Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
File: 4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa (raw, json)
Hash identifier: YhV7wI59uk7StK2sXG29Mp42I05zVSjf1yLO6ZhQVCo=
Subject key identifier: 56:8D:0D:26:DE:FA:00:A8:45:AE:FC:31:25:5D:DB:96:B7:34:D5:6E
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 229B31A8805060608AC423540D20666AA391F4F0
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
Signing time: Sat 04 Apr 2026 00:00:29 +0000
ROA not before: Sat 04 Apr 2026 00:00:29 +0000
ROA not after: Fri 03 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc7:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9b:31:a8:80:50:60:60:8a:c4:23:54:0d:20:66:6a:a3:91:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Apr 4 00:00:29 2026 GMT
Not After : Jul 3 23:59:59 2026 GMT
Subject: serialNumber=a12d6e3ff69ab37a15087f1537f38e9088b38bf11277ee4a28c7708374eaff05, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:c1:1f:5f:66:3b:9c:5f:1b:c1:e5:1b:29:
c8:25:7a:f9:27:e8:bb:c5:f8:ef:a9:29:f7:de:f4:
65:57:e0:a2:09:8a:f5:c0:94:f9:9a:b0:4a:ba:d3:
5f:99:47:d5:a3:36:24:16:07:2c:ab:79:66:f7:f2:
26:1b:77:00:8a:0f:da:59:09:06:ab:25:8b:ad:19:
46:17:df:57:2d:a5:27:b7:e0:62:23:4d:1c:68:e2:
20:06:80:52:99:a3:91:fa:a0:53:93:71:2a:60:99:
be:0c:4f:5b:34:aa:c3:6f:fc:49:54:9e:e6:fe:39:
75:54:75:38:6d:f1:fe:6c:15:41:c3:31:3c:71:a1:
50:19:89:2c:20:30:96:5a:37:7f:bc:5e:c5:28:81:
a8:0f:02:46:4f:7c:f1:3e:c4:cd:20:f8:19:d6:3e:
01:db:96:a3:34:df:d3:02:77:e2:df:a2:a8:46:fa:
5a:47:37:da:53:ca:ff:e4:47:5a:37:3c:37:93:a7:
f9:7a:1b:6a:c2:8a:03:00:c8:36:6f:66:38:28:a9:
33:75:5c:a0:1a:18:db:55:06:58:c7:b9:4c:41:31:
b1:8e:9e:70:67:b6:f7:85:d4:4c:2a:40:d5:eb:05:
e6:e1:d1:65:87:35:8f:1c:b4:23:c9:ff:81:54:dd:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:0D:26:DE:FA:00:A8:45:AE:FC:31:25:5D:DB:96:B7:34:D5:6E
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:dd:89:0c:1d:f9:35:0c:2d:d7:4f:48:bb:3e:38:69:af:8a:
5e:79:34:1f:87:9f:da:be:9f:71:c4:4e:98:55:ee:19:b2:99:
42:49:d6:43:be:66:21:57:b8:a3:1f:bf:b8:44:30:35:bc:76:
6e:7d:01:4a:7d:f0:31:55:05:45:d4:43:3e:e0:3f:09:22:07:
14:4b:0e:48:be:52:38:b8:d8:c7:14:ac:f5:9a:10:f9:76:f2:
f4:5c:85:30:5b:3e:08:83:3f:69:06:0f:6b:d1:e4:8d:6f:13:
68:24:d4:05:15:37:a2:51:b6:e4:d1:30:ad:b1:ea:5f:30:dd:
c1:9e:75:ee:02:97:a9:9b:00:1f:5e:cd:e0:71:95:80:64:1b:
27:6e:e5:e4:e2:2a:dc:85:56:d9:7b:03:fa:b6:7b:4a:d4:9a:
8a:47:30:a6:54:27:2e:c2:10:9c:a5:de:c7:5e:b7:24:15:f0:
d2:e1:90:d6:ef:2a:b1:d9:7c:4e:07:9f:ca:55:0c:0c:99:01:
da:82:f8:da:e0:f1:11:4a:7b:ff:75:b5:ee:5f:b8:50:7b:a6:
fe:19:8b:0c:a6:da:9e:28:7c:10:9b:af:01:03:86:df:3d:17:
c2:0f:40:4c:90:b4:c4:cd:41:64:25:95:0e:ec:cd:f0:f7:93:
a3:c4:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:35:24 2026 by rpki-client