:4d:3f:fb:82:cb:db:eb:33:fb:44:fb:77:23:
52:a6:8b:a9:fa:ae:20:33:01:62:91:52:88:f3:5b:
e2:e3:c0:ba:90:86:5f:be:d7:76:a9:cb:b3:2a:39:
f1:d0:9b:81:1f:1d:ad:e8:67:81:3a:be:4b:b4:5f:
ff:ce:35:16:58:43:1d:a4:1e:df:5a:11:56:89:7e:
0f:e2:6e:bf:11:cc:80:e2:73:35:9b:de:8e:27:1c:
e7:65:cf:11:69:c6:e5:69:80:32:1f:3c:26:c7:aa:
7e:da:66:37:fe:79:1a:68:27:df:15:1f:d0:19:be:
53:f6:b2:fd:4f:a2:78:fa:08:14:33:c6:80:d2:6a:
58:e0:39:cb:62:f1:d9:9a:4c:ff:c9:ea:78:0c:eb:
a2:ec:ba:26:6f:57:ee:f7:23:f0:53:35:d0:e4:9b:
c3:cc:df:f4:13:98:87:4f:9a:58:2a:b2:65:1a:db:
5a:1c:32:88:11:ce:48:9f:0e:d2:07:91:55:50:fd:
09:20:bc:52:b4:d3:d3:7e:e2:85:09:56:43:b7:25:
de:3d:53:8e:0f:5e:1e:61:3b:88:e3:b5:d8:76:f6:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:10:2F:0A:77:E5:14:BA:2C:FA:7E:87:95:E4:28:A2:A3:FF:AA:9C
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9a1e6435-6342-4b18-94d7-27beb2ce0519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:a000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:f7:4b:d5:64:0c:6d:4e:b7:39:95:d9:c5:f4:8e:39:dc:be:
cb:07:7c:06:af:3e:d8:de:49:73:69:31:c3:bd:a5:97:22:45:
82:f8:8c:87:b2:2b:08:ef:99:cb:7d:06:28:a4:b9:04:4f:c9:
8c:9c:68:e2:4c:26:61:81:e9:fa:41:13:4f:f2:0a:8d:0b:5e:
60:40:ff:03:56:66:68:0f:36:cb:fc:b3:18:3e:4a:14:9e:78:
ce:b2:6a:dd:50:e2:f6:6e:06:5c:3e:74:b5:aa:94:ea:95:21:
f6:73:39:7b:8e:e8:c8:52:ff:2c:5d:32:fa:ce:d1:5f:2f:1e:
fc:e5:6f:61:6b:c1:06:ec:99:87:c1:81:a1:35:5d:4c:95:33:
bd:b1:8d:2d:4f:06:c1:00:26:4b:34:71:1f:e5:7d:62:20:15:
f0:16:98:13:8c:ce:46:2f:41:d1:a8:d6:60:6d:6d:52:3c:c7:
83:22:72:c7:7f:95:42:f8:58:ad:c4:f9:69:7c:8d:5d:e7:5d:
b7:e2:66:e5:87:d4:98:0f:ce:b2:0d:9c:4f:ac:87:4a:46:2e:
d4:92:04:f0:72:c3:20:22:ba:b8:f7:53:83:79:3d:69:06:90:
f8:cb:82:80:d8:cc:5c:53:62:b4:b9:fa:06:fc:58:c6:a8:98:
a0:1b:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:41:49 2026 by rpki-client