Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa
File: a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa (raw, json)
Hash identifier: EjuSHu7jj4Zo/wxkaSjIz6/cOyyWqNeO9TTcb2Gz7cE=
Subject key identifier: 74:01:88:14:E0:15:B7:93:11:2A:B4:4E:09:47:89:D9:BC:7F:00:85
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 051E3DEE0F1AFAB06FFE7B3C3FF479CE8F7A9197
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa
Signing time: Thu 30 Jul 2026 01:20:04 +0000
ROA not before: Thu 30 Jul 2026 01:20:04 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc1:8400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1e:3d:ee:0f:1a:fa:b0:6f:fe:7b:3c:3f:f4:79:ce:8f:7a:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 30 01:20:04 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5cf0791a993fcdba2c419fb78022f68021d693bfdf2866798f830fc3b1d50da3, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:44:8d:65:63:53:30:dd:0b:77:d1:ed:ad:
4e:d4:a6:71:1f:20:d2:1d:82:92:0f:51:8b:52:f1:
8b:f3:51:c8:bd:e7:28:ad:64:1b:72:b0:cf:9d:1c:
ac:c5:e5:be:87:97:b7:c0:7a:7e:38:ff:16:1d:fb:
c6:de:7b:3c:74:f9:f0:3d:12:fa:44:a3:34:b7:a3:
50:33:5a:f4:a3:68:06:23:14:e3:dc:aa:42:42:99:
db:6b:3e:8d:2b:e5:1b:da:ba:42:39:db:25:a2:f7:
85:f1:af:1b:8f:7c:31:39:11:74:42:14:81:94:4d:
a8:8a:14:ef:cb:f7:3b:7c:72:c1:ae:81:39:7f:f3:
99:6c:a0:f9:6a:0c:27:d0:95:ae:9c:b3:e8:bf:c8:
d9:a9:cc:52:31:9b:e5:c0:c0:87:f1:ff:1b:5c:a5:
a4:9d:a2:c4:03:6d:4f:f6:d1:34:4d:05:36:61:2d:
ba:a5:09:7f:2c:18:9d:67:d9:de:0b:7c:2f:73:53:
ee:0d:94:4c:ae:fa:80:00:0a:76:dd:d8:ab:21:39:
84:8d:25:bf:95:f1:57:a0:1a:ee:42:f0:90:92:c8:
47:90:18:1e:a7:3d:e6:52:10:90:8b:e3:6f:22:49:
40:73:f0:2b:c3:b6:b8:e5:89:87:92:d6:c4:22:a9:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:88:14:E0:15:B7:93:11:2A:B4:4E:09:47:89:D9:BC:7F:00:85
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc1:8400::/38
Signature Algorithm: sha256WithRSAEncryption
4c:7e:6f:ff:82:9f:a0:8c:12:7d:3c:00:fc:6f:13:57:d0:c8:
d2:8f:11:48:8e:ce:40:16:f2:c7:08:27:d4:4d:c6:80:a3:9d:
ac:d9:3a:28:67:c2:61:43:08:06:6b:bc:34:c4:6f:9c:31:80:
54:b4:58:7e:d1:30:b3:c2:a4:5d:0b:6c:fe:80:51:32:d1:62:
9f:04:7a:5d:63:b0:24:74:50:6f:6b:d3:d7:c3:4d:86:13:2e:
b2:d7:12:d1:2a:69:4c:6f:fd:04:91:e4:6c:f2:0d:15:19:67:
69:f2:57:4c:e2:87:5a:8d:ad:a0:27:04:e5:c9:31:b1:62:79:
92:15:9c:5c:9c:a0:19:cc:42:b1:f1:17:e1:3c:e1:8f:16:91:
8f:68:64:cf:28:e6:61:54:ca:89:82:bf:5d:07:ab:50:68:74:
db:c3:67:84:d5:71:f3:9a:9b:8d:0d:61:6e:8a:71:a4:f4:69:
db:7a:13:ff:59:a0:0c:fe:a7:80:df:98:f3:07:1b:3d:7d:62:
e2:5b:f4:19:30:67:73:6c:fa:35:f2:77:aa:72:82:db:2e:b4:
70:d4:ac:00:29:d7:ce:a7:a7:63:b5:b8:f6:92:ab:f2:2f:34:
ff:d6:ea:73:fd:2c:08:59:45:2c:47:c4:f7:61:d5:12:f9:22:
b1:2c:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:31 2026 by rpki-client