Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a58b6238-ef14-49df-aad0-16d332405e96.roa
File: a58b6238-ef14-49df-aad0-16d332405e96.roa (raw, json)
Hash identifier: j5if9dBqfHOxqy/V8MBTt7JynigpijCUIA6zOAa8Qlw=
Subject key identifier: 81:AA:39:83:B5:BC:65:EC:A2:B3:4A:33:CF:75:4A:5B:75:C6:D3:39
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 698CBDF3ED40ABBA4B265C4F6DEF185ECDA0CF7F
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a58b6238-ef14-49df-aad0-16d332405e96.roa
Signing time: Thu 30 Jul 2026 01:20:07 +0000
ROA not before: Thu 30 Jul 2026 01:20:07 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8c:bd:f3:ed:40:ab:ba:4b:26:5c:4f:6d:ef:18:5e:cd:a0:cf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:07 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=7963fbe8361426c9429425932a42d4cc82f8d9c2233fde6f94c98d107bac5070, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3e:f5:d3:96:a9:25:4e:f5:7a:cd:3d:62:63:
c0:b9:06:79:68:05:37:ba:5d:46:a1:a0:cc:ca:b4:
6d:b8:ec:45:ab:36:06:4b:5a:91:a0:fa:43:1c:84:
25:7c:e7:72:29:e7:c2:60:65:9d:1e:94:9b:da:98:
b6:04:31:eb:25:db:b3:e8:2b:b9:a4:91:1c:5f:b3:
b3:09:8e:5b:cb:af:f7:28:c7:5c:3b:db:1b:27:d0:
c7:0c:97:36:e4:be:e0:a0:c2:08:a0:ae:d2:24:04:
fe:0c:66:e0:58:bd:db:18:a2:ac:b1:b6:13:11:6e:
3b:43:48:be:d3:1b:22:55:c7:e9:62:7b:0c:2c:bd:
54:b4:d4:a7:f7:84:be:4d:79:eb:90:e0:61:4d:da:
6d:dc:c9:fb:2a:5a:1e:49:aa:1f:76:a5:34:9b:58:
1b:4a:7d:1e:98:86:57:f5:61:ac:63:d3:64:56:9e:
9a:89:3d:16:24:d2:1d:38:c9:ab:0b:0a:49:41:5c:
48:ff:c1:65:6e:c9:7a:e6:7d:8d:bc:9d:9f:94:a4:
83:c2:9f:42:16:38:71:0d:0a:9a:c1:92:f0:ca:c6:
3a:68:ba:5f:4a:6a:fe:60:7b:31:0a:93:db:47:c7:
ba:e0:b3:3d:5d:5a:b1:d1:2c:51:be:16:10:08:10:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:39:83:B5:BC:65:EC:A2:B3:4A:33:CF:75:4A:5B:75:C6:D3:39
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a58b6238-ef14-49df-aad0-16d332405e96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
ad:64:a0:f3:51:13:58:58:f2:45:fa:39:53:6a:41:90:0b:10:
21:d4:68:0c:20:82:bb:d4:7a:c1:10:25:21:d0:4a:4a:32:1d:
1a:44:bd:89:da:68:25:8e:f7:15:a2:5d:5d:10:7f:d4:86:ce:
3d:14:af:ea:58:4d:b6:4e:fe:03:d6:14:13:15:03:98:e3:2f:
93:95:40:0f:35:c9:2c:e7:15:34:d6:5b:ef:1d:3b:35:22:28:
a4:f0:a5:45:dc:ef:f3:c6:61:65:d8:b5:07:bc:c7:51:59:7f:
91:c9:f3:fb:e3:f6:88:21:51:7b:f6:4f:c4:1e:e2:90:3f:9e:
b4:cf:86:06:67:aa:44:48:6b:ed:0d:31:b1:bc:4c:6b:76:67:
d5:92:be:57:01:8e:39:1d:ce:f5:9d:c7:a9:0b:15:83:88:4b:
63:c6:fc:13:a7:4a:41:2b:65:ff:f2:4e:58:d3:85:bd:6c:76:
bd:6c:07:f8:2b:5e:a5:29:c8:00:11:1e:d1:94:cd:0b:9e:1f:
a2:69:c9:b4:e3:92:2d:eb:62:34:cb:c4:dd:47:38:66:ef:44:
56:2f:f5:7b:4e:7a:91:85:9c:57:35:e1:c6:ff:50:1d:ba:9c:
f7:7f:a4:28:01:1f:7b:41:13:99:ce:6d:67:b4:4b:9f:6c:c6:
57:53:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:16 2026 by rpki-client